Clear by design

Privacy Policy

Your calendar connection belongs to you.

Last updated:

Contempleau is a native iPhone client for a WebCalendar installation you choose. The app connects directly to that installation, rather than routing calendar API traffic through a Contempleau calendar service. This policy covers the app and this public website; your calendar server has its own operator and practices.

Information sent to your calendar server

When you sign in, the app sends your username, password, and device name to your selected WebCalendar server over HTTPS. The server issues a device token, which the app uses as a bearer token for subsequent protected requests. The app does not persist your password.

The app requests your profile and calendar events. Creating or editing an event sends the submitted event information, such as title, date, time, duration, location, and description, to that server. The server also receives ordinary connection information such as your IP address, and may retain access logs.

Information stored on your iPhone

  • Device tokens, with their server, account, and expiration information, use the system Keychain with device-only, when-unlocked storage. They are not synchronized through iCloud Keychain.
  • Nonsecret preferences include server/account selection and per-server username hints. Preferences do not store passwords or bearer tokens.
  • Loaded events and open editor drafts are held in memory. The app does not provide a persistent offline calendar database or persist drafts after the editor is closed.

Independent server operators

Your server operator controls server access, permissions, logs, retention, backups, account deletion, and calendar data. Administrators and other users may have access according to the server configuration and event permissions. Consult the operator’s own privacy information.

Choosing a server does not make its operator a partner of the Contempleau developer. The app does not send calendar credentials or content to the developer unless you choose a server the developer separately operates. A developer-operated calendar service needs its own accurate privacy information, including its retention and deletion practices; this website does not supply that information or offer a hosted calendar service.

Analytics, tracking, and Apple services

The app adds no developer-operated analytics, advertising, tracking SDKs, crash-reporting service, or telemetry. It does not sell calendar data or use it for advertising.

Apple platform services, including the App Store, TestFlight, and diagnostics, may process information under Apple’s policies and your device settings. They are separate from the app’s direct WebCalendar API connection.

Sign-out, access, and deletion

Signing out removes the selected saved token locally and attempts to revoke it on the server. If local Keychain removal fails, the app reports the failure so you can retry. If server revocation cannot be confirmed, the app explains that local sign-out occurred without confirmed revocation; contact your server administrator to revoke the token.

Sign-out does not delete your remote account or events. It does not necessarily remove every nonsecret preference or credentials saved for other servers. Changing servers also does not delete those remote accounts or all other saved credentials.

Contact each relevant server operator for access, correction, deletion, token revocation, or information about retained calendar data, logs, and backups. Contempleau does not provide account registration or administer independent installations.

Website hosting and requests

This static website is prepared for hosting on Amazon Web Services (AWS), using CloudFront and a private S3 bucket, with AWS WAF for request protection. Website requests are distinct from calendar API traffic. AWS receives connection and request information, such as IP address, requested path, and browser request headers, to deliver and protect the website.

The repository’s hosting configuration does not enable CloudFront access logs, S3 server access logs, WAF request logging or request sampling. It enables aggregate security metrics. AWS may process service and operational information under its own policies. This is not a claim that AWS receives or retains no information.

These pages contain no analytics scripts, advertising, external fonts, tracking cookies, or contact-form backend. Hosting settings and actual operator practices must be reviewed before publication and whenever they change.

Support correspondence

If you email support, you provide your email address and the contents and attachments of your message. The intended use is to respond to your request and troubleshoot the app, not for advertising. Email providers involved in sending, delivering, and receiving mail process those messages.

The support mailbox provider, delivery/replies, and correspondence retention/deletion practices have not yet been verified for launch. No particular provider or retention period is asserted here. Ask the contact below about handling or deleting support correspondence; requests concerning calendar-server data belong with that server’s operator.

Do not send passwords, bearer tokens, or private calendar content. Redact identifying or private information from screenshots and error details.

Changes and privacy contact

Updates will be published here with a revised date. For app privacy questions or support-correspondence requests, contact support@contempleau.com. For calendar-server information, contact your server administrator.

This is the proposed privacy/support address. Mailbox delivery and replies have not yet been verified.

Visit Support for setup and troubleshooting.