Joshua & Company Inc. ("we", "us") develops the Calendar+ family of Android applications. This policy applies only to the free edition of Calendar+, distributed on Google Play under the package name com.joshy21.vera.free.calendarplus, together with the home-screen widgets it installs.
The paid edition of Calendar+ (com.joshy21.vera.calendarplus) contains no advertising software and is covered by a separate privacy policy.
Calendar+ is a client for the calendars already configured on your Android device. We do not host a calendar service, we do not operate an account system, and we have no servers that receive your calendar content. Where the app talks to the network, it talks to Google services described in section 4.
The app reads and writes events, calendars, reminders and attendees through Android's Calendar Provider — the same store that the built-in calendar app uses. This content stays on your device and syncs only through the account providers you have already set up (Google, Exchange, local calendars, and so on). It is never transmitted to us, and it is never sent to advertising or analytics services.
With your permission, the app reads your contacts for two purposes only: to autocomplete attendee names and email addresses while you are editing an event, and to display a contact's photo next to their name. Contact data is looked up on the device as you type. It is not collected, stored on our side, or shared.
If you attach an image to an event, the image is selected through the Android system photo picker and handled locally by the app. The app does not scan your photo library and does not upload images to us.
Your preferences (themes, colors, view options, widget layouts, the time zone you have chosen, purchase status) are stored in the app's private storage on the device. Because the app enables Android's backup service, these settings may be included in the device backup that Android makes to your own Google account. That backup is controlled by your device settings, not by us.
The app uses Firebase Crashlytics to report crashes and selected non-fatal errors (for example, a failed calendar query) so that we can fix them. A report may contain the exception and stack trace, the app version, the device model, the operating system version, and a Crashlytics-generated installation identifier. It does not contain your events, contacts, photos, or the contents of anything you typed.
The app uses Google Analytics for Firebase to understand how the app is used in aggregate — for example which screen a feature was used from, how many days have passed since installation, and whether an ad was interacted with. Event parameters we send are limited to values of that kind. No event titles, attendee details, or other calendar content is ever sent.
The app also uses Firebase Remote Config to adjust settings such as ad frequency and promotional messages without shipping a new release.
The free edition shows full-screen interstitial and app-open ads served by Google AdMob. To serve, cap and measure those ads, the Google Mobile Ads SDK processes your device's advertising ID (a resettable identifier), approximate device and network information, and ad interaction events. See section 5 for your choices.
Upgrading to the ad-free version is handled by Google Play Billing. The purchase itself is processed by Google; we receive no payment card details. The app stores only a local flag recording that the upgrade is active.
| Permission | Why the app requests it |
|---|---|
| Read Calendar / Write Calendar | The core function: showing, creating and editing your events and calendars. |
| Read Contacts | Attendee autocomplete and contact photos while editing an event. Optional — the app works without it. |
| Accounts (get / manage accounts) | Listing the calendar accounts on the device so you can choose which calendars to display and which account a new event belongs to. |
| Notifications | Delivering the event reminders you have configured. |
| Exact alarms | Firing reminders at the exact minute you set, rather than at a time the system finds convenient. |
| Run at startup | Re-registering pending reminders and refreshing widgets after the device reboots. |
| Internet / Network state | Loading ads, crash reports, analytics and remote configuration; checking connectivity before doing so. |
| Vibrate / Wake lock | Reminder vibration, and waking the screen for a reminder. |
| Storage (Android 12 and older) | Legacy support for saving and reading attached images on older Android versions. On Android 13 and newer the system photo picker is used instead and no storage permission is requested. |
| Billing | The in-app purchase that removes ads. |
| Advertising ID | Required by the Google Mobile Ads SDK to serve and measure ads. |
These are the only third parties the app communicates with. Each is operated by Google and processes data under Google's own terms.
| Service | Purpose | Typical data |
|---|---|---|
| Google AdMob (Google Mobile Ads SDK) | Serving interstitial and app-open ads | Advertising ID, IP address, device and network attributes, ad events |
| Google User Messaging Platform (UMP) | Collecting and storing your consent choice where required | Consent status, coarse region signal |
| Google Analytics for Firebase | Aggregate usage measurement | App instance ID, device and app version, feature-usage events |
| Firebase Crashlytics | Crash and error diagnostics | Stack traces, app version, device model, OS version, installation ID |
| Firebase Remote Config | Adjusting app settings remotely | App instance ID, app version, device language and country |
| Google Play Billing | Processing the ad-free purchase | Purchase token and product identifier (handled by Google Play) |
| Google Play In-App Review | Showing the Play Store's rating prompt inside the app | Handled entirely by Google Play; we receive no data |
Google's handling of this data is described in the Google Privacy Policy, and the ad technology providers involved are listed in Google's ad technology provider list.
Remove the ads. The in-app upgrade removes advertising from the app. Once it is active, the ad and analytics components are no longer used.
Consent in the EEA, the UK and Switzerland. On first launch in these regions the app presents a consent form provided by Google's User Messaging Platform. Your choice is respected as follows:
You can reopen the consent form at any time from the app: Menu → Info → GDPR consent. The entry is shown when the app determines you are in a region where consent applies.
Device-level controls. On Android you can reset or delete your advertising ID, and opt out of ads personalization, under Settings → Privacy → Ads (the exact path varies by manufacturer and version). You can also revoke the calendar, contacts and notification permissions at any time in the system app settings; the related features simply stop working.
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to withdraw consent, and to lodge a complaint with a supervisory authority. Residents of California have the rights to know, delete, correct and to opt out of "sale" or "sharing" of personal information — we do not sell personal information, and where advertising counts as "sharing", the controls in section 5 are the opt-out.
Because we hold no account and no copy of your data, most requests are satisfied directly on the device: uninstalling the app removes what it stored, and revoking a permission stops the corresponding processing. For anything else, write to calendarplus.app.help@gmail.com and we will respond within 30 days. Requests concerning data held by Google (advertising, analytics, crash reports) can also be directed to Google using the links in section 4.
Calendar+ is a general-audience productivity app. It is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from them. If you believe a child has provided personal data through the app, contact us and we will act on it.
Data the app stores locally is kept in the app's private storage, which Android isolates from other applications, and on the device encryption your Android version provides. All network communication with the Google services listed above uses encrypted connections. No method of transmission or storage is completely secure, but because we hold no central copy of your calendar data, there is no server-side store of it to breach.
The Google services above may process data on servers outside your country, including in the United States. Google states that it relies on the European Commission's Standard Contractual Clauses and equivalent mechanisms for such transfers.
We may update this policy to reflect changes in the app or in applicable law. The effective date at the top is always current, and material changes — for example a new category of collected data — will be announced in the app or in the Google Play listing before they take effect.
Joshua & Company Inc.
Email: calendarplus.app.help@gmail.com