Privacy Policy

Kalby is a private calendar for families. This policy explains what we collect, why, and what we never do with it. “Kalby,” “we” and “us” mean the people who run the Kalby app and the website at kalby.app.

The short version: your family's calendar is visible only to the people in your family. We don't sell your information, we don't show ads, and we don't use tracking or analytics tools.

What we collect

• Your email address, so you can sign in. We email you a 6-digit code instead of using passwords.
• Your family's details that you enter: the family name, each person's first name and color (and birthday, if you add it), and who is a grown-up or a kid. Kids can be added as a name and color only, with no email or login.
• Your calendar: event titles, dates and times, who each event is for, repeat settings, reminders, and any location or notes you add.
• Invites: the email address of anyone you invite to your family, so we can send them the invite and let them in.
• Linked calendars (optional): if you link an outside calendar (like Google, Zoho or Outlook), we store its private address and a copy of its upcoming events so they can appear in your lane. The address is visible only to you.
• Reminder settings (optional): if you turn on reminders, your phone or browser gives us a notification address so we can send you alerts. It doesn't include your phone number or location.
• Photos you choose to import (optional): when you use Add from a photo, the picture you pick (for example a team schedule) is sent to our AI provider to read the events on it. We don't keep the photo; we only record that an import happened, to count against your family's monthly limit.
• How you found us (optional): when you create a family you can tell us how you heard about Kalby. If you came from another family's “Tell a friend” link, we note which family sent it. We use this only to understand how Kalby grows.
• Error reports: if something goes wrong in the app, it sends us a short technical report (the screen, the error message, and the kind of browser or device) so we can fix it. It doesn't include your events.

We don't collect your location, contacts, or anything from your device beyond what's listed here, and we only see a photo when you choose to import one. A few display preferences (light or dark mode, zoom level, who's hidden on your screen) are saved only on your own device.

How we use it

• To run Kalby: show your family's calendar to your family, keep it in sync, and send the reminders you ask for.
• To send sign-in codes and family invites by email.
• To keep the service secure and working, and to answer you when you contact us.

We don't sell or rent your information, use it for advertising, or share it with data brokers. We don't build profiles of you or your kids.

Who can see your calendar

Only the members of your family who have a login: the grown-ups you invite and any kids you give a login. Every request is checked against your family membership, so other families can't see your information. We don't look at your calendar except when needed to fix a problem you report or to keep the service secure.

If you turn on Kalby in your phone's calendar (Settings), we create a private link for you. Anyone who has that link can view your family calendar, so keep it to yourself; you can make a new link at any time, which stops the old one from working.

Services we use

We use a small number of companies to run Kalby. They handle your information only to provide their service to us:

• Supabase: our database and sign-in system (servers in the eastern United States).
• Vercel: hosts the app and website.
• Resend: sends our emails (sign-in codes and invites).
• Anthropic: reads the photos you choose to import with Add from a photo and returns the events on them. Anthropic doesn't use them to train its AI models.
• Apple and Stripe (when paid plans start): handle subscription payments. We never see or store your card number.
• Apple, Google and other browser makers: deliver reminder notifications to your device if you turn them on.

If you link an outside calendar, Kalby reads it from that provider (for example Google or Zoho) every 15 minutes.

Children

Kalby is used by parents to organize their family. Parents may add their kids as a first name and a color. A parent can also choose to give a child their own login by entering the child's email address; we recommend doing that only for kids 13 and older. A grown-up in the family can remove a kid's login at any time, and a kid's profile can be deleted by the Family Admin. If you believe a child under 13 has given us information without a parent's permission, contact us at hello@kalby.app and we'll delete it.

How long we keep it, and deleting it

We keep your information for as long as your family uses Kalby. Events and people you delete are removed from the calendar right away. You can delete your account yourself in the app: Settings → Account → Delete my account. The Family Admin can delete the whole family there too. You can also email hello@kalby.app from the address you sign in with, and we'll delete it within 30 days. Any copies in our providers' backups expire on their normal schedule.

Security

Everything is sent over encrypted connections (HTTPS). Sign-in uses one-time codes, so there are no passwords to steal. Access to each family's data is enforced by the database itself. No system is perfectly secure, but we work to protect your information and will tell you if a problem affects it.

Your choices

• You can edit or delete events and people in the app at any time.
• You can change the email you sign in with in Settings → Account.
• You can turn reminders off in Settings, and unlink an outside calendar in Settings.
• You can ask us for a copy of your information, or to correct or delete it, at hello@kalby.app.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll let you know in the app or by email before it takes effect.

Contact

Questions about privacy? Email hello@kalby.app.