Privacy Policy

Last updated: September 2, 2026

This Privacy Policy describes how Flag Application Company (“we”, “us”) handles information in the mobile and Android TV application Calendar - Android TV (package name com.notes.calendar.app.tv).

Contact: flagapplicationcompany@gmail.com

By installing or using the app, you agree to this policy. If you do not agree, please uninstall the app.

1. Summary

Calendar - Android TV is a calendar and notes app for Android phones, tablets, and Android TV. Most features work on the device only. We do not operate a backend that collects your notes, local events, or Google Calendar content.

• Notes and events you create stay in the app’s private storage on your device.
• Google Calendar is optional. If you connect it, the app only reads events so they can be shown on screen.
• The app does not create, edit, or delete events in your Google account.
• Optional Pro is sold through Google Play. We never receive your card number.
• The app has no ads and does not use analytics or advertising SDKs.

2. Information stored on your device

The following is stored locally in the app’s private storage (Room database and Android SharedPreferences). It is not uploaded to servers operated by Flag Application Company.

Notes

Title, text, associated date, important flag, and timestamps.

Local events

Title, date, start and end time, all-day flag, repeat setting (none, daily, weekly, monthly), and timestamps. These events exist only in this app. They are not written to Google Calendar.

Important days

Date, title, description, and timestamp, if you use that feature.

Settings

Preferences such as theme, week start day, default calendar view, time format, default event duration, clock keep-screen-on, and similar display options.

Onboarding and Pro status on the device

Whether you have completed first-run screens, and locally cached Play purchase/entitlement state needed to unlock Pro features on that device.

We do not ask you to create an account with us. We do not collect your name, phone number, or payment card details.

3. Google Calendar and Google user data

Connecting Google Calendar is optional and, when Pro is required in the app, may be a Pro feature. If you never connect Google Calendar, the app does not access your Google account.

What we request

If you choose to connect, the app requests only this Google OAuth scope:

https://www.googleapis.com/auth/calendar.readonly

We do not request write access, Gmail, Drive, Contacts, or other Google scopes.

How you connect

• Android TV: a device code is shown. You finish sign-in on a phone or computer at Google’s page.
• Phone or tablet: you sign in with Google in the browser (OAuth) and return to the app.

Sign-in is handled by Google. We do not see your Google password.

Google user data: access

This section states exactly what Google user data is accessed by the application.

When you connect Google Calendar, Calendar - Android TV accesses the following Google user data through the Google Calendar API using the scope https://www.googleapis.com/auth/calendar.readonly:

• OAuth access token and refresh token issued by Google (to keep the session signed in);
• primary Google Calendar identifier / account label;
• raw Google Calendar event data from the primary calendar: event id, event title (summary), start date/time, end date/time, and all-day flag.

We do not access Gmail, Drive, Contacts, Photos, other calendars beyond primary, event descriptions, attendees, attachments, or write APIs. We do not access aggregated or anonymized Google user data, because we do not collect Google user data on our servers.

Google user data: use

Google user data is used only to provide the user-facing feature of displaying your Google Calendar events inside Calendar - Android TV (month view, agenda list, and clock with today’s schedule) and to keep you signed in on that device.

Calendar - Android TV’s use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, profiling, lending, analytics products, or AI/ML model training (including personalized or general models). We do not use derived or aggregated Google user data for any other purpose.

Google user data: transfer and sharing

We do not sell Google user data. We do not transfer Google user data to advertisers, data brokers, analytics vendors, AI/ML services, or any other third party. We do not upload Google Calendar events to servers operated by Flag Application Company. The only parties that process this data in transit are Google (Calendar API and OAuth) when the app fetches events to show them on the device.

Humans at Flag Application Company do not read your Google Calendar events. We have no server copy of them.

Google user data: data protection

This section specifies data protection mechanisms for sensitive Google user data (OAuth tokens and calendar event content):

• Google Calendar traffic uses HTTPS/TLS to Google’s APIs.
• OAuth access and refresh tokens are stored only in the app’s private Android storage (MODE_PRIVATE SharedPreferences), not in world-readable files and not in our cloud.
• Token files are excluded from Android Auto Backup and from device-to-device transfer so tokens are not copied into Google Drive backup or another device.
• Fetched event fields are held in RAM for about five minutes for display, then discarded; they are not written to our servers.
• The app has no advertising, crash, or analytics SDK that would exfiltrate Google user data.
• We do not operate a backend that stores Google Calendar content.

You are responsible for physical access to the device and for the security of your Google Account. No storage method is perfectly secure.

Google user data: retention and deletion

This section states retention and deletion of Google user data:

• Retention: OAuth tokens and the account label remain on the device only while Google Calendar stays connected. Event payloads are retained in memory only for a short cache (about five minutes) or until the app process ends. We do not retain Google user data on Flag Application Company servers, because we never receive a copy there.
• Deletion by the user: Disconnect Google Calendar in the app. That deletes tokens and the account label from the device and clears the in-memory event cache.
• Deletion via Google: Revoke the app at Google Account → Third-party access. After revoke, tokens stop working.
• Deletion via Android: Uninstall the app or clear the app’s storage in Android settings. That deletes remaining local Google connection state.
• The app cannot delete events in your Google account (read-only). To delete Google Calendar events, use Google Calendar itself.

4. Purchases

Optional Pro (for example Google Calendar connection and higher local note/event limits) is sold through Google Play Billing as a subscription or a one-time product, depending on what you choose in the Play purchase flow.

Payment, invoices, trials, cancellation, and refunds are handled by Google. We do not receive or store your payment card number, billing address, or Google payments password. We only receive from Play the information needed to know whether Pro is active on that device (purchase/entitlement status).

Manage or cancel subscriptions in the Google Play subscriptions page on your account.

5. Internet and third parties

The app uses the internet only for:

• Google sign-in and Google Calendar API requests, if you connect Google Calendar;
• Google Play Billing, if you view or buy Pro.

Those services are operated by Google LLC under Google’s own terms and privacy policy. We are not Google. “Google Calendar” and related marks belong to Google.

We do not use advertising networks, crash reporters, or analytics SDKs that track you.

6. Permissions

• Internet — Google Calendar (if connected) and Google Play Billing.
• Billing — Play purchases.

The app does not request location, camera, microphone, contacts, SMS, or access to your files outside its private directory.

7. Android backup

If Android backup is enabled on the device, local notes, events, and settings may be included in system backups. That is controlled by Android, not by a server we run. Google OAuth tokens are excluded from backup and from device transfer, as described above.

8. Children

The app is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through this app, contact us and we will help you remove local data by uninstall or by disconnecting Google Calendar.

9. Your choices

• Do not connect Google Calendar if you do not want the app to read Google events.
• Edit or delete notes and local events inside the app at any time.
• Disconnect Google Calendar to remove tokens from the device.
• Uninstall the app or clear app storage to delete remaining local data.

Because we do not keep a copy of your calendar content on our servers, we cannot retrieve that content from our side after you delete it on the device. For Google Calendar itself, change or delete events in Google Calendar; this app cannot change them.

If you are in a region with data-protection rights (for example access, deletion, or objection), email flagapplicationcompany@gmail.com. For data that exists only on your device, those rights are exercised by using the app controls or Android settings above.

10. Data retention

Local notes, events, settings, and (if connected) Google tokens remain on the device until you delete them, disconnect Google Calendar, clear app data, or uninstall. In-memory Google event cache is temporary. We do not retain Google Calendar content on our systems because we do not receive it on our systems.

11. Security

Data is stored in the app’s private directory on the device. Google tokens are not included in Android backup. Transmission to Google uses HTTPS. No method of storage or transmission is perfectly secure. You are responsible for physical access to the device and for your Google Account security.

12. Changes

We may update this policy when the app or our practices change. The “Last updated” date at the top will change. The current version is published on this page. Continued use after an update means you accept the revised policy.

13. Contact

Flag Application Company
flagapplicationcompany@gmail.com