xrncal
Privacy Policy
xrncal is a calendar application for Windows, Linux and Android. It runs entirely on your device. The developer operates no servers, receives no data from the app, and has no way to see your calendars or your account.
What the app handles
- Calendar data — the calendars, events, attendees and reminders belonging to the accounts you connect, so that the app can display and edit them.
- Basic account identity — the email address and display name of each connected account, used to label that account in the interface.
- Credentials — the OAuth tokens (or, for CalDAV, the username and password) needed to reach your provider.
Where it is kept
All of it is stored locally, in a SQLite database inside the application's own profile directory on your computer, or in app-private storage on Android. Nothing is uploaded anywhere by the app.
Credentials are encrypted at rest before being written: on desktop with Electron's
safeStorage, backed by the operating system keychain, and on Android with an
AES-GCM key held in the Android Keystore. If a Linux system has no keyring available, the
app refuses to store the credential rather than fall back to plain text.
What leaves your device
The app makes network requests to exactly three kinds of destination, all of them yours:
- Google's OAuth and Calendar API endpoints, if you connect a Google account.
- Microsoft's identity and Microsoft Graph endpoints, if you connect a Microsoft account.
- The CalDAV server whose address you enter, if you connect a CalDAV account.
There are no other outbound requests. The app contains no analytics, no telemetry, no crash reporting, no advertising and no third-party trackers. Holiday calendars are generated on your device rather than fetched from anywhere.
Google user data
xrncal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The app requests these scopes, and only these:
-
https://www.googleapis.com/auth/calendar— to read your calendars and events and to save the changes you make. This is what the application does; a calendar that could not write would not be usable. -
openid,email,profile— to show which account is connected, so that you can tell two connected accounts apart.
Google data is used solely to provide the calendar features you see in the app. It is never transferred to anyone, never used for advertising, never sold, and never used to train any model. No human, including the developer, has access to it.
Removing your data
- Disconnecting an account in the app deletes that account's stored credentials from your device, along with the local copy of its calendars.
- To withdraw the app's access at Google independently of the app, visit myaccount.google.com/permissions and remove xrncal. Disconnecting inside the app removes the credential locally but does not by itself revoke the grant on Google's side.
- Uninstalling the app and deleting its profile directory removes everything the app has stored. Because the developer holds no copy, there is nothing left to request the deletion of.
Children
The app is not directed at children under 13 and collects no information from anyone, including children.
Changes
If this policy changes, the revised version will be posted on this page with a new date above.
Contact
Questions about this policy: alotin1000@gmail.com