Palender Privacy Policy
Last updated: 17 October 2026 · Beta version
Palender is run by Palender Inc., based in Toronto, Ontario, Canada ("Palender", "we", "us"). This policy explains what we collect when you use the Palender app, why, who can see it, and what you can do about it.
Palender is in a closed beta. Features may change, and we'll update this page when they do.
Questions? Email support@palender.app.
The short version
- We collect what's needed to run Palender: your account, your profile, the events and plans you make, and the messages you send.
- We never collect your date of birth or age. Events can be marked 19+; that's about the event, not you.
- Your location stays on your phone. We only ever show the distance to an event, never where you are.
- Only your friends see you by name. Everyone else sees your @username and initials, and counts instead of names.
- No ads, no tracking, no analytics tools, and we don't sell your data.
- You can delete your account from inside the app at any time.
What we collect, and why
Your account
- Email address, and your login (a password, or Sign in with Google or Apple). Used to sign you in and to contact you about your account.
- Sign in with Apple: we don't use the name or email Apple offers to share beyond what's needed to sign you in.
- Sign in with Google also asks for access to your Google Calendar, so Palender can show your busy times and add your plans to it (see Calendars). If you sign in another way, connecting Google Calendar is a separate, optional step.
Your profile
- Username (seen by every Palender user), display name, an optional profile photo, a status line, and whether your profile is public or private.
- Phone number — optional. Used so friends who have your number can find you. It is never shown to other users.
- Interests you pick during sign-up (types of events, music), to suggest events. Only you can see them.
What you do in Palender
- Events you create — title, time, description, address and the other details you enter. For private events, other people only see the neighbourhood and an approximate location (to within about 1 km) until they RSVP Going; then they see the address.
- RSVPs (Going, Maybe, Can't), saved events, friends, follows of promoter and venue pages, groups, and your blocked and muted people and close friends (only you can see those last three).
- Messages you send in chats, including photos, videos, GIFs, polls, checklists and reactions. We remove location and camera details from photos and videos before they're uploaded.
- Views: when you open an event or a page, we record that it was viewed. Nobody can see who viewed what — not other users, and not the page's own team. Pages only see totals.
Permissions you can turn on (each is optional)
- Location — used on your phone only to work out the distance to events and to suggest nearby ones. It is never sent to our servers or shown to anyone. To name your city and search for places, your phone uses Apple's map services.
- Contacts — if you allow it, Palender sends the phone numbers in your contacts (not names or anything else) to our server to check which of your contacts use Palender. The numbers are compared and not stored. People found this way can see each other's name (still no photo until you're friends).
- Calendars — Palender can read your Apple, Google or Outlook calendar to show when you're busy, and add events you RSVP to (title, time, place and the note "Added via Palender"). Apple Calendar stays on your phone. Your Google and Outlook sign-in stays on your phone; we don't store calendar logins on our servers.
- Camera — only to scan a friend's QR code. Nothing is recorded.
- Photos — only the photos you choose to send or upload.
- Notifications — if you allow them, we store your phone's notification address and time zone (to respect quiet hours, 2–10 AM).
When you contact us
- Reports: if you report a person, message, event or page, we save the report, your @username and — if you choose to include it — a copy of what you reported, so it can't be lost if it's later edited or deleted. Reports are emailed to our moderators.
- Feedback (feature requests and problem reports): we save what you write, an optional screenshot, your app version, iOS version and phone model, and email it to support with your sign-in email so we can reply. The screenshot is deleted from our servers once it has been emailed.
Invites by text
When you invite someone by text, Palender opens your own Messages app — the text comes from you, not us. We may store the invite code and, if you entered one, the number it was meant for, so the invite can be matched when they join. That number is deleted once the invite is used or 90 days after it was sent, whichever comes first. Palender does not send automated texts during the beta.
What we don't collect
Your date of birth or age, your legal name, payment details (Palender never takes payment — ticket links go to other sites), advertising identifiers, or your location. There are no analytics, advertising or tracking tools in the app.
Who can see your information
| What | Who sees it |
|---|---|
| Username | Everyone on Palender |
| Display name and photo | Your friends (plus, for name only, people who have your number in their contacts) |
| Everyone else | Sees your @username and initials only |
| Your RSVPs | Your friends by name; everyone else only sees totals ("12 going") |
| Private event guest lists | Guests see friends by name, and a number for everyone else |
| Private event address | People who've RSVPed Going, and the host |
| Messages | Only the members of that chat |
| Your location | Nobody |
| Blocks, mutes, close friends, interests, saved events | Only you |
Blocking is mutual: neither of you sees the other's RSVPs, profile or messages. The person you block isn't told.
About message security: messages are encrypted while they travel and while they're stored. They are not end-to-end encrypted, which means Palender's systems can technically access them — for example to deliver notifications or to act on a report.
Who we share it with
We don't sell your information or share it for advertising. We use these services to run Palender, and they only get what they need:
- Supabase — hosts our database, storage and sign-in. Your data is stored in the United States (Ohio), so it may be accessible to authorities there under US law.
- Apple — Sign in with Apple, delivering notifications (a chat notification includes the sender's name and the start of the message), maps and place search.
- Google — Sign in with Google and Google Calendar (only if you use them), and Google Workspace, which carries our emails (sign-up emails, reports to moderators, feedback to support). Palender's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We only use your calendar data to show your busy times and add your plans; we never sell it, use it for advertising, or let people read it except as needed to run the feature.
- Microsoft — Outlook calendar, only if you connect it.
- GIPHY — when you search for a GIF, your search words go to GIPHY. When you or others view a GIF in a chat, it loads from GIPHY, which can see the phone's internet address.
We may also share information if the law requires it, to protect someone's safety (for example after a "someone is in danger" report), or if Palender is sold or merged (we'd tell you, and this policy would still apply to your information).
How we protect it
Your information is encrypted while it travels and while it's stored. Access to our systems is limited to the people who need it to run Palender and act on reports. If there is a security breach that creates a real risk of harm to you, we will tell you and report it to the Privacy Commissioner of Canada, as Canadian law requires.
How long we keep it
- While your account exists, we keep your information so the app works. If you haven't used Palender for 2 years, we may delete your account after emailing you first.
- Notification text is deleted from our servers 7 days after it's sent.
- When you delete your account (Settings → Delete my account):
- your profile, login, RSVPs, friendships, follows, interests, saved events, blocks, mutes and notification settings are deleted;
- your messages are deleted — others see "Message deleted" — and photos and videos you sent can no longer be opened;
- events you were hosting are cancelled, not deleted, so guests aren't left expecting them ("The host deleted their account");
- groups you owned pass to another member;
- kept without your name attached: reports you made or that involve you (so safety issues can still be handled), feedback you sent, polls and checklists you created in group chats, and view totals.
Your choices and rights
- See and correct your profile any time in the app (Settings → Edit profile).
- Delete your account from the app (Settings → Delete my account).
- Turn off location, contacts, calendars, camera, photos or notifications in your iPhone's Settings at any time; Palender keeps working without them.
- Ask us for a copy of your information or anything else about your privacy: support@palender.app. We'll reply within 30 days.
- If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Age
Palender is for people 18 and over. We don't knowingly let anyone younger use it. If you believe someone under 18 has an account, tell us at support@palender.app and we'll remove it.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how your information is used in a significant way, we'll tell you in the app before it takes effect.
Contact: Palender Inc., Toronto, Ontario, Canada · support@palender.app Privacy officer: Rushabh Joshi (the person accountable for how Palender handles your information) — reach him at the same address.