Privacy policy – Pamatovák

Effective from: 20 October 2026

Pamatovák is a reminders and calendar app. This policy explains what data the app processes, why, and for how long.

Controller: the operator of the Pamatovák app, contact: info@pamatovak.cz

In short

No accounts, emails or passwords. You join a calendar with a code.
No ads, no tracking, no cookies. Only anonymous overall usage statistics that can't be tied to anyone.
Data is used only to make the calendar work and to share it between your devices.

What data we process

Calendar content. The reminders and events you enter: titles, dates and times, repeats, notes, places, steps, categories and completion history. Also the names (and the initials made from them) and colours of the members you add, and the calendar's name and colour. It is stored on the server so that all connected devices see it, and on the device.

Device data. When you create a calendar or join one with a code, the device gets a random access key; the server keeps only its fingerprint (hash), never the key itself. We also keep a label such as "iPhone · Safari", when the device joined and was last active, and whether it is an admin. The calendar's admins can see this list of devices.

Notifications. If you turn on notifications on the web (PWA), we store the address and keys your browser's push service issues for delivery, plus your time zone and the hour you want reminders at. In the iPhone app, reminders are scheduled on the phone itself as local notifications.

iCloud link (only if you turn it on). The Apple ID and app-specific password you enter; the password is stored encrypted (AES-256). Also a copy of the events read from the chosen iCloud calendar, so they still show when iCloud is briefly unavailable.

The iPhone's calendars and reminders (iPhone and iPad app only, if you allow access). Events from the phone's calendars and reminders from the Reminders app are read and shown on the phone only (including its widgets and a paired Apple Watch, which the phone sends them to directly); they are never sent to the server or anywhere else.

Quick add (only if you use it). The sentence you type, today's date, the language and your list of categories are sent for processing (see Anthropic below). Member names and nothing else from the calendar are sent. The iPhone app without a shared calendar gets a random device identifier for this, used only for the daily limit and not stored by the server. Dictation is handled by your phone's or browser's speech recognition (Apple, Google) under its own terms.

Anonymous usage statistics. The app sends only sums: once a day that it was opened for the first time that day (week, month), its platform and version, and during the day (at most every 10 minutes) how often a few features were used (e.g. "new reminder", "created with AI", "search"). It holds no identifier of the device, the person or the calendar, nothing of their content, and the server doesn't store the IP address; only daily totals across all users are kept (400 days). They tell us how many people use the app and which features to improve.

Operator access. The operator doesn't look into calendars' content; the server's admin view shows counts only (how many reminders and devices, when a calendar was last active) — no titles, names or dates.

Technical data. The IP address is held briefly in the server's memory to protect against overload (at most an hour) and is not stored. Server error logs do not contain calendar content.

Only with processors the app can't work without:

Fly.io – running the server and storage.
Push services (Apple, Google, Mozilla – depending on the browser) – delivering a notification; it contains the reminder's or event's title, and the transfer is encrypted.
Anthropic – processing the quick-add sentence; only when you use it.
Apple iCloud – only with the iCloud link: reading events and, if an admin turns it on, writing events to iCloud.

We don't sell data and don't use it for advertising or profiling.

How long we keep data

Calendar content for as long as the calendar exists. A deleted item disappears at once; only an internal marker without content remains, so the deletion reaches the other devices.
When a device leaves a calendar or an admin removes it, the device record and its notifications are deleted.
Unlinking iCloud deletes the stored Apple ID, password and the copy of events.
A calendar every device has left is deleted by itself after 30 days, and so is one that no device has opened for two years.
When a calendar is deleted, everything that belongs to it is deleted. It disappears from server backups (daily, kept for 5 days) within 5 days.

Your rights

Under the GDPR you have the right to access, correct and delete your data, to restrict its processing, to data portability and to object. You can edit or delete most data yourself in the app; a whole calendar is deleted by its admin (Calendars & sharing → the calendar → Delete calendar), and the last member can delete it when leaving. For anything else, write to info@pamatovak.cz. You can complain to the Czech Office for Personal Data Protection (www.uoou.cz).

Changes