Privacy Policy

Introduction

Welcome to Kron. This Privacy Policy explains how we collect, use, and disclose information about you when you use Kron. By using Kron, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

When you authenticate with your Google account, we collect information required to provide our services:

• Google User Information: Your name and email address to identify your account.
• Google Calendar Data: We request limited Calendar permissions — not access to every calendar you can see, and not permission to permanently delete all of your calendars. Specifically, Kron asks Google to: create secondary calendars and manage those it created (including rename and delete); see the list of calendars you are subscribed to (so we can show calendars you manage and Kron calendars shared with you); and see and change sharing on calendars you own (family, Skylight, and the Kron service account used for background sync). Event import from iCal URLs you provide is written to those Kron calendars. Kron only acts on your behalf based on your actions within the app.
• Authentication Tokens: After you sign in, your browser holds a Firebase ID token so it can call Kron APIs as you. Kron stores your Google OAuth access token and refresh token on our servers and uses them to call the Google Calendar API. Those Google credentials are not written to your client-readable account profile and are not returned to the browser.

2. How We Use Your Information

Your information is used exclusively to operate and improve Kron. This includes:

• Authenticating your account and session.
• Displaying Kron-managed Google Calendars (yours and ones shared with you) and enabling management features.
• Executing calendar operations like creation, updates, deletion, and sharing at your request.
• Performing event imports from specified iCal URLs.
• Communicating securely with the Google Calendar API.

3. Data Storage and Security

Security procedures are in place to protect the confidentiality of Google user data. Your account information (such as name and email) and the Google OAuth credentials Kron needs to operate are protected as follows:

• Encryption in transit: Kron is served over HTTPS/TLS, so information is encrypted while it travels between your browser and our servers.
• Encryption at rest: Account data and OAuth credentials live on Google Cloud / Firebase, which encrypts stored data.
• Access controls: Google OAuth access and refresh tokens are stored only on the server. They are not written to the client-readable account profile and are not returned to the browser.
• Least privilege: Kron requests only the limited Calendar scopes it needs — create and manage Kron-created calendars, list calendars you are subscribed to, and change sharing on calendars you own.

We do not share, sell, or rent your personal information to third parties (see section 4).

Calendars created through Kron are managed by Kron so background sync can continue reliably. You retain access through the sharing permissions you configure in the app; revoking Kron's OAuth access in your Google Account stops Kron from acting with your personal Google credentials.

4. Data Sharing

We do not share, sell, or rent your personal information to third parties. Any calendar sharing performed through our app is a direct instruction to the Google Calendar API and is governed by Google's privacy policies.

5. Your Rights and Controls

You have full control over your data. You can revoke Kron's access to your Google Account at any time by visiting theGoogle Account permissions page. Doing so will prevent Kron from accessing your calendar data with your OAuth credentials. Signing in again also replaces previously granted Calendar permissions with the limited scopes Kron requests now. You may also request the deletion of your account and all associated data from our systems.

6. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us.