Wallday privacy policy
What Wallday accesses in your Google account
When you sign in, you allow Wallday to see the list of your Google calendars and their events (Google scopes calendar.calendarlist.readonly and calendar.events.readonly), and your Google Tasks lists (scope tasks). Wallday only reads your calendars: it never creates, changes or deletes an event. In your lists, the only thing it writes is the check mark: when you tap an item on the wall, it is marked done, or undone, in Google Tasks. It never creates, renames or deletes an item or a list.
Where your data goes
- Your calendars, events and lists are downloaded by the app directly from Google to your tablet, and kept in the app's storage on that tablet, so it can show them. They never pass through a server of ours.
- Sign-in happens on the tablet, through Google Play services, which gives the app its access tokens. We have no sign-in server and never see your password or your tokens.
- If you add an iCloud or Outlook calendar by its address, the tablet downloads that calendar directly from its own website. The address is kept on the tablet only.
- Events you type on the wall, the first names and the colors of the people on the wall, and your settings stay on the tablet. They are not sent anywhere.
- Weather: when you choose a city, the tablet asks Open-Meteo (open-meteo.com) for the places matching the name you type and for the forecast of the city you choose. If you allow it once, the tablet reads its rough location, rounded to a few kilometers, only to find the city: Android's own geocoding service (Google's, on most tablets) turns it into a city name. These requests contain the city name or its coordinates, never your calendars or your account. The chosen city is kept on the tablet only.
- Premium is bought through Google Play, which handles the payment: we never see your payment details. To know whether Premium is active, the app uses RevenueCat (revenuecat.com), which receives the Google Play purchase receipts of the tablet's Play account and an identifier made from the address of the Google account you sign in with. That identifier is a one-way hash (SHA-256): RevenueCat never receives the address itself, your calendars, your lists or anything else from your Google account, but someone who already knows your address could compute it. It lets Premium follow your Google account, so that Premium bought in Wallday or in TVcalendar, our TV app, works in both. The Premium status is also kept on the tablet, so the app works offline.
- Usage counts: the app sends a server function of ours how many times a few moments happened (a wall set up, a list opened, the Premium page shown, a purchase completed), with the kind of screen (phone, small or large tablet). These counts carry no identifier, no account and no content; we keep them only as daily totals and use them to improve the app. The function sees the network address of the request only to limit abuse, and does not store it.
- Wallday contains no advertising, no analytics service and no crash reporting service. Nothing is sold to anyone.
How your data is protected
- Every connection the app makes (Google, Open-Meteo, RevenueCat, our server function) uses HTTPS. The app does not allow unencrypted connections.
- Your Google access tokens are held by Google Play services on the tablet, not by us.
- Your calendars, lists and settings are kept in Wallday's private storage, which Android keeps out of reach of other apps. Wallday turns off Android backups, so this data is not copied to backups or other devices.
- Wallday asks Google only for what it shows: your calendar list and events in read-only, and your tasks. It cannot change your calendars or read your email, contacts or anything else in your Google account.
Limited use
Wallday's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Your calendar and task data is used only to show them on your tablet. It is not sold, not used for advertising, and not shared with anyone.
Deleting your data
- Signing out on the tablet erases your Google calendars and lists from it, but does not remove Wallday's access at Google.
- Uninstalling Wallday erases everything it stored on the tablet: calendars, events, lists, calendar addresses, the people on the wall, the weather city and the settings.
- To remove Wallday's access to your Google account, go to your Google Account, under Security, Your connections to third-party apps and services.
- Premium belongs to the Google account you signed in with and to the Google Play account that bought it. RevenueCat keeps the Google Play purchase receipts, with the identifier, as long as they are needed to check the purchase.
- To have us delete those receipts or anything else, write to hello@wallday.app with "Wallday data deletion" as the subject. We reply within one month.
Changes
We may update this policy. The date at the top of this page then changes.