Calendar Play privacy policy

Updated September 28, 2026. Developer: Nathan Fennel.

Release scope and saved events

This policy describes the prepared Apple TV version 1.4 build 3. Its device-level choices for AI, online photos, automatic event photo matching, and maps start off. Older installed versions can make online requests under their existing feature settings without these new controls. Historical information remains off in fresh settings.

Calendar Play saves app-created events, preferences, selected images and cached content on the device. The Apple TV release has no EventKit or Google Calendar connection, no online weather forecast, and no verified iCloud synchronization. Deleting an app-created event removes it from the local event store after saving succeeds. Image files are managed separately.

Optional AI suggestions

After you enable AI suggestions and request one, your description, selected date and time zone go to the Calendar Play backend and OpenAI. Descriptions can contain names, contact information, locations or other content you include. The returned event is a proposal you review before saving. Recurrence text does not automatically create repeated events.

The updated backend does not store descriptions or generated events in an application database or application logs. OpenAI requests disable response storage. Provider operational and abuse-monitoring records are separate; this is not a zero-retention guarantee. See OpenAI API data controls.

Optional online photos

When online photos are enabled, typed searches and month or season terms go through the Calendar Play backend to Unsplash. A separate choice permits automatic matching from event titles and locations. Automatic matching can send up to three title words and two location words. Photo-search terms are placed in the backend request URL, so hosting or access logs may retain them even though application console logging omits them. Selected photo identifiers are reported through the backend to Unsplash for download tracking. Image downloads contact Unsplash's image servers directly, exposing ordinary connection information such as your IP address. Photographer credits and Unsplash links accompany online photos.

Selected and imported images are stored in Application Support. Images recovered from older versions can also remain there, and legacy recovery copies are kept. Disposable automatic images can expire after seven days and are subject to cache-size cleanup; selected or legacy images with unknown status are preserved. Turning online photos off stops new app requests and invalidates pending results, but keeps saved images. See Unsplash's privacy policy.

Local estimates and optional maps

Version 1.4 build 3 calculates a regional location estimate locally from the device's time zone and region for sunrise, sunset and daylight times. These estimates can differ from your city. This build does not request GPS or contact an IP-location service, and older stored network-location choices cannot enable such a request. Optional Apple maps and geocoding remain separate and can send event location text or coordinates to Apple; see Apple Maps privacy information.

Earlier installed versions can still contact ipapi.co to estimate location from an IP address and retain the estimate in memory for up to 24 hours. Updating the app does not erase records already received by a provider; see ipapi.co's privacy policy.

Historical information

When historical information is enabled, opening a day's details automatically requests its month and day from Wikimedia unless a valid local cache exists. Wikimedia receives the date in the URL and connection metadata such as your IP address. Event descriptions are not sent for this request. Results include historical events, births, deaths and holidays as text, with article and license links. This view does not download Wikimedia thumbnails.

The local preferences cache has seven-day entry validity and opportunistic cleanup. That validity is not a guaranteed deletion deadline. Following an article link uses the platform's link handler. See Wikimedia's privacy policy.

Service records

The updated backend keeps salted hashes of connection addresses and request counters in server memory for a one-minute rate-limit window. Expired counters are removed when another request runs or the server instance ends. They are bounded per instance and are not stored in an application database or used by the app for advertising.

Vercel and AWS host the service and can retain operational and diagnostic records under their account settings. AWS application diagnostics are configured for seven-day retention. This does not establish a deadline for Vercel, OpenAI, Unsplash, Wikimedia, location services or other provider records. No advertising SDK is included in this native release.

Choices and deletion

Optional online features can be disabled in Settings. Revocation cancels pending app work where possible and rejects stale results. It cannot recall requests already received by a provider or erase provider logs. Local event deletion does not remove exports, backups, separate retained images or external service records. Contact the developer about information held by the owned service.

Contact Nathan Fennel for support or privacy questions