Joshua & Company Inc. ("we", "us") develops the Calendar+ family of Android applications. This policy applies only to the paid edition of Calendar+, distributed on Google Play under the package name com.joshy21.vera.calendarplus, together with the home-screen widgets it installs.
The free, ad-supported edition (com.joshy21.vera.free.calendarplus) behaves differently and is covered by a separate privacy policy.
Calendar+ is a client for the calendars already configured on your Android device. We do not host a calendar service, we do not operate an account system, and we have no servers that receive your calendar content. Where the app talks to the network, it talks to Google services described in section 4.
The app reads and writes events, calendars, reminders and attendees through Android's Calendar Provider — the same store that the built-in calendar app uses. This content stays on your device and syncs only through the account providers you have already set up (Google, Exchange, local calendars, and so on). It is never transmitted to us.
With your permission, the app reads your contacts for two purposes only: to autocomplete attendee names and email addresses while you are editing an event, and to display a contact's photo next to their name. Contact data is looked up on the device as you type. It is not collected, stored on our side, or shared.
If you attach an image to an event, the image is selected through the Android system photo picker and handled locally by the app. The app does not scan your photo library and does not upload images to us.
Your preferences (themes, colors, view options, widget layouts, the time zone you have chosen) are stored in the app's private storage on the device. Because the app enables Android's backup service, these settings may be included in the device backup that Android makes to your own Google account. That backup is controlled by your device settings, not by us.
The app uses Firebase Crashlytics to report crashes and selected non-fatal errors (for example, a failed calendar query) so that we can fix them. A report may contain the exception and stack trace, the app version, the device model, the operating system version, and a Crashlytics-generated installation identifier. It does not contain your events, contacts, photos, or the contents of anything you typed.
The app uses Firebase Remote Config to adjust settings and in-app messages — such as announcements about other Calendar+ apps — without shipping a new release.
This edition sends no custom analytics events: the analytics component is bound to a no-operation implementation, so no feature-usage or advertising events are reported. The Firebase library bundle that provides remote configuration also contains Google Analytics for Firebase, which may still record standard automatic measurements such as app opens and session counts. Because the advertising-ID permission is removed from this app, those measurements cannot be associated with an advertising identifier.
To confirm that your copy of the paid app was obtained legitimately, the app uses Google Play Licensing. Google Play answers whether the app is licensed to the Google account on the device; the answer is cached on the device in encrypted form, using a key derived from the device's Android ID. We do not receive your Google account details, and this identifier is not transmitted to us.
This edition is a paid app. The transaction is processed by Google Play, which does not disclose your payment details to us.
| Permission | Why the app requests it |
|---|---|
| Read Calendar / Write Calendar | The core function: showing, creating and editing your events and calendars. |
| Read Contacts | Attendee autocomplete and contact photos while editing an event. Optional — the app works without it. |
| Accounts (get / manage accounts) | Listing the calendar accounts on the device so you can choose which calendars to display and which account a new event belongs to. |
| Notifications | Delivering the event reminders you have configured. |
| Exact alarms | Firing reminders at the exact minute you set, rather than at a time the system finds convenient. |
| Run at startup | Re-registering pending reminders and refreshing widgets after the device reboots. |
| Internet / Network state | Crash reporting, remote configuration and the licence check; checking connectivity before doing so. |
| Vibrate / Wake lock | Reminder vibration, and waking the screen for a reminder. |
| Storage (Android 12 and older) | Legacy support for saving and reading attached images on older Android versions. On Android 13 and newer the system photo picker is used instead and no storage permission is requested. |
| Billing / Check licence | Verifying with Google Play that this paid copy is licensed. |
| Advertising ID | Not requested. The permission is explicitly removed from this app's manifest. |
These are the only third parties the app communicates with. Each is operated by Google and processes data under Google's own terms.
| Service | Purpose | Typical data |
|---|---|---|
| Firebase Crashlytics | Crash and error diagnostics | Stack traces, app version, device model, OS version, installation ID |
| Firebase Remote Config | Adjusting app settings and in-app messages remotely | App instance ID, app version, device language and country |
| Google Analytics for Firebase | Included with the Firebase bundle; no custom events are sent by this app | Standard automatic measurements only (for example app opens); no advertising identifier |
| Google Play Licensing | Confirming that this paid copy is licensed | Licence query and response, handled by Google Play; result cached on the device |
| Google Play Billing | Purchase-related functions provided by Google Play | Purchase token and product identifier (handled by Google Play) |
| Google Play In-App Review | Showing the Play Store's rating prompt inside the app | Handled entirely by Google Play; we receive no data |
Google's handling of this data is described in the Google Privacy Policy.
The paid edition ships without any advertising software. Concretely:
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to lodge a complaint with a supervisory authority. Residents of California have the rights to know, delete and correct personal information; we do not sell or share personal information.
Because we hold no account and no copy of your data, most requests are satisfied directly on the device: uninstalling the app removes what it stored, and revoking a permission stops the corresponding processing. For anything else, write to calendarplus.app.help@gmail.com and we will respond within 30 days.
Calendar+ is a general-audience productivity app. It is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from them. If you believe a child has provided personal data through the app, contact us and we will act on it.
Data the app stores locally is kept in the app's private storage, which Android isolates from other applications, and on the device encryption your Android version provides. All network communication with the Google services listed above uses encrypted connections. No method of transmission or storage is completely secure, but because we hold no central copy of your calendar data, there is no server-side store of it to breach.
The Google services above may process data on servers outside your country, including in the United States. Google states that it relies on the European Commission's Standard Contractual Clauses and equivalent mechanisms for such transfers.
We may update this policy to reflect changes in the app or in applicable law. The effective date at the top is always current, and material changes — for example a new category of collected data — will be announced in the app or in the Google Play listing before they take effect.
Joshua & Company Inc.
Email: calendarplus.app.help@gmail.com