pon-schedule Privacy Policy

Last updated: 2026-09-22

1. What this service does

pon-schedule is a web service, with a Chrome extension, that overlays several people's free time to propose meeting times, then handles sharing, answers, tentative holds and confirmation. The person who creates a meeting signs in with a Google account and can create groups and invite members. From the toolbar icon, the Chrome extension can add a meeting to Google Calendar, or open the web service with what you entered to propose times.

2. What we do not collect

We do not collect personal information for advertising or tracking
We do not collect or transmit browsing history. The Chrome extension does not read the pages you visit either
We never handle your Google account password

3. What is stored, and where

Google account information: the account identifier, display name, email address and profile picture we receive from Google at sign-in. They are used to tell signed-in users apart, to show names in groups and meetings, and to pass participants of a confirmed meeting to Google Calendar.
What you create: groups (name and members), follow relations, and meetings (title, participants, candidate times, answers, tentative holds and confirmation state).
Settings: your time zone. Stored only when you set it.
Calendar connection: for people who connect their calendar, the refresh token (the key used to query Google for events and to create events), stored encrypted. Event names and contents are not stored.
Where: on servers operated by us. We do not sell or provide this data to third parties.
What is stored in your browser: the web service and the Chrome extension store your last meeting length, group and selected participants, the time zone in use, and a mark for meetings whose times you have sent, in the browser on your device. These are not sent to the server.

4. Network connections

This service connects to external services in exactly five cases.

Google sign-in: Google confirms who you are on its own page, and we receive the account identifier, display name, email address and profile picture.
Google Calendar: for people who connect their calendar, we get the time ranges when they are busy from Google, and create tentative holds and confirmed meetings on their Google Calendar. Event names are fetched only to show on your own screen, and are not stored. When a member of one of your groups picks you as a meeting participant, they see only the time ranges when you are busy, never names or contents.
From the Chrome extension to our server: the title, time and participants you enter are sent to our server (app.pon-schedule.com). The extension reads your group members so you can pick participants.
Time zone: the web service and the Chrome extension send the time zone your screen uses to the server. It is used as the time zone of events created on Google Calendar.
Analytics: usage is sent to Google Analytics 4 (section 9).

The Chrome extension's "Propose times" opens the web service with what you entered placed in the URL. This content is not sent to the server.

5. Deleting your data

Inside the app, you can leave a group, delete a meeting you organized, and remove a meeting you joined from your history. When you disconnect Google Calendar, we revoke the permission with Google and delete the stored connection.

Stored data stays on the server until it is deleted. Sign-in sessions expire after 8 hours. Data stored in your browser is removed when you clear your browser data or remove the Chrome extension.

If you do not sign in with Google for 60 days after your last sign-in, we automatically delete your data (the information received from Google, the groups and meetings you created, your participation and answers, and the calendar connection). Before deleting, we remove tentative holds you organized from Google Calendar and revoke the Google Calendar permission.

6. Sharing and disclosure of your data

We pass your data only to the following parties.

Members of your groups, and the organizer and participants of meetings you join: your display name and email address, and (if you connected Google Calendar) the time ranges when you are busy. Only what is needed to overlay free time. Event names and contents are never passed.
Google: when a tentative hold or a confirmed meeting is put on Google Calendar, the meeting title, time and participants' email addresses are sent to Google.
Google Analytics: the name of the page you are viewing (section 9). No email addresses or event contents.
Cloudflare: used as the network path that relays this service's traffic.

We do not sell, rent, provide or transfer your data to any other third party. We do not use it for advertising, for data brokers, or to train artificial-intelligence models. We may disclose data only to the extent required by law, or when necessary to protect the safety of this service.

Our use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data protection

All traffic is encrypted (https). Browsers are instructed to always use https.
Google Calendar connection data (the refresh token) is encrypted with AES-256-GCM before it is stored on the server; the key is kept separately from the database.
Sign-in records are stored as SHA-256 hashes, not as raw values.
The database sits inside the server and is not reachable directly from the internet. Only the operator can access the data.
When you disconnect Google Calendar, the connection data is deleted and the permission is revoked with Google. Stored data can be deleted as described in section 5.
If we become aware of a data breach, we will promptly notify the people affected.

8. Permissions

Viewing free/busy times in Google Calendar: to overlay the times participants are busy and propose meeting times
Viewing, creating and deleting events on your own calendar: to show your event names on your own screen, to put tentative holds and confirmed meetings on your Google Calendar, and to remove them when cancelled
Chrome extension host permission (https://app.pon-schedule.com/*): Add the entered meeting to Google Calendar, and let the user pick participants from their groups

Google Calendar permissions are requested separately from sign-in, only when you press "Connect Google Calendar". The Chrome extension connects to no other site and does not read the pages you visit.

9. Analytics

This service uses Google Analytics 4 to understand usage of the website and the web service. The website (pon-schedule.com) and the web service (app.pon-schedule.com) send the pages you visit. The Chrome extension contains no analytics code. Event names, calendar contents and email addresses are never sent. Data is processed according to Google's privacy policy.

Details: How Google uses information from sites or apps that use our services

10. Ads

This service plans to be funded by advertising. There are currently no ads in the web service, the Chrome extension or the website. No personal information, calendar contents or browsing history is passed from this service to any ad provider.

11. Contact

Reach us at pon.apps.inc@gmail.com.

← Back to top