√
Privacy & your data
Square Root Calendar · last updated July 22, 2026
Square Root Calendar is built to keep your data yours. Here is exactly what is stored, where, and who can see it — in plain English.
Your personal calendar
- Lives on your device. Your tours, mutuals, overtime, time off, notes, and settings are stored in your browser/app storage on your phone. We can't read them.
- Optional cloud backup is encrypted end-to-end. If you turn on cloud backup, your data is encrypted on your device with your recovery code before it's uploaded. The server stores only unreadable ciphertext — without your recovery code, nobody (including us) can decrypt it.
- Your "on the job since" date stays in your calendar data and is used only on your device to estimate overtime dollars.
House Calendar (crew sync)
The House Calendar is a shared feature — that's the point of it. If you join a house, the profile you enter is visible to the members of that house and, unlike your personal calendar, is stored on our servers in readable form so your crew's devices can display it.
- What's shared with your house: your name, company, group, ABCD letter, phone number, optional spouse/emergency contact, your duty status (vacation/medical/light duty/detail — as a status, not your reasons), your scheduled-OT list, and swap/cover requests you post.
- Who can see it: only approved, active members of that house. Pending or removed members cannot read house data.
- Leaving: if you leave a house (or are removed), your profile is deleted from the roster. Your name may remain on past swap records so your crewmates' histories stay accurate.
- Where it lives: house data is stored with our database provider (Upstash Redis, US region) and expires from the server if a house goes unused for an extended period.
Push notifications and reminders
If you turn notifications on, your device's push subscription is stored server-side in a private record — never shown to other members. Turning notifications off deletes it. Notifications work whether or not you belong to a House Calendar.
Reminders for tours and personal events are scheduled on our server so they can still reach you with the app closed. The server stores when to send each reminder and an encrypted block of what it says. The wording is encrypted on your device with a key that never leaves it and is decrypted by the app on your phone when the notification arrives — so the reminder times are visible to us, but what the reminder is about is not. The reminder queue uses its own random id, unrelated to your recovery code, your backup, or any purchase.
Calendar subscription link (optional)
This is the one feature where your data is stored in a form we could read, and it is off unless you switch it on.
- If you create a calendar link, your tour schedule — dates, times, and whether a tour is overtime or a mutual — is published to a private URL so Google Calendar, Apple Calendar or similar can subscribe to it. Those services have to be able to read a feed in order to display it, so this content is not encrypted.
- Anyone who has the link can read your tour schedule. Treat it like a password. Deleting the link in the app removes the published copy and permanently invalidates that URL; turning it back on issues a brand-new one.
- The feed contains tours only. It never contains your personal calendar events, notes, overtime pay, mutual partners' names, phone numbers, or anything about anyone else.
- The link uses its own random token that is not derived from and cannot be linked back to your recovery code, your encrypted backup, your reminders, or your purchase.
- Once you subscribe, the calendar service you chose (for example Google) fetches and stores its own copy on its servers, under its privacy policy rather than ours.
What we don't do
- No ads, no trackers, no analytics SDKs.
- We never sell or share your data with third parties.
- No accounts, no passwords, no emails collected by the app.
Deleting your data
- Personal calendar: clear the app's site data on your device (and it expires from the encrypted cloud if unused).
- House data: use "Leave this house" in the app — your profile is removed from the house immediately.
- For anything else, email us and we'll take care of it.
Contact
Questions or requests: privacy@squarerootcalendar.com