Privacy policy
The short version
Groupy stores what you and your groups put into the app so it can show it to the right people: your name, email address, the groups you belong to, and the events posted to them. We use a few services to run the app (a database host, an email sender, a service for push notifications and app updates, a crash reporting service, and our email inbox) and nobody else. We don't sell your information, we don't show ads, and we don't track you across other apps or websites. You can delete your account, and everything tied to it, from inside the app.
Who we are
Groupy is made by Groupy Calendar, based in Boise, Idaho, USA. When this policy says "we", it means Groupy Calendar, which is the data controller for the information described here. Questions about this policy go to hello@groupycalendar.com.
What we collect and why
Everything below is information you give us directly or create by using the app. We don't buy data about you or pull it from other sources.
| Information | How we get it | What we use it for |
|---|---|---|
| Name, email address and password | You enter them when you create an account. | To create your account, confirm your email with a one-time code, sign you in, and reset your password when you ask. Passwords are stored only in hashed form by our sign-in provider; we never see them. |
| Profile photo and group photos | Only if you choose to add one from your photo library. | Shown next to your name and on your groups so members recognize each other. See "Who can see what" for how photos are stored. |
| Groups, members and roles | Created when you start, join or are added to a group, or when you post or join a one-off event (which is a small group behind the scenes). | To show each group's calendar to its members and to enforce who can post, approve and manage the group. Members of a group see each other's names and photos, unless the group hides its member list: then only its admins do, and everyone else sees the admins. In a one-off event, only the host sees the guests. |
| Events: title, date and time, address, notes, category, repeat settings and who posted it | You or another member enters them. | This is the calendar itself. Everyone in the group an event was posted to can see it. |
| Event replies (RSVPs) | When you tap Going, Maybe or Can't go on an event, and, if you're going, how many people you say you're bringing. | To show the members of the event's groups who's coming (or only the person who posted the event, if they keep replies private), and to let the person who posted the event know you replied. Leaving a group removes your replies to its events. |
| Address suggestions and coordinates | When you type an address, the text is sent through our server to Apple Maps to suggest matching places. To rank suggestions near your groups, we send Apple the coordinates of the last address you saved, never your phone's location. | To fill in the address and let members open it in Maps. If you pick a suggestion, its coordinates are stored with the event. |
| Group links and requests to join | Every group has a join link and QR code that its members can share (through your own Messages, Mail or other apps; Groupy doesn't see who you send it to). Opening a private group's link and tapping Request to join. | We store the group's join code, and for each request who asked, when, whether it was approved or declined, and by whom, so the group can let the right people in. Members who can approve see your name and profile photo on the request. If someone in the group has blocked you, your request isn't stored and nobody is told. |
| Push notification token | Created if you allow notifications. | To notify you about new events, new members and suggested events in your groups, about replies to events you posted, to tell you when an upcoming event in your groups moves, changes place or is cancelled, and to remind you before events at the time you pick in your profile (1 hour before, or at 8 AM on the day of an all-day event, unless you choose otherwise). Notifications include the event title and, for replies, the name of the person who replied. You can turn reminders off in your profile, and all notifications off in iPhone Settings, at any time. |
| Time zone | Your iPhone's time zone setting (for example, America/Boise), saved by the app when it opens. | So reminders arrive at the time you picked and notifications show dates and times in your own time zone. It isn't shown to other members. |
| Reports and blocks | Created if you report content or a member, or block someone. | To review reports of objectionable content and to hide a blocked person's events from you. A report stores your reason, any details you add, and a copy of the reported content at that moment so we can review it even if it is later edited. Each new report is also emailed to our inbox, with who filed it and what was reported, so we can review it quickly. |
| Terms acceptance | Recorded when you tap Agree on the Terms of Use screen. | Which version of the terms you accepted and when, so we can show you agreed to them and ask again if they change. |
| Crash and error reports | Sent automatically by the app when it crashes or runs into an error. The app also lets the crash reporting service know when it opens and closes, so we can measure how often it crashes. | To find and fix bugs. A report contains technical details: the error, the app and iOS versions, the iPhone model, and a short trail of what the app did just before (for example, that a button was tapped or a request to our server failed). Reports aren't linked to your account and don't include your name, email address or IP address; each carries a random ID for the app installation so we can tell how many phones a problem affects. |
| Phone number on older accounts | Accounts created before September 2026 may have entered a phone number. New accounts are not asked for one. | Shown only to you, on your own profile. You can remove it at any time by deleting your account; it is never shown to other members. |
We don't collect your phone's location, your contacts list, your existing calendar, advertising identifiers, or analytics about how you use the app. Our servers keep standard technical logs (such as the time of a request and an IP address) for security and troubleshooting, and these are deleted on a rolling basis.
iPhone permissions
The app asks for each of these only when you use the related feature, and every feature works without it (you can type an address, a number or an email instead). You can change any of them later in iPhone Settings under Groupy.
- Photos. Choosing a profile or group picture opens the iPhone's own photo picker, which hands Groupy only the picture you pick, so no photo permission is needed. That picture is uploaded; nothing else is.
- Camera. Tapping "Scan a QR code" (under + then Join Group or Event) asks for the camera so Groupy can read the QR code on another person's group or event. It looks for that code only; no photo or video is taken, stored or sent anywhere. You can type the code instead.
- Calendar. Tapping "Add to my calendar" opens the iPhone's own New Event screen with the details filled in, and you choose where to save it. On iOS 17 and later this needs no calendar permission; on older versions Groupy asks for it then, adds that one event, and never reads your other calendar entries.
- Notifications. Optional. Used for updates about your groups.
Who can see what
- Members of a group can see that group's events, its member list, each member's name and photo, and each member's reply to its events (Going, Maybe or Can't go, and how many they're bringing), unless the person who posted an event keeps its replies private; then only that person sees who replied. They cannot see your email address or phone number.
- People outside a group cannot see it or its events, unless an admin makes the group public. A public group's name, description and photo can be found by name by any Groupy user and joined by scanning its QR code or link, and its events are visible to everyone who joins.
- Requests to join (your name, photo and when you asked) are visible to the members who can approve them: every member of the group, or only its admins, depending on the group's setting. A group's link and code are visible to all of its members.
- Suggested events that are waiting for an admin's approval are visible to the person who suggested them and to the group's admins until they are published.
- Photos you upload are stored at web addresses that are long and unguessable but not password-protected: anyone who has the exact link can view the picture. Don't upload a photo you wouldn't want seen outside the group.
- Calendar subscription links. A group's "Subscribe in Calendar" link contains a secret token, and anyone who has the link can read that group's events in their calendar app. Share it only with people who should see them; an admin can reset the link at any time, which stops the old one from working.
- Emails from us go only to you (sign-in codes, password resets). We don't send marketing email.
Services that process data for us
Groupy runs on a small number of providers who process data on our behalf, under contracts that require them to protect it at least as well as this policy describes and forbid them from using it for their own purposes:
- Supabase hosts the database, sign-in system, photo storage and the server code that runs the app. Data is stored on servers in the United States (Virginia).
- Resend sends our emails: sign-up codes, password resets, and alerts to us about new reports. It processes the recipient address and the message content.
- Zoho Mail hosts our inbox at hello@groupycalendar.com. It stores the emails you send us and our report alerts in the United States.
- Expo delivers push notifications and app updates to your phone. For notifications it processes your notification token and the text of each notification. When the app checks for an update, it processes technical details such as the app version and a random ID for the installation.
- Apple provides address suggestions (Apple Maps), push notification delivery to iPhones, and App Store distribution. Apple's handling of Maps queries is covered by Apple's privacy policy.
- Sentry receives the app's crash and error reports (described above) and stores them in the United States.
- Netlify hosts this website and keeps standard web server logs. The website sets no cookies.
- Cloudflare Web Analytics counts visits to this website (pages viewed, the site that referred you, and your browser and country) without cookies and without tracking you across other sites. It isn't used in the app.
We don't sell personal information and we don't share it with advertisers, data brokers or AI services. We would disclose information only if the law required it, to enforce our terms of use, or to protect the safety of our users. If Groupy is ever acquired, this policy would continue to apply to your data and we would tell you before anything changed.
How long we keep it
Your account and group data are kept for as long as your account exists. Requests to join are kept with the group so it can see who it has approved or declined; they go when the group or the account is deleted. Reports, and the alert emails we receive about them, are kept for up to a year after they are resolved so we can spot repeat problems. Server logs, email delivery logs and crash reports are deleted within 90 days.
When you delete your account (Profile → Delete my account), we delete your profile, email address, any phone number, photo, push notification tokens, blocks, replies to events, and your memberships, and we remove your unpublished suggestions. Groups where you were the only member are deleted with their events. If you were the only admin of a group that still has members, the longest-standing member becomes its admin so the group keeps working. Events and groups you created stay visible to their members, with your name no longer attached, unless you delete them first. Deleted data may remain in encrypted backups for up to 30 days before it is gone for good.
Your choices and rights
- See or change your information. Your name and photo are on your profile in the app; your groups and events are in the app itself.
- Leave a group. Open the group in the app and tap Leave group. That group's events stop appearing in your calendar and your unapproved suggestions there are removed; events you already posted stay on that group's calendar for its members. If you were its only admin, the longest-standing member becomes admin, and if you were its last member, the group and its events are deleted.
- Withdraw permissions. Turn off Camera, Photos, Calendar or Notifications access for Groupy in iPhone Settings at any time.
- Report or block. Every event and group has a "Report" option, and you can block a member from a group's member list. Blocked people are listed on your profile, where you can unblock them.
- Delete your account. Open your profile in the app and choose "Delete my account". It takes effect immediately. If you can't get into the app, email us from the address on the account and we will delete it within 30 days.
- Get a copy of your data. Email us and we will send you an export of the information tied to your account.
If you live in California, the European Economic Area, the United Kingdom or another place with specific privacy rights, those rights (access, correction, deletion, portability, objection, and the right not to be discriminated against for exercising them) apply to you and you can use the contact address below to exercise any of them. We respond within 30 days. For people in the EEA and UK: we process your data to provide the service you signed up for (performance of a contract), to keep the service secure and fix problems in it (legitimate interest), and, for optional features like notifications, with your consent, which you can withdraw at any time. Because our servers are in the United States, your data is transferred there; our providers commit to standard contractual protections for that transfer. You also have the right to complain to your local data protection authority.
Groupy does not respond to browser "Do Not Track" signals, because this website does not track visitors in the first place.
Children
Groupy is for people aged 13 and over. Younger children appear in the app only as the subject of events that their parents, coaches or teachers post, such as a birthday or a game; they don't have accounts. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will remove it.
Security
Data travels between your phone and our servers over encrypted connections and is encrypted where it is stored. Access to each group's data is enforced in the database itself, so a member of one group cannot read a group they don't belong to. Sign-in codes expire after an hour, invite codes are generated with a cryptographic random source, and destructive actions in the app ask you to confirm. No system is perfectly secure, so please use a strong, unique password and tell us at the address below if you think something is wrong.
Changes to this policy
If we change this policy in a way that matters, we will post the new version here, update the date at the top, and, for significant changes, let you know in the app or by email before they take effect. Continued use of Groupy after a change means you accept the updated policy.
Contact
Privacy questions, data requests and account deletion: hello@groupycalendar.com
Groupy Calendar · Boise, Idaho, USA