Privacy policy

Privacy Policy for Calandus

Last updated: January 10, 2026

1. Introduction

This Privacy Policy describes how Toppin AS (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use the Calandus calendar synchronization service (“Service”) available at calandus.com.

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

Toppin AS
Kløfta, Norway
Email: jk@toppin.no

3. Information We Collect

3.1 Account Information

  • Email address
  • Name (as provided during registration)
  • Password (encrypted)

3.2 Google Calendar Data

When you connect your Google Calendar to Calandus, we access:

  • Calendar names and identifiers
  • Calendar event data (titles, times, descriptions)
  • OAuth authentication tokens

We only request read-only access to your calendars. We cannot modify, delete, or create events in your Google Calendar.

3.3 User Preferences

  • Weather widget location (city name, coordinates)
  • Display preferences and settings
  • Calendar color customizations

3.4 Device Information

  • Screen/device registration data
  • Device identifiers for kiosk displays

4. How We Use Your Information

We use your information to:

  • Provide and maintain the Calandus service
  • Synchronize and display your calendar data on your screens
  • Display weather information for your chosen location
  • Authenticate your account and connected services
  • Communicate with you about the service

5. Data Storage and Security

5.1 Storage Location

All data is stored on servers located in the European Union (EU).

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure storage of authentication tokens
  • Regular security updates

5.3 Google OAuth Tokens

Your Google authentication tokens are stored securely and are only used to access your calendar data. We do not share these tokens with any third parties.

6. Third-Party Services

6.1 Google Calendar API

We use Google Calendar API to access your calendar data. Your use of Google Calendar is subject to Google’s Privacy Policy: https://policies.google.com/privacy

6.2 Met.no Weather API

We use the Norwegian Meteorological Institute’s API to provide weather data. This service only receives location coordinates, not personal information.

6.3 OpenStreetMap Nominatim

We use Nominatim for location search functionality. Only search queries are sent, not personal information.

7. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. Your data is only shared with:

  • Service providers necessary to operate Calandus (hosting provider)
  • When required by law or to protect our rights

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

  • Your personal data will be deleted within 30 days
  • Google OAuth tokens are immediately revoked and deleted
  • Cached calendar data is immediately deleted

9. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate personal data
  • Erase your personal data (“right to be forgotten”)
  • Restrict processing of your personal data
  • Data portability – receive your data in a structured format
  • Object to processing of your personal data
  • Withdraw consent at any time

To exercise these rights, contact us at jk@toppin.no.

10. Google API Services User Data Policy

Calandus’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

Specifically:

  • We only request access to data that is necessary for the Service
  • We do not use Google user data for advertising purposes
  • We do not sell Google user data to third parties
  • We do not use Google user data to determine creditworthiness or for lending purposes

11. Children’s Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Toppin AS
Email: jk@toppin.no
Address: Kløfta, Norway

Norwegian Summary / Norsk Sammendrag

Calandus samler inn og behandler følgende personopplysninger:

  • Kontoinformasjon (e-post, navn)
  • Google Kalender-data (kun lesetilgang)
  • Værplassering og visningsinnstillinger
  • Enhetsregistreringer

All data lagres på EU-servere. Vi selger aldri dine data. Du kan når som helst be om innsyn, retting eller sletting av dine data ved å kontakte jk@toppin.no.