Privacy Policy

FullYear Calendar  ·  Last updated: September 27, 2026

1. Who We Are

FullYear Calendar is developed and maintained by Miika Kettunen (an individual developer), Finland. Contact: keminonele@icloud.com

For GDPR purposes, Miika Kettunen is the data controller for any personal data processed in connection with this app.

2. What FullYear Does

FullYear is a calendar app that lets you view, create, edit, and delete calendar events. It displays your events in a yearly, monthly, or 3-month overview. The app is available on iPhone, iPad, and Mac. All calendar operations are performed locally on your device using Apple's EventKit framework.

3. Data Processing

3.1 Calendar Data

• What: Your calendar events (titles, dates, times, calendars).
• How: Read, created, edited, and deleted via Apple's EventKit framework with your explicit permission.
• Where: Entirely on your devices. Calendar data is stored in Apple's Calendar database — not on any server we control. If you have iCloud enabled, Apple syncs this data between your iPhone, iPad, and Mac according to Apple's Privacy Policy. We have no access to or control over this sync.
• Legal basis (GDPR Art. 6(1)(b)): Processing is necessary to perform the core function of the app you have chosen to use.

3.2 Widget Data

• What: A summary of upcoming events used to display your home screen widget.
• Where: Saved locally in an App Group shared between the app and the widget. Never leaves your device.

3.3 Subscription Status

• What: An anonymous subscriber identifier linked to your App Store account (no name, email, or payment details).
• Who processes it: RevenueCat, Inc. — a third-party subscription management service.
• Legal basis (GDPR Art. 6(1)(b)): Processing is necessary to provide the Pro subscription you purchased.
• RevenueCat privacy policy: revenuecat.com/privacy

3.4 Photo-to-Events (optional AI feature)

FullYear Pro includes an optional feature that turns a photo of a schedule, invitation, or flyer into calendar events. This feature runs only when you actively choose a photo — it is never triggered in the background.

• On-device text recognition: When you select a photo, FullYear reads the text from it on your device using Apple's Vision framework. The photo itself never leaves your device and is never uploaded or stored anywhere.
• What is sent: Only the extracted text, together with the current date and your time zone, is sent for analysis so that events can be identified. No image, no name, no email, no account, and no calendar contents other than the text you photographed are sent.
• Who processes it: The text is sent over an HTTPS connection to a secure proxy (Supabase Edge Functions), which forwards it to OpenAI's GPT API to identify events. The proxy does not store your text; it only relays the request. OpenAI processes the text in real time and does not use API-submitted data to train its models. Data is retained by OpenAI only according to its API data-retention policy (typically up to 30 days for abuse monitoring), then deleted.
• What happens to the result: The suggested events are shown to you for review. Nothing is saved to your calendar until you confirm. Saved events are stored on your device via Apple's EventKit, exactly like any other event.
• Legal basis (GDPR Art. 6(1)(b)): Processing is necessary to provide the photo-to-events feature you chose to use.
• OpenAI: openai.com/enterprise-privacy  ·  Supabase: supabase.com/privacy

3.5 Advertising Measurement (Meta SDK)

FullYear does not show any advertising inside the app. It includes the Meta (Facebook) SDK so that we can measure the effectiveness of advertising campaigns we may run on Meta's platforms (Facebook, Instagram), for example whether an ad led to an installation or a purchase.

• What: App events (such as app installation, app launch, and in-app purchase), a device identifier (the identifier for vendor; the advertising identifier only if you allow tracking in iOS), and basic technical information such as device model, OS version, and app version. Your calendar data, photos, and the text you analyze are never sent to Meta.
• Who processes it: Meta Platforms Ireland Ltd. (for users in the EEA) and Meta Platforms, Inc.
• Legal basis (GDPR Art. 6(1)(f)): Our legitimate interest in measuring and improving the effectiveness of our marketing.
• Your choices: You can limit this processing by turning off Allow Apps to Request to Track in Settings → Privacy & Security → Tracking, and by adjusting your ad preferences in your Meta account. You can also contact us to object to this processing.
• Meta privacy policy: facebook.com/privacy/policy

4. Data We Do NOT Collect

• No crash reporting sent to third parties
• No ads displayed in the app
• No AI processing of your calendar unless you choose it — the AI feature runs only on text from a photo you actively pick (see section 3.4), never automatically on your calendar
• No photos are ever uploaded or stored — text recognition happens on your device
• No data of yours is stored on our servers
• No account creation required

5. Third-Party Services

6. Calendar Permission

FullYear requests full calendar access (read and write) to let you view, create, edit, and delete events. You can revoke this permission at any time in Settings → Privacy & Security → Calendars. Without calendar access the app cannot display or modify your events.

7. Data Retention

We do not store any of your personal data on our systems, so there is nothing for us to retain or delete. Your calendar data is retained according to your own device and iCloud settings. To delete your calendar data, use Apple's Calendar app or iCloud settings.

Text sent for photo-to-events analysis (section 3.4) is not stored by us or by our proxy. OpenAI may retain it briefly for abuse monitoring (typically up to 30 days) before deleting it, per its API data-retention policy.

App event data sent to Meta (section 3.5) is retained by Meta according to its own data policy.

8. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights regarding your personal data:

• Right of access (Art. 15): You can request information about what data we process.
• Right to rectification (Art. 16): You can correct inaccurate data — in this case, directly through the app or Apple's Calendar.
• Right to erasure (Art. 17): You can delete your calendar data directly through the app or Apple's Calendar. For subscription data, contact RevenueCat.
• Right to restriction (Art. 18): You can restrict processing by revoking calendar permission in iOS Settings.
• Right to data portability (Art. 20): Your calendar data is accessible through Apple's standard export tools.
• Right to object (Art. 21): You can object to processing by revoking calendar permission or deleting the app.
• Right to lodge a complaint: You have the right to lodge a complaint with your national data protection authority. In Finland: tietosuoja.fi

To exercise any of these rights, contact us at keminonele@icloud.com. We will respond within 30 days.

9. International Transfers

Your calendar data is processed exclusively on your device and is not transferred internationally by us. RevenueCat may process subscription data in the United States. If you use the optional photo-to-events feature, the text extracted from your photo is relayed by Supabase and processed by OpenAI, primarily in the United States. App event data collected by the Meta SDK may be transferred by Meta to the United States.

These transfers outside the European Economic Area (EEA) are protected by the EU Standard Contractual Clauses (SCCs) included in each provider's Data Processing Addendum, and, where applicable, by the provider's certification under the EU-U.S. Data Privacy Framework: OpenAI DPA  ·  Supabase DPA  ·  RevenueCat DPA  ·  Meta data transfer terms.

10. Security

All calendar data is processed on-device and protected by iOS's built-in security model (sandboxing, encryption at rest). The App Group used for widget data is protected by iOS app group entitlements and is inaccessible to other apps.

11. Children's Privacy

FullYear is not directed at children under 13. We do not knowingly collect personal data from children. The app contains no account creation or social features and does not display advertising.

12. Changes to This Policy

If this policy changes materially, the updated date at the top of this page will reflect that. For significant changes we will update the app's App Store description. Continued use of the app after changes constitutes acceptance.

13. Contact & Data Controller

Miika Kettunen
Finland
keminonele@icloud.com