Privacy

Your account. Your email, name, password (stored hashed by our sign-in provider, never readable), and optional profile details you choose: major and time zone.

Calendar links you connect. Your LMS calendar link. These are private, read-only links: they show calendar events only, with no grades and no way to change anything. We use them only to refresh your calendar a few times a day. We never ask for your university login or LMS password.

Your calendar. Classes, due dates, and campus events that sync in, plus anything you add yourself: events, reminders, assignment progress, study goals, study blocks, and group plans.

Where you live (optional). A dorm or address you enter, used only to place home at the start of your daily route on the Agenda.

Feedback. Anything you send from the Feedback tab.

Only you. Every account is walled off from every other at the database level. No other student can read your calendar, assignments, study plan, or links.

Friends you accept in Schedule compare. They see only when you're busy or free, never titles, locations, or notes. Remove a friend and sharing stops right away.

People in a group plan. When you make or are invited to a plan, everyone in it sees the plan's details (what, when, where, notes) and who's invited and going. Nothing else from your calendar is shared.

The person who runs the app. As the operator, we can technically access the database to fix problems. We only look at an account when you ask for help or to fix a bug, and read the Feedback you send.

We don't sell data, run ads, or use analytics trackers. These services process data only to make the app work:

• Supabase: the database and sign-in.
• Vercel: hosts the website.
• Email delivery: if you turn on reminders, your address and the reminder's event details are passed to our email provider to send it.
• OpenStreetMap: if you enter a street address as your home, it's looked up on OpenStreetMap to find its location. Picking a dorm sends nothing.
• Anthropic: at schools where you import your schedule by pasting it in, that text is sent to Anthropic's Claude API to read out your classes. Nothing becomes an event until you review it.

One sign-in cookie to keep you logged in, and a few settings saved in your browser (like dark mode). No advertising or tracking cookies.

Disconnect a link. On the LMS sync and Class schedule pages. Synced events from that link are removed.

Reset your calendar subscription link. In Settings, if you shared it by accident. The old link stops working.

Delete your account. Settings → Delete account. This permanently erases your profile, calendar, links, goals, and everything else tied to your account. It can't be undone.

PantaCal is an independent student project in early testing. It isn't affiliated with any university or D2L Corporation. If this policy changes in a way that affects your data, we'll update this page and the date above.

Use the Feedback tab in the app to ask anything about your data or to request help deleting it.