Privacy Policy
Last updated June 4, 2026
Overlapp is a persistent shared group calendar. It exists so a group can see when everyone is free without sharing what each person is actually doing. Privacy is the product, not a footnote: co-members only ever see free/busy availability — never your event titles, descriptions, locations, or attendees. This policy explains what we collect, how we use it, what we share, and the choices you have.
What we collect
- Account information — your email address, first and last name, an optional display name, and your time zone.
- Group activity — the groups you create or join, your role in them, and invitations you send or accept.
- Availability you enter — manual availability blocks (including any recurrence), and your responses to scheduling proposals.
- Connected-calendar data— if you connect a calendar (e.g. Google Calendar), we read your events’ start/end times, their free/busy (“busy”) status, category, and title so you can apply per-event and per-category overrides. Titles are stored for your own use and are never shown to other members.
- Technical data — basic information your browser sends (such as your IP address) and, if you opt in, a push-notification subscription for your device.
We do not sell your data, and we do not use your data or your Google user data to serve advertising.
How sharing works (free/busy only)
When you join a group, other members can see when you are free or busy in aggregate — for example, that a particular 30-minute slot has 4 of 5 members free. They cannot see why you are busy: event titles, descriptions, calendar names, and categories never leave your account. This boundary is enforced on our servers, not just in the interface.
Google user data
If you connect Google Calendar, Overlapp’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:
- We request read access to your calendar (
calendar.readonly) to import your busy times, and — only if you turn on calendar write-back — permission to add a finalized event to your calendar (calendar.events). - We use Google Calendar data solely to provide and improve the scheduling features you see in Overlapp. We do not transfer it to others except as needed to provide the service, comply with the law, or as part of a merger with appropriate protections; and we do not use it for advertising.
- You can disconnecta calendar at any time on the Calendars page; doing so deletes the stored access tokens and the imported events. You can also revoke Overlapp’s access from your Google account permissions.
How we store and protect your data
Your data is stored with our infrastructure providers (Supabase for the database and authentication; Resend for transactional email). Access is governed by per-row database security policies so that members only see the de-identified availability described above. Calendar access tokens are kept in a server-only store that is never exposed to the browser or to other users.
Data retention & account deletion
You can delete your account at any time from your Profile page. Deleting your account permanently removes your profile, availability, calendar connections and imported events, push subscriptions, and group memberships. For any group you own, you can transfer ownership to another member to keep the group alive, or it will be dissolved. We retain information only as long as needed to provide the service or to meet legal obligations.
Your choices
- Connect or disconnect calendars whenever you like.
- Turn push notifications on or off per device.
- Edit your profile, or delete your account entirely.
Children
Overlapp is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes to this policy
We may update this policy as the product evolves. We will revise the “last updated” date above and, for material changes, provide a more prominent notice.
Contact
Questions about privacy? Email us at privacy@overlapp.app.