Privacy Policy

Data Controller

Data We Collect

On this website (waitlist)

• Email address — to notify you at launch and secure your priority access.
• Language preference — to send communications in your language.
• Sign-up source — to understand how you found Balm (internal analytics only).

We do not store your raw IP address. A one-way hash (SHA-256) is used solely for anti-spam protection, then discarded.

Inside the Balm app

Balm is local-first: your reminders, tasks, events, folders and attached documents are stored only in a local database on your device, and are never uploaded to our servers by default.

• App account (optional) — a random, anonymous identifier is created by default. If you sign in with Google (to purchase/restore the premium subscription, or to sync a calendar), we receive your Google account email and identifier via Firebase Authentication.
• Usage analytics (Firebase Analytics) — anonymized product-usage events (e.g. first launch, session, onboarding completed, premium offer viewed, subscription purchased). These events do not contain your name, email or the content of your reminders/tasks.
• Google Calendar / Google Tasks (only if you connect it) — we read event/task titles, descriptions, locations, dates and recurrence to import them into the app. If you explicitly enable "read-write" for a calendar you own, Balm can also push updates (title/description/location/date only) back to that Google Calendar event — Balm never creates or deletes Google Calendar events.
• Microsoft Outlook (only if you connect it) — same categories of data (calendar and tasks), read-only.
• CalDAV (only if you connect a server of your choice, e.g. Nextcloud, iCloud, Fastmail) — your server address and username are stored locally on your device; your password is stored only in your device's secure hardware-backed keystore, never on our servers. Same optional read-write behavior as Google Calendar (update only).
• Device calendar (optional) — if enabled, Balm reads your phone's local calendar (not synced to any account) directly through the Android system; nothing is sent to any server.
• Premium subscription purchase — payment itself is handled entirely by Google Play Billing; Balm never sees your card details. We send your anonymized account identifier and Google's purchase token to our own server, solely to validate the purchase with Google.
• Manual backup files (optional) — you can export an encrypted backup of your data; this file is created and shared entirely at your own initiative (e.g. by email or your personal cloud storage) and is never automatically sent to us.
• In-app feedback (optional) — a free-text message you choose to send us; no identifier is required to use this form.

Purpose and Legal Basis

• Launch notification (waitlist) — legal basis: consent (Art. 6.1.a GDPR).
• Providing the app's core functionality (local storage, reminders) — legal basis: performance of a contract (Art. 6.1.b GDPR).
• Optional calendar/task synchronization (Google, Outlook, CalDAV, device calendar) — legal basis: your explicit consent, given separately for each source and revocable at any time from Settings (Art. 6.1.a GDPR).
• Premium subscription purchase and validation — legal basis: performance of a contract (Art. 6.1.b GDPR).
• Usage analytics, to understand and improve the app — legal basis: legitimate interest (Art. 6.1.f GDPR).
• Anti-spam protection on the waitlist — legal basis: legitimate interest (Art. 6.1.f GDPR).

Who We Share Data With

Your data is never sold. Depending on the features you use, it may be processed by:

• Google (Firebase, Google Calendar/Tasks API, Google Play Billing) — authentication, analytics, optional calendar sync, and subscription purchases. Google is certified under the EU-US Data Privacy Framework.
• Microsoft (Microsoft Graph API) — only if you connect an Outlook account.
• The CalDAV server of your choice — only if you connect one; that server is operated by a third party you select yourself and is governed by its own privacy policy, outside our control.
• OVHcloud (France/EU) — hosting of this website and of the app's static, non-personal content (e.g. in-app announcements).
• Email provider (e.g. Brevo / Mailchimp) — solely to send the waitlist launch notification.

International Transfers

Some processors above (notably Google, Microsoft) may process data outside the European Union, in particular in the United States. Where this occurs, it relies on adequacy mechanisms such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Retention Period

• Data stored on your device (reminders, tasks, events, documents) — kept until you delete it yourself or uninstall the app.
• Online account (Firebase) — kept until you delete it from Settings → "Delete my account", or your data on our servers otherwise expires under this policy.
• Usage analytics — kept for the standard retention period configured in Firebase Analytics.
• Waitlist data — kept until the app launches, then either transferred to your user account (if you sign up) or deleted within 30 days of launch if you choose not to proceed.

Your Rights

In practice: uninstalling the app instantly removes everything stored on your device. You can delete your online account at any time from Settings → "Delete my account" (or request it here if you no longer have the app installed), and revoke Balm's access to Google Calendar, Outlook or a CalDAV server at any time from Settings → "Calendar sync", or directly from your Google/Microsoft account's connected-apps settings.

To exercise any other right: privacy@onclearway.com. We respond within 30 days.

Cookies

This website uses no tracking or advertising cookies, and no third-party analytics tool is loaded on it. The Balm app itself does not use cookies.