Privacy Policy
Draft for review before public launch. Last updated July 23, 2026.
Information we process
Duplical processes your linked Google identity, calendar list, selected event fields, rule settings, and synchronization metadata so it can evaluate and maintain the calendar actions you configure.
How we use information
We use this information to authenticate you, display available calendars, preview rules, synchronize events, prevent duplicates, diagnose failures, and support account deletion.
Google user data
Duplical accesses your Google profile, calendar list, and event data only to provide the sign-in, preview, synchronization, recovery, and deletion features you choose. We do not use Google user data for advertising, sell it, or allow people to read it except when needed for security, support you at your request, comply with law, or operate the service through contracted infrastructure providers. Duplical's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Data minimization
Private-block rules are designed not to persist event descriptions, attendees, locations, or conferencing details. Operational logs exclude raw access tokens and sensitive event content.
Product analytics and beta feedback
We record limited account-level setup, rule-status, reconnect, and deletion events to understand whether Duplical is working. These events do not include calendar names, event titles, guests, locations, descriptions, meeting links, or event times. In-app beta feedback uses predefined answers and does not accept free-text calendar content.
Sharing and sale
We do not sell personal information. Service providers may process limited data to host the application, database, and Google Calendar integration under their applicable terms.
Your choices
You can pause rules, reconnect Google accounts, request an export, choose whether Duplical may follow up on beta feedback, and request deletion of your Duplical account from settings. Some operational records may be retained where required for security or legal obligations.
Security and retention
Google refresh tokens are encrypted before storage. Duplical retains account, rule, and synchronization records while your account is active and removes them through the account-deletion workflow, except for limited records that must be retained for security, fraud prevention, or legal compliance. You can revoke Duplical's access from your Google Account at any time.
Contact
Privacy questions can be sent to privacy@duplical.app.