Privacy policy

In short: YaCal collects no data about you. There are no ads, no tracking and no analytics. Your events stay on your devices and in the accounts you set up yourself. The developer's only server wakes your iPhone or iPad for YaCal's notifications if you want them – and knows nothing but its push address.

Last updated: 5 November 2026. The German version is legally binding.

1 Controller

Frank Dohrmann
Vollmerweg 48
48159 Münster
Germany
Email: info@yacal.de

2 The YaCal app

YaCal (iPhone, iPad, Mac, Apple Watch) does not collect any personal data for the developer – except the device's push address when you turn on YaCal's notifications (see below). The app contains no advertising, no analytics or tracking tools and no third-party software components. Its App Store privacy label is therefore “Data Not Collected”. To work, the app uses features of your device and services provided by Apple, as described below. You can revoke all permissions at any time in your device's settings.

Calendars and reminders

With your permission, YaCal reads and changes events and reminders through Apple's calendar interface (EventKit). The data is processed on the device. Changes reach the providers of the accounts you set up on your device (e.g. iCloud, Google, Exchange) through those accounts; their privacy policies apply.

Syncing via iCloud (settings and Apple Watch)

Your YaCal settings are synced between your devices via iCloud. So that the Apple Watch app works without an iPhone, your iPhone, iPad or Mac store a copy of your calendars and the entries of a time window (about five weeks back to ten weeks ahead) in the private iCloud database of your Apple Account; changes made on the watch travel back the same way. This data is stored exclusively in your iCloud account with Apple – the developer has no access to it. Apple's privacy policy applies.

Location and weather

For the weather forecast, YaCal asks for your approximate location – only while you use the app and only with your permission. The position is rounded to about one kilometre and sent to the Apple Weather service (WeatherKit) to fetch the daily forecast. The forecast is cached on the device. You can turn off the weather in YaCal's settings or deny location access.

Place suggestions and contacts

When you enter a location, YaCal suggests places from your own entries, your contacts and Apple Maps; when you invite someone, people from your contacts. Contacts are searched only with your permission and only on the device. For suggestions from Apple Maps, the text you type is sent to Apple. Your device's location is not used for this.

Natural-language entry

Sentences like “Dentist tomorrow at 3 pm” are understood by Apple Intelligence on the device or by YaCal's own parser on the device. For dictation, YaCal uses the system's dictation feature; Apple's terms apply.

Optional: iCloud calendar sign-in

If you set it up in the settings, YaCal connects directly and encrypted (HTTPS) to iCloud's calendar server. There it reads who your calendars are shared with, others' invitations to their calendars and the attachments of your events. YaCal writes there only what you do in YaCal yourself: your answer to an invitation (accept, maybe, decline), the people you invite to an event of your own or share a calendar with (name and email address, with “View Only” or “Can Edit”), whether a calendar is public, your answer to an invitation to a shared calendar, and files you attach to an event (including photos and scans you take for it – they go only to your calendar server), and subscriptions you add, change or end (address, name, color and settings). Before adding a subscription, YaCal loads the address once directly from its provider's server to check that a calendar is there – without a password or any other details. The server then notifies those involved or sends the invitations, as in Apple's Calendar. Otherwise YaCal changes nothing on the server. For this you enter your Apple Account and an app-specific password. The password is kept in your device's keychain; the details are not synced and never sent to the developer. You can disconnect at any time.

YaCal's notifications and wake-up service

When you turn on YaCal's notifications on iPhone or iPad, YaCal schedules them on the device. So that they keep coming even if you don't open YaCal for a while, the device registers with YaCal's wake-up service, the developer's only server (Amazon Web Services, Frankfurt data centre, as a processor under Art. 28 GDPR). It stores only the device's push address (an identifier issued by Apple through which notifications reach YaCal), the times at which it should wake the device, and a verification key with which Apple confirms that the request comes from a genuine YaCal app (App Attest). No events, no reminders, no names, no Apple Account and no IP address. Once a day – and once more if the scheduled notifications run out sooner – the service sends a silent notification without content through Apple's push service; YaCal then schedules again on the device. When you turn the notifications off, the device unregisters and the entry is deleted; an entry no longer used disappears by itself after 60 days. The service's technical logs contain only shortened identifiers and are deleted after 14 days. The legal basis is the feature you turned on (Art. 6(1)(b) GDPR).

Troubleshooting log

YaCal keeps a technical log on the device (e.g. syncing, error messages) – without the contents of your entries. It only leaves the device if you send it yourself via “Share Log”, for example by email to me. I then use it solely to solve your problem and delete it afterwards.

App Store and crash reports

YaCal is distributed through Apple's App Store; Apple's terms apply to downloading. If you have agreed in your device's settings to share analytics with app developers, Apple provides me with anonymised crash reports and usage statistics that cannot be traced back to you.

3 Contact by email

If you write to me, I use your email address and the content of your message only to answer your request (Art. 6(1)(b) or (f) GDPR). I delete the message once it has been dealt with, unless statutory retention obligations apply.

4 This website

The website yacal.de uses no cookies, no JavaScript and no analytics, and loads nothing from other servers – not even fonts. It is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. When a page is requested, the server stores technically necessary information in log files: IP address, date and time, the page requested, the amount of data transferred, the previously visited page (referrer), and browser and operating system. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR). The logs are deleted automatically after a short period. A data processing agreement under Art. 28 GDPR is in place with netcup.

5 Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Please contact info@yacal.de. You may also lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.

6 Changes

If the app changes so that different data is processed, I will update this policy. The version published here applies.