Privacy Policy

Last updated: 2 September 2026

This policy explains what information designedbykoda collects, how it is used, and the choices you have, specifically in relation to the E-Ink Calendar product and its connection to your Google Calendar. If you have questions after reading this, contact us at hello@designedbykoda.com.

Information We Collect

When you connect your Google account to set up an E-Ink Calendar device, we collect:

• Your Google account email address and a unique account identifier, used to identify your account.
• Read only access to the Google Calendar or calendars you choose to connect, including event titles, start times, and whether an event is marked as an all day event.
• A device identifier and a device authentication credential, generated by your physical device during setup.
• Basic device settings you configure, such as your timezone and how often the device should refresh.

We do not request or receive access to any other Google service, and we do not request permission to create, edit, or delete anything in your calendar. Access is read only.

How We Use This Information

The information above is used for one purpose: to let your physical E-Ink Calendar device retrieve your upcoming events and display them on its screen. Specifically:

• Your Google account identifier links your device to your calendar selection.
• Your calendar data is fetched by our server and passed to your device in a simplified format it can render.
• Your timezone setting is used to correctly calculate what day it is for you and when your device should refresh.

We do not use your data for advertising, do not build behavioural profiles from it, and do not sell it to any third party.

Data Storage and Security

We take the following specific steps to protect your data:

• The refresh token that grants access to your Google Calendar is encrypted before it is stored. It is never stored in plain text.
• Your device's authentication credential is never stored directly. Only a one way cryptographic hash of it is kept, so the original value cannot be recovered even if our database were accessed.
• All data is stored using Cloudflare's infrastructure, and all communication between your device, your browser, and our servers happens over encrypted connections.

Third Party Services

To operate the E-Ink Calendar, we rely on a small number of service providers:

• Google, to authenticate your account and retrieve your calendar data. Google's own privacy policy applies to how they handle your account information.
• Cloudflare, which hosts our website, database, and server infrastructure.

If you join a waitlist for one of our products, your email address is stored with Brevo, our email service provider, solely to send you updates about that product.

Your Rights and Choices

You are in control of the access you grant us at all times:

• You can revoke our access to your Google Calendar at any time from your own Google Account settings, at myaccount.google.com/permissions. This immediately stops us from being able to access your calendar.
• You can request that we delete your account and all associated data by contacting hello@designedbykoda.com.
• You can unsubscribe from any waitlist email using the link included in that email.

Data Retention

We retain your account information for as long as your device remains active and connected. If you delete your account or revoke access, we delete the associated encrypted refresh token and stop retrieving calendar data on your behalf.

Children's Privacy

The E-Ink Calendar is not directed at children, and we do not knowingly collect information from anyone under the age of 13.

Changes to This Policy

If this policy changes, the updated version will be posted on this page with a revised date at the top.

Contact

For any questions about this policy or your data, contact hello@designedbykoda.com.