Privacy Policy

Last Updated: August 16, 2026

Introduction

FACTUM ERIT ("we", "us", or "our") is committed to protecting your privacy and being transparent about how we collect, use, and store your data, in compliance with GDPR and other privacy regulations.

How We Use Google User Data

This section states exactly what data Factum Erit receives from Google, how we use it, how long we keep it, who else sees it, and how you take it back. It applies only if you sign in with Google or connect a Google Calendar — Factum Erit works without either, and the two are requested separately.

Google scope we request	Google user data we receive	How we use it
openid, email, profile only if you choose "Sign in with Google"	Your Google account's email address and display name.	To create and identify your Factum Erit account, sign you in, and send you service email at that address. We do not store your Google profile picture, and we never use your Google identity for advertising, profiling or resale.
https://www.googleapis.com/auth/calendar.readonly only if you explicitly connect a calendar	Read-only access to events on the Google calendars you select: title, start and end time, all-day flag, location, description, recurrence, and each calendar's name and time zone.	To show your events beside your tasks in a single agenda; to include them in the private calendar feed you subscribe to; and to let the assistant answer scheduling questions such as "what should I do today?" without you retyping your schedule.

Read-only means read-only. Factum Erit requests no Google write scope and cannot create, change or delete anything in your Google Calendar. Events you create in Factum Erit live in your Factum Erit workspace; they are not written back to Google.

How we store Google user data

• We keep no lasting copy of your calendar. Events are fetched from Google when a view or a subscription needs them, used to build that response, and discarded — they are never written to our database. Two short-lived caches exist so the same request doesn't re-fetch: the rendered calendar feed is held in server memory for up to five minutes, and your browser holds a rendered view for a few minutes. Both expire on their own; neither is written to disk.
• Your Google credential is stored — the OAuth refresh token, so your calendar keeps working without re-consenting. It is held encrypted at rest (Fernet, the same key that protects Vikunja tokens) in server-side configuration on a private volume, is never sent to a browser, and the short-lived access tokens derived from it exist in memory only (under an hour).
• Connection metadata is stored — which Google account is linked, which of its calendars you selected, and when it was connected.

Who else sees Google user data

• We do not sell Google user data and we never use it for advertising.
• AI features. When you ask the assistant something that needs your schedule, the relevant events are sent to our AI provider (Anthropic) to generate that answer for you. Anthropic processes it on our behalf for that request and does not use it to train its models. Factum Erit does not use Google user data to develop, improve or train generalized AI or machine-learning models.
• Hosting. Our infrastructure providers (currently Render.com, in the United States) process the data incidentally as part of running the service.
• Your calendar feed URL. If you subscribe to your Factum Erit calendar from another app, that URL contains a secret token, and anyone holding the URL can read the events in that feed. Treat it like a password; email us if it leaks and we will rotate it.
• No routine human review. Nobody at Factum Erit reads the contents of your calendar except with your explicit permission (for example, to investigate a problem you reported), where strictly necessary for security or abuse investigation, or where required by law.

How to withdraw Google access

• Disconnect in Factum Erit — the Disconnect control on your accounts page deletes the stored refresh token and removes your Google calendars from your views immediately.
• Revoke at Google — myaccount.google.com/permissions withdraws our access from Google's side at any time.
• Delete your Factum Erit account — deletes the credential from our systems along with everything else (see Right to Deletion below), and asks Google to revoke it. If Google can't be reached at that moment the credential is still deleted on our side and can no longer be used by us; you can always withdraw the grant yourself at myaccount.google.com/permissions. Your events stay in your Google Calendar; deleting those is done with Google.

Data We Collect

1. Account Information

When you create a FACTUM ERIT account: your email address, platform type, registration timestamp, and user ID.

2. Your Vikunja Workspace

The projects, tasks, boards and related content you create in your connected Vikunja account.

3. Usage Logs

Logs of your interactions with the service (access logs, command history) for security and service quality. Automatically deleted after 90 days.

4. Tokens and Connected Accounts

The Vikunja API tokens we store to act on your behalf are encrypted at rest. If you connect Google Calendar we also store the OAuth refresh token Google issues us, encrypted at rest and server-side only — see How We Use Google User Data.

Data Retention

Data Type	Retention Period	Reason
Account information	Until account deletion	Service provision
Google calendar events	Not retained — fetched per request	Showing your agenda
Google OAuth credential	Until you disconnect, revoke, or delete your account	Keeping your calendar connected
Routine goals and the check-ins you record (date, optional minutes and note)	Until you delete the routine or your account	Showing your routine progress to you
Access logs / command history	90 days	Security and support
Accounting ledger entries	Retained after deletion	Financial record-keeping (legal obligation)
Abuse-prevention data	Retained after deletion	Fraud/abuse prevention (legitimate interest)
Waiting list	90 days after last activity	List management

Your Rights (GDPR)

Right to Access & Portability

You can request a copy of all your data in machine-readable JSON at any time. Email privacy@factumerit.app with the subject "Data Export Request".

Right to Deletion ("Right to be Forgotten")

Email us with "Delete My Account" in the subject line. When you delete your account we permanently remove:

• Your profile and account record
• Your Vikunja account and all its data — projects, tasks, boards, sessions and API tokens
• The encrypted Vikunja tokens we stored and their metadata
• Any Google OAuth credential we hold, and the connected-calendar entries that reference it
• Your routine goals and check-ins
• Your access logs, command history, settings, and connection state
• Your budget and transaction history (your remaining balance is forfeited)

A small set of records is retained where the law allows: accounting ledger entries (financial record-keeping) and abuse-prevention data (legitimate interest). Data held by third-party services you connected (e.g. Google Calendar) must be deleted with that provider. Deletion completes within 30 days.

Data Security

• Encryption at rest: Vikunja API tokens and Google OAuth refresh tokens encrypted using Fernet
• Encryption in transit: HTTPS/TLS for all connections
• Server-side only: OAuth credentials, including the Google refresh token, are never exposed to the browser
• Access controls: role-based access to admin functions

Data Sharing

We do not sell your personal data. We share data only with infrastructure providers, with our AI provider (Anthropic) to answer the requests you make of the assistant, when required by law, or with your explicit consent. For Google data specifically, see How We Use Google User Data.

Children's Privacy

FACTUM ERIT is not intended for children under 16. If you believe we have collected data from a child, contact us immediately.

Changes to This Policy

We may update this policy from time to time and will update the "Last Updated" date above.