Privacy Policy

1. Who We Are

Ribbon Studios LLC is a software company based in the United States and is the entity responsible for the personal information handled under this policy. Clique Calendar is a scheduling app that helps friend groups find shared availability and plan events. We do not have a designated Data Protection Officer, but we take privacy seriously and will respond to any question or request you send us.

You can reach us about anything in this policy at ops@ribbonstudios.org. Because we operate exclusively online, email is our designated channel for privacy questions and for the rights requests described in this policy.

2. Geographic Scope

Our Services are intended for, and directed to, users located in the United States. We do not target our Services to, or market them in, the European Union, the European Economic Area, the United Kingdom, or other regions outside the United States.

If you access our Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your location. This policy describes your rights primarily under United States federal and state law.

3. Information We Collect

The information we collect depends on whether you are using the Clique Calendar app or simply visiting our website.

3.1 Information you provide when you use the app

Clique Calendar requires an account. When you sign up and use the App, we collect and store:

• Account and profile information: your email address (required), your display name, an optional username (handle), and an optional profile photo (avatar) that you choose to upload.
• Authentication data: your account is managed through Amazon Cognito. Your password is handled by Cognito and is never visible to us. Email verification codes and account emails are delivered through Amazon Simple Email Service.
• Social connections: your friends, friend requests you send or receive, the groups you create or join, and the invitation links you generate or accept.
• Events and RSVPs: events you create or are invited to, including title, description, location text, date and time, an optional event cover image, the participant list, and each participant's RSVP status.
• Preferences and status: your availability preferences, notification settings, app appearance settings, and your presence status (for example, online, away, or do not disturb).
• Support correspondence: the contents of messages you send to us by email.

3.2 Calendar access and what we sync

To help you find shared availability, the App can ask for permission to read the calendars on your device. Calendar access is optional and is only used after you grant the system permission and choose which calendars to include.

When calendar sync is enabled, the App reads your selected calendars on your device and uploads only busy time ranges — the start and end times when you are unavailable — together with an internal calendar identifier and the originating event's identifier so the same entry is not duplicated. We do not upload the titles, descriptions, locations, notes, or attendees of the events in your device calendars. Those details remain on your device. The busy ranges we receive let your friends see when you are free without seeing what you are doing.

3.3 Push notification tokens

If you enable notifications, the App registers a push notification token for your device and stores it with your account so we can deliver event invites, RSVP updates, and reminders. See Section 5 for details on how push notifications work.

3.4 Diagnostics and error reports

To keep the App stable, when the App encounters an error it may send us a diagnostic report containing the error message and type, a technical stack trace, whether the error was fatal, your account identifier, the app version and build, your device platform and operating system version, your device name, and a timestamp. These reports are used only to diagnose and fix problems.

3.5 Information collected automatically on our website

When you visit cliquecal.com, our servers and analytics technology record technical and usage information such as your IP address, device and browser type, the pages you view, and how you interact with them. The website does not require an account. Analytics technologies are disabled until you consent through our cookie banner (see Section 6).

The table below lists the categories of personal information defined by the California Consumer Privacy Act and states which categories we collect across the Services.

We do not collect sensitive personal information, and we do not use any information to build advertising profiles or to infer characteristics about you.

4. How We Use Your Information

We use the information we collect only for the following purposes:

• To create and operate your account and to provide the core features of Clique Calendar — surfacing shared availability, managing friends and groups, and creating and coordinating events.
• To send you transactional messages, such as email verification codes, event invites, RSVP updates, and reminders.
• To understand how visitors use our website and to measure and improve the performance and usability of the Services.
• To respond to your questions, requests, and support inquiries.
• To detect, prevent, and address security incidents, abuse, fraud, and technical problems, including through diagnostic error reports.
• To comply with our legal obligations and enforce our terms and policies.

We do not use your personal information for targeted or cross-context behavioral advertising, and we do not use automated processing to make decisions that produce legal or similarly significant effects about you.

5. Push Notifications

If you grant notification permission, Clique Calendar sends push notifications for events, RSVPs, and reminders. To deliver them, we store a push token for your device and send the notification through Expo's push notification service, which relays the message to Apple Push Notification service (on iOS) and Firebase Cloud Messaging (on Android).

Notification content can include limited personal information needed to make the notification meaningful, such as an event title or the name of a friend. You can turn notifications off at any time in your device settings or within the App, and signing out of the App removes your device's push token from your account.

6. Cookies and Website Analytics

This section applies to the cliquecal.com website. The Clique Calendar mobile app does not use advertising cookies or third-party web analytics.

• Strictly necessary technologies are required for the website to function and to remember your privacy choice. They do not require consent.
• Analytics technologies help us understand site usage. They are not loaded until you consent through our cookie banner.

Google Analytics

We use Google Analytics 4, a service provided by Google LLC, to measure how visitors find and use our website. Analytics is disabled by default through Google Consent Mode and only activates if you select "Accept" on the cookie banner shown on your first visit. If you select "Decline," analytics cookies are not set. Google is engaged as our service provider, with Google Signals and advertising personalization turned off, so the data is used only to provide analytics to us and not for cross-context behavioral advertising.

Google's own handling of data is described in the Google Privacy Policy. You can also install the Google Analytics Opt-out Browser Add-on for a browser-wide opt-out.

7. How We Disclose Information

We do not sell your personal information. We disclose personal information only to the service providers that help us operate the Services, and only for the limited business purposes described below. Each service provider is engaged under a written agreement that requires it to protect the information and prohibits it from using the information for its own purposes.

We may also disclose personal information in these limited situations:

• Legal requirements: to comply with a law, regulation, subpoena, court order, or other valid legal process, or to respond to a lawful request from a public authority.
• Protection of rights and safety: to investigate, prevent, or address fraud, security issues, abuse, violations of our terms, or threats to the rights, property, or safety of Ribbon Studios, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case personal information would be transferred subject to this policy or a successor policy with comparable protections.

When you use Clique Calendar, certain information is visible to other users by design: your display name, username, and profile photo are visible to people you connect with, and your name, RSVP status, and busy time ranges are visible to friends and to participants in events you share. This is a normal part of how the App works and is not a sale or disclosure to a third party.

8. We Do Not Sell or Share Your Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act and similar state laws. We have not sold or shared personal information in the twelve months preceding the effective date of this policy. We also do not knowingly sell or share the personal information of consumers under 16 years of age.

Disclosures to the service providers listed above are made for business purposes only and do not constitute a sale or a share. If this ever changes, we will update this policy, provide a clear opt-out mechanism, and obtain consent where the law requires it.

9. Data Retention

We keep personal information only for as long as it is needed for the purposes described in this policy, and then delete or de-identify it.

• Account information: we retain your account, profile, social connections, events, and calendar busy ranges for as long as your account remains active. When you delete your account, this information is removed as described in Section 10.
• Calendar busy ranges: busy ranges synced from your device are refreshed as your calendars change and are removed when you delete your account.
• Diagnostic and server logs: error reports and server access logs are retained for a limited period for security, troubleshooting, and abuse prevention, and then deleted on a rolling basis.
• Website analytics data: Google Analytics data associated with cookies and identifiers is retained for 14 months, after which it is automatically deleted. Aggregate, non-identifying reports may be kept longer.
• Correspondence: emails and support messages are retained for as long as needed to resolve your matter and to keep reasonable business records.

10. Account Deletion and How to Delete Your Data

You can delete your Clique Calendar account at any time from within the App. Open Settings, scroll to the Account section, tap Delete Account, and confirm.

When you delete your account, we:

• permanently remove your authentication record so the account can no longer be used to sign in;
• delete your user profile, including your name, username, avatar reference, and stored push notification tokens;
• delete your friend connections, pending friend requests, synced calendar busy ranges, in-app notifications, and your participation records in events;
• cancel the events for which you are the organizer.

Signing out of the App also clears locally cached personal data from your device. If you are unable to use the in-app tool, you may request deletion by emailing support@ribbonstudios.org. Step-by-step instructions are also available on our Account Deletion page. We may retain a limited amount of information where we are required to do so by law, after which it is deleted.

11. Your Privacy Rights

Depending on the state in which you live, you may have some or all of the following rights regarding your personal information. We extend the core of these rights to all users in the United States, regardless of state.

• Right to know and access: to request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients.
• Right to delete: to request that we delete personal information we have collected from you, subject to legal exceptions. You can delete your account directly in the App as described in Section 10.
• Right to correct: to request that we correct inaccurate personal information we hold about you. You can also edit much of your profile information directly in the App.
• Right to data portability: to receive a copy of certain personal information in a portable, machine-readable format.
• Right to opt out: to opt out of the sale of personal information, sharing for cross-context behavioral advertising, and targeted advertising. As described above, we do not engage in any of these activities.
• Right to non-discrimination and non-retaliation: we will not deny you services, charge you a different price, or provide a different level of quality because you exercised your privacy rights.
• Right to appeal: if we decline your request, you may appeal that decision as described below.

12. How to Exercise Your Rights

To exercise any of the rights above, email us at ops@ribbonstudios.org with the subject line "Privacy Request" and a description of your request. To delete your account and associated data, you may also use the in-app Delete Account tool described in Section 10.

Verification. To protect your information, we will take reasonable steps to verify your identity before acting on a request, generally by matching information you provide against information already in our records. We will not use information collected for verification for any other purpose.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of your written permission and may still ask you to verify your own identity directly.

Our response. We will acknowledge your request promptly and respond within 45 days. If we need more time, we will tell you and may extend our response period as permitted by law. There is no fee for a reasonable request, though we may charge a reasonable fee or decline a request that is excessive, repetitive, or manifestly unfounded, as the law allows.

Appeals. If we deny your request, you may appeal by emailing us at ops@ribbonstudios.org with the subject line "Privacy Appeal" within 60 days of our response. Please include your original request and the reason you believe our decision was incorrect. If your appeal is denied, you may contact your state attorney general to raise a concern.

13. California-Specific Disclosures

This section provides additional detail for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

• Categories collected and disclosed. The categories of personal information we collect are listed in Section 3. In the preceding twelve months, we collected the categories marked "Yes" in that table and disclosed them to the service providers listed in Section 7 for business purposes.
• No sale or sharing. We have not sold personal information and have not shared it for cross-context behavioral advertising in the preceding twelve months.
• No sensitive information. We do not collect or use sensitive personal information, so the right to limit its use does not result in any change to our practices.
• Shine the Light. California's "Shine the Light" law permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information for third parties' direct marketing.

14. Other State Privacy Laws

Residents of other states with comprehensive consumer privacy laws have rights comparable to those described in Section 11 and may exercise them using the same process in Section 12. These states include, among others, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, and other states whose laws take effect on staggered dates. The specific rights, thresholds, and exceptions vary by state. We will honor the rights available to you under the law of your state of residence.

15. Children's Privacy

Our Services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Services or send us any personal information.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at ops@ribbonstudios.org and we will take appropriate steps. We do not knowingly sell or share the personal information of any user we know to be under 16.

16. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. These measures include encryption of data in transit, storing authentication tokens in your device's secure storage, restricting access to personal information to authorized personnel with a legitimate need, and selecting service providers that maintain recognized security standards.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You can help protect your information by keeping your account credentials confidential and using a current version of the App and your device's operating system.

17. Data Breach Notification

We maintain procedures to detect, assess, and respond to security incidents involving personal information. If a breach affects your personal information and poses a risk to you, we will notify you and any regulators as required by applicable law, without unreasonable delay. Notifications to affected individuals will describe the nature of the incident, the information involved, and steps you can take to protect yourself, and will generally be sent by email.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date above and, where appropriate, provide a more prominent notice within the Services. We encourage you to review this policy periodically. Your continued use of the Services after an update takes effect indicates your awareness of the revised policy.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

• Privacy questions and rights requests: ops@ribbonstudios.org
• Product support: support@ribbonstudios.org
• Report abuse or a safety concern: report@ribbonstudios.org