Privacy Policy
- We collect only what ShareToCal needs to work: your email address, the things you choose to save, and what’s needed to send your reminders.
- We don’t sell your data, show ads, or use analytics or tracking tools.
- You can change your email address or password, or delete your account and everything in it, at any time from Settings in the app.
Who we are
ShareToCal (the app and sharetocal.com) is operated by Angeltooth Ltd, a company registered in England and Wales (company number 09595141), registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. Angeltooth Ltd is the data controller for the personal data described in this policy.
For any privacy question or request, email privacy@angeltooth.com.
What we collect
Your account
Your email address and password. Your password is stored only in hashed form by our sign-in provider, so we can never see it.
What you save
The links you save, with their titles, descriptions and preview images; photos, videos and files you share into the app; your notes, tags and bookmarks; and the times you schedule and whether each reminder has been sent. We also keep your settings (such as muting notifications) and a count of how many items you’ve saved.
Notifications
To deliver push notifications, our notification provider OneSignal holds a registration for each device you sign in on, linked to your account’s ID. OneSignal also records details of the device, such as its model, operating system, language, time zone and IP address. Notifications are delivered through Apple’s and Google’s push notification services. If you receive reminders by email, the email includes the item’s title and link.
Bot protection
The sign-in, sign-up and password-reset screens use Cloudflare Turnstile, which processes your IP address and browser or device signals to check that you’re a person rather than an automated bot.
Technical logs
Our hosting and infrastructure providers keep routine logs of requests, including IP addresses, for security and troubleshooting.
Stored only on your device
Your chosen app language is stored on your device, not on our servers.
We don’t access your contacts or your location, and we don’t use advertising, analytics or tracking tools.
Link previews
When you save a link, our servers fetch the web page to find its title and image. To avoid fetching the same page over and over, we keep that preview information in a short-term cache for up to 7 days. The cache is keyed only by the link itself. It isn’t connected to your account or to who saved the link.
If we can’t get a preview for a website, we record the website’s name and an example link so we can improve previews for that site. The example link is removed after 90 days, and any reference to the item it came from is removed as soon as that item is deleted. Only the website’s name and a count are kept.
Preview images are stored at web addresses that aren’t published anywhere, so they can be shown in the app and in share previews. Anyone who has the exact address of an image can view it.
Sharing an item
If you create a share link for an item, anyone with that link can see the item’s title, link, image and any attached file, until the share link expires or you delete the item. Messaging apps may also fetch the link to show a preview when you send it to someone.
How we use your data
- To provide ShareToCal: creating your account, storing and syncing what you save, sending your reminders, and sending account emails such as sign-up confirmation, password resets, codes to confirm a change of email address, and security notices when your password or email address is changed. Our lawful basis is that this is necessary to provide the service you’ve signed up for (performance of a contract).
- To keep it secure and working: bot protection, preventing abuse, and diagnosing problems, including the link-preview diagnostics above. Our lawful basis is our legitimate interest in running a secure and reliable service.
- To meet legal obligations, where the law requires us to keep or disclose information.
We don’t use your data for advertising, and we don’t sell it or share it with anyone for their own purposes.
Who processes your data for us
We use the following service providers to run ShareToCal. They process data only on our instructions and for the purposes below.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and server functions | European Union (Frankfurt, Germany) |
| OneSignal | Push notifications | United States |
| Resend | Account emails and reminder emails | United States |
| Vercel | Hosting the sharetocal.com website | United States, with a global network |
| Cloudflare | Turnstile bot protection | United States, with a global network |
International transfers
Some of these providers are based in, or process data in, the United States. Where personal data is transferred outside the UK or the European Economic Area, we rely on appropriate safeguards, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or the UK–US data bridge where a provider is certified under it.
How long we keep your data
- Your account and what you save: until you delete them, or delete your account.
- Deleted items: removed straight away. Any attached file or preview image is removed within about a day.
- Deleted accounts: your account, everything you saved, your files and your notification registration are deleted straight away.
- Backups: our database is backed up daily and each backup is kept for 7 days, so deleted data can remain in a backup for up to 7 days before it’s overwritten. Backups are used only to recover from a failure. Uploaded files aren’t included in backups.
- Link-preview cache: up to 7 days. Preview diagnostics: example links are removed after 90 days.
- Emails and logs: our email provider and hosting providers keep records of sent emails and requests for limited periods, under their own retention policies.
Deleting your account
In the app, go to Settings → Account → Delete account. Deletion is immediate and permanent. If you can’t use the app, see how to request deletion.
Your rights
You have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to receive a copy of it in a portable format. You can correct your email address yourself at any time, in the app under Settings → Account → Change email. To exercise any of these rights, email privacy@angeltooth.com. We’ll respond within one month.
If you’re unhappy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk, or to the data protection authority in the country where you live.
Children
ShareToCal isn’t intended for children under 13, and we don’t knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we’ll delete it.
Security
All data is encrypted in transit, and access to the items and files you save is restricted to your own account.
Changes to this policy
If we change this policy, we’ll update it here and change the date at the top. If a change significantly affects how we use your data, we’ll tell you in the app or by email.
Contact
Angeltooth Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ · privacy@angeltooth.com
For help using the app, email support@sharetocal.com.