English | 한국어

Calodu Privacy Policy

Archived copy: this is the policy effective October 8, 2026, which applied from October 8, 2026 to October 13, 2026. The policy currently in force is always at privacy.html.

Effective date: October 8, 2026

Operator: Gleipnir

This Privacy Policy explains how Calodu (the "App"), a Windows desktop calendar app distributed by Gleipnir, handles your information. In this policy, the "Operator" means Gleipnir. The App lets you view and edit your Google Calendar events and Microsoft To Do tasks together in a desktop widget.

This policy is provided in Korean and English. If the two versions differ, the Korean version prevails.

1. Summary

• The Operator runs no server for the App and does not collect your personal information on any Operator server.
• The only personal information the Operator receives directly is the email you send when contacting us (Sections 2 and 7).
• The events, tasks, sign-in tokens, settings, and logs the App handles are all stored in a data folder on your PC (Section 5).
• The App communicates directly from your PC with Google and Microsoft servers; this communication does not pass through the Operator.
• The App contains no advertising, analytics, or crash-reporting tools, and the Operator does not sell your personal information or provide it to third parties.
• Signing out of a service in the App removes that service's sign-in information and cache; deleting the data folder and revoking access in your Google and Microsoft account settings cleans up completely (Section 6).
• Copying To Do tasks to Google Calendar (Section 4) and attaching the widget to the desktop (Section 10, offered only in the installer version) are off in a new installation and are turned on only after you agree in the settings.

2. Information We Process

The App processes the information below only after you sign in with your Google or Microsoft account and grant access. Sign-in takes place on the Google or Microsoft sign-in page shown in your browser; the App does not receive or store your account password.

The calendar ID of your primary Google calendar is usually the same as your Google account email address. Your Google account email address may therefore appear in the cache on your PC (cache.db).

Information the Operator receives directly

The events, tasks, and sign-in tokens the App handles are processed on-device, only inside your PC, and are not sent to any Operator server. This information is deleted from your PC when you sign out in the App or delete the data folder (Section 6). The only personal information the Operator receives and processes directly is the email address and message content (including any name you write) that you send when contacting us. In addition, the Operator receives installation, usage, add-on purchase, and crash statistics that Microsoft provides through Partner Center (Section 9).

3. Purposes of Processing

The App processes the information above only for the following purposes.

• To display your Google Calendar events and Microsoft To Do tasks in the widget.
• To create, edit, complete, or delete events and tasks when you request it directly in the widget.
• If you turn it on in the settings, to copy incomplete tasks that have a due date to your own Google Calendar (Section 4).
• To keep you signed in so that syncing continues without signing in each time.
• To restore display settings such as window position the next time the App starts.
• To keep an activity log so that you can check the cause of problems such as sync errors.

The App syncs with Google and Microsoft every 60 seconds. The first sync downloads all past events in your calendars with no date limit; after that, only changes are downloaded.

Purpose of each requested permission (scope)

Except for the copying (mirroring) in Section 4 that you turn on, the App changes your Google or Microsoft data only when you act directly in the widget. Deleting an event or task at your request in the widget happens only after you confirm in a confirmation dialog in the widget.

4. Copying Microsoft To Do Tasks to Google Calendar (Mirroring)

Only if you turn it on in the settings, the App automatically copies some of your Microsoft To Do tasks as events into the calendar named "To Do" in your Google account. This feature is off in a new installation, and the time you agree when turning it on is recorded in the settings file (widget.json). This copying runs only from Microsoft to Google, and it moves part of the data in your own Microsoft account into your own Google account. The copied information is not sent to the Operator.

• Target calendar: the App does not create calendars. You need to create a calendar named exactly "To Do" in Google Calendar yourself; if it does not exist, the widget shows how to create it.
• What is copied: tasks that have a due date and are not completed
• Content copied: task title, due date (as an all-day event) or reminder time (as a 30-minute event), and internal identifiers (task ID and list ID, stored in the event's private extended properties)
• Content not copied: task notes (body), list names
• When: at every sync, and right after you edit a task in the widget
• Updates and removal: when a task is completed, deleted, or loses its due date, the App deletes the corresponding copy event.
• Limits on changes: the only Google events the App edits or deletes are copies marked with a task ID inside the "To Do" calendar; it does not delete other events or the calendar itself.
• One direction only: edits you make to a copy in Google are not reflected in To Do and are overwritten with the To Do content at the next sync.

Data received from Google is not sent to Microsoft or anywhere else. You can turn copying off in the settings at any time. Turning it off stops further copying, but copy events already created are not deleted; you can delete them directly in Google Calendar if needed.

5. Storage Location and Security Measures

The App's data is stored in a data folder on your PC, whose location depends on how the App was installed.

• Microsoft Store version: %LOCALAPPDATA%\Packages\Gleipnir.calodu_c0vj0afnznazg\LocalState
• Installer version: %LOCALAPPDATA%\agenda-widget

For testing, another location can be set with the AGENDA_WIDGET_DATA environment variable or the --data-dir launch argument. The Operator cannot access the contents of this folder.

The App applies the following measures.

• Sign-in tokens are stored encrypted with Windows DPAPI.
• Communication with Google and Microsoft uses HTTPS.
• The temporary server used to receive the sign-in response (localhost) and the local server that displays the widget (127.0.0.1) are opened only inside your PC.
• Because the Operator has no server, your data is not kept on the Operator's side.

The event and task cache (cache.db) is not encrypted, so any person or program with access to the same Windows account on the same PC can read it. We recommend setting a password on your Windows account and, where possible, using disk encryption such as BitLocker.

6. Retention and Deletion

Retention period

Information stored on your PC is kept until you delete the data folder. Events and tasks deleted in the original service (Google or Microsoft) are also removed from the cache at the next sync. However, if you remove an entire calendar or task list in Google or Microsoft, the items in it may remain in the cache. The activity log moves to a new file when a file reaches about 1 MB and keeps at most 3 older files, so its total size stays under about 4 MB and older log entries are deleted automatically.

When you uninstall the App

• Microsoft Store version: when you uninstall the App, Windows also deletes the data folder (sign-in tokens, cache, settings, log).
• Installer version: uninstalling does not delete the data folder; when uninstallation finishes, a notice shows you its location. If you chose "Run at Windows startup" during installation (unchecked by default), that startup entry is removed on uninstall.

Either way, copy events the App created in your Google "To Do" calendar and the App's access permissions registered in your Google and Microsoft accounts remain after uninstalling. If needed, delete the copy events directly in Google Calendar and revoke access as described below.

How to delete information stored on your PC

1. Quit the widget.
2. Type the data folder location (Section 5) in the File Explorer address bar to open the folder. For the installer version it is %LOCALAPPDATA%\agenda-widget.
3. Delete that folder. If it was moved to the Recycle Bin, empty the Recycle Bin as well.

Signing out and switching accounts

In the App you can sign out of Google and Microsoft separately, or switch to another account. After you confirm, signing out deletes that service's sign-in information (tokens) and cached items stored on this PC. Your events and tasks on the Google and Microsoft servers are not changed.

Revoking access

Signing out in the App does not revoke the access permissions registered in your Google or Microsoft account, so that sign-ins on your other PCs using the same account are not cut off. To revoke access completely, remove it in each account's settings.

• Google: remove Calodu's access on the "Third-party apps and services" page of your Google Account (https://myaccount.google.com/permissions).
• Microsoft personal account: remove Calodu's permissions on the app permissions page (https://account.live.com/consent/Manage).
• Microsoft work or school account: if you signed in with one, remove Calodu's permissions on the app permissions page your organization provides, or ask your organization's administrator.

Revoking access in your account settings does not delete information already stored on your PC. To clean up completely, sign out in the App or delete the data folder, and also revoke access in your account settings.

Operator's deletion procedure

Because the Operator does not keep App data, there is no App data for the Operator to delete. Information you send by email when contacting us (Section 14) is kept for 1 year after your inquiry is resolved and then deleted. However, purchase-related inquiries such as those about Pro purchases or refunds (records of complaints or disputes about transactions) are kept for 3 years after the inquiry is resolved and then deleted, as required by Article 6 of the Korean Act on Consumer Protection in Electronic Commerce and Article 6 of its Enforcement Decree (retained items: email address, inquiry content, and how it was resolved). Personal information included in Partner Center crash data is deleted within 30 days of receipt (Section 9).

7. Provision to Third Parties, Outsourcing, and International Transfers

• Provision to third parties: the Operator does not provide your personal information to third parties.
• The App's communications: the App communicates directly from your PC, using your own Google and Microsoft accounts, with each company's servers (the Google APIs at www.googleapis.com, Google sign-in and token servers, Microsoft Graph at graph.microsoft.com, and the Microsoft sign-in server at login.microsoftonline.com). These servers may be located outside your country. The Operator is not involved in and does not receive this communication, so it is not a provision to third parties, outsourcing, or international transfer by the Operator. Google and Microsoft are services you sign up for and use yourself, and processing within those services is governed by each company's privacy policy. The copying (mirroring) in Section 4 moves information from your own Microsoft account to your own Google account.
• Outsourcing and international transfer (contact emails): the Operator uses Google LLC's Gmail to receive and keep contact emails, which may be stored on Google's servers outside Korea. The Operator does not outsource any other processing of personal information. Details are in the table below.

Temporary data of the display component (WebView2)

The App uses the Microsoft Edge WebView2 Runtime as a display component, and the App's screens run in WebView2's InPrivate mode. While running, it creates temporary display data in your Windows user temporary folder (%TEMP%), which is deleted when the App exits normally. If the App exits abnormally, this temporary data may remain; it is deleted by Windows temporary file cleanup. Because sign-in takes place in your system's default browser, no sign-in information is stored in this temporary data. Data processing by the WebView2 Runtime itself is governed by Microsoft's privacy statement.

8. Google User Data Limited Use Disclosure

Calodu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, the App handles Google user data as follows.

• It is used only to provide the widget features of displaying events and editing events at your request.
• Google user data is not sent to the Operator or any third party, and it is not sold or transferred to any third party, including advertising platforms and data brokers.
• It is not used for advertising, including retargeting or personalized advertising.
• It is not used to determine creditworthiness or for lending purposes.
• Because the Operator has no server and does not receive Google user data, neither the Operator nor any other person reads that data.

9. Automatic Collection Tools (Cookies, Analytics) and Log Files

• Cookies and browser storage: the App's screens do not use cookies, localStorage, or IndexedDB. The widget is displayed through a local server inside your PC (127.0.0.1) and does not load external scripts, fonts, or images. For temporary display data, see Section 7.
• Analytics, advertising, and crash-reporting tools: the App contains none of these tools.
• Microsoft Store distribution: Microsoft provides the Operator, through Partner Center, with reports on the App's installations, usage, add-on purchases, and crashes and unresponsive events. These statistics are aggregated information that does not identify individuals, and the Operator does not use them to identify any particular user or device. If crash data includes personal information, the Operator uses it only to fix errors in the App and deletes it within 30 days of receipt. The collection and processing of that information is governed by Microsoft's privacy statement.

Log file (widget.log)

The App keeps an activity log in the data folder on your PC for troubleshooting. The log is not sent to the Operator.

• Recorded: number of items synced, error types and HTTP status codes, window placement mode, the data folder path at startup, the fact that you signed out or turned copying (mirroring) on or off, whether Pro is owned and the result of a purchase (such as succeeded or canceled), and, in placement mode, the number of desktop icons and the fact that the widget was raised or lowered
• Path notation: folder paths in the log are rewritten in forms such as %LOCALAPPDATA%, %APPDATA%, and ~ so that your Windows user name is not shown.
• Not recorded: titles and contents of events and tasks, sign-in tokens (under default settings; titles are recorded only at the debug level, which is off by default)
• Size: the log moves to a new file about every 1 MB and keeps at most 3 older files (about 4 MB in total). If needed, you can quit the widget and delete the log files yourself.

10. Information Used Only Inside Your PC for Display

The desktop attachment feature in this section is offered only in the installer version; the Microsoft Store version does not have it. In a new installation of the installer version, the widget opens as a normal window, and attaching it to the desktop is turned on only after you agree in the settings (the time you agreed is recorded in widget.json). If you turn on the placement mode that keeps the widget behind desktop icons, the App reads the following about every 0.05 seconds to raise or lower the widget in front of or behind the desktop icons.

• Mouse cursor position
• Whether a mouse button is pressed
• Screen position (coordinates) of desktop icons

The App does not read icon names, file contents, or keyboard input. This information is neither stored nor transmitted; the log records only the number of icons and the fact that the widget was raised or lowered.

11. Paid Features and Payments

The App is free, and a one-time purchase of the Microsoft Store add-on "Pro" unlocks the Microsoft To Do features and copying tasks to Google Calendar (Section 4). A purchase starts in the App's settings and is completed in the Microsoft Store purchase window. Payment and payment method information such as card numbers are handled by Microsoft; neither the App nor the Operator receives them. Information processing related to purchases and payments is governed by Microsoft's privacy statement and the Microsoft Store terms. The App only checks whether you own Pro by using the Microsoft Store license check provided by Windows, and it does not create a separate license file. The log records only whether Pro is owned and the result of a purchase (Section 9). The price of Pro is shown on the App's Microsoft Store page and, as provided by the Microsoft Store, in the App's settings.

12. Children's Personal Information

The App is not directed at children under 14. Using the App requires a Google or Microsoft account. In South Korea, both Google and Microsoft require users to be at least 14 to manage their own accounts; younger children's accounts must be managed by a parent (Google Family Link, Microsoft Family Safety). In other countries, the age requirements each company sets for that country apply. The Operator does not collect children's personal information through the App. If a child under 14 wishes to contact us, please have a parent or legal guardian contact us on the child's behalf.

13. Your Rights and How to Exercise Them

You (the data subject) have the right to request access to, correction of, deletion of, and suspension of processing of your personal information, and to withdraw consent. Because the App's information is on your PC, you can exercise most of these rights yourself.

The Operator cannot access your PC or account data and therefore cannot view or delete it on your behalf. If you have questions about exercising your rights, contact us using the details in Section 14 and we will respond without delay. You may also contact us through a legal representative or an authorized agent. Rights concerning information stored in your Google or Microsoft account are exercised through the procedures each company provides.

14. Privacy Officer and Contact

The Operator is an individual who personally oversees the processing of personal information and handles privacy inquiries, complaints, and requests for remedies through the email address above.

15. Remedies for Infringement of Rights

For remedies or counseling regarding personal information infringement, you may contact the following Korean authorities.

16. Changes to This Policy

If this policy changes, we will post the updated policy on this page and in the policy text submitted to the Microsoft Store, and state the new effective date in it. We will also announce the change in the App's update description in the Microsoft Store. General changes will be announced at least 7 days before they take effect, and changes that significantly affect your rights at least 30 days before.

• Effective date: October 8, 2026
• Previous version: effective 2026-10-06 (earlier version of this page)