Privacy Policy

1. Who we are

Increment is run by Stefany Nizamova, a sole trader based in the United Kingdom (“we”, “us”). We are the data controller for the personal data described in this policy, under the UK GDPR and the Data Protection Act 2018.

Contact: [email protected]

2. What we collect

Data	When
Your email address	If you create an account, including by starting the free trial.
Your calendar: events, tasks, goals, projects, journal entries and logged time	Always stored on your device. Copied to your account only if you have one.
Account details: your devices, your trial and licence status, when you last synced, and when you first used the app and first paid	If you have an account.
Your licence key	If you buy a licence. Payment is handled by Lemon Squeezy; we never see your card details.
Events from calendars you connect or subscribe to: titles, times, descriptions, and meeting join details (link, meeting ID and passcode). Not attendee lists.	If you connect an Outlook account or subscribe to a calendar by link.
Calendars you publish: their settings and link	If you publish your calendar by link.
Messages you send us, with your reply address and, if you’re signed in, your account’s email address	If you write to us from the app’s help panel or by email.
Website usage: pages visited and buttons clicked	On increment-app.com, only if you accept cookies. See section 10.

When you connect an Outlook account, Increment asks Microsoft for read-only access: Calendars.Read to read your calendars, openid and email to show which account is connected, and offline_access to keep the connection working. Increment cannot create, change or delete anything in your Outlook calendar. Google calendars are not connected this way; you subscribe to them by link.

3. How we use it, and our lawful basis

Purpose	Lawful basis
Providing Increment: your account, syncing between devices, your licence, and the free trial and its emails	Contract
Reading calendars you connect or subscribe to, so your plan works around them	Consent, which you can withdraw at any time by disconnecting
Showing a calendar you publish to the people you give the link to	Contract
Answering your messages and fixing problems you report	Legitimate interests
Keeping the service secure and preventing abuse	Legitimate interests
Counting how many people start a trial, use it and pay, to improve the product	Legitimate interests
Meeting legal and tax obligations	Legal obligation

We don’t sell or rent your data, share it for advertising, use it for profiling, or use it to train machine-learning or AI models. We don’t make automated decisions that have legal or similarly significant effects on you.

4. Who can access your data

Your calendar is stored on your device and, if you have an account, with our hosting provider. It is not end-to-end encrypted, so as the operator of the service we can access it. We do so only when it is needed to run and secure the service, when you ask us to help with a problem, or when the law requires it.

We use the following providers, each only for its stated purpose:

Provider	Purpose
Cloudflare	Hosting and storage, and serving calendars you publish.
Resend	Sending sign-in emails, trial emails, and messages from the help panel.
Lemon Squeezy	Payments, invoices and licence keys, as merchant of record. When you buy from inside the app, it receives your email address and a reference to your account.
Microsoft	Only if you connect an Outlook account, as the source of your calendar.
Google Analytics	Website analytics, with your consent (section 10). We also send it a count each time someone asks for or starts a trial, first uses the app or pays, with the amount and plan for payments. These counts contain no name, email address or other identifier.

International transfers. These providers may process data outside the United Kingdom, including in the United States. Where they do, the transfer is covered by the UK International Data Transfer Addendum or Standard Contractual Clauses.

5. Calendars you publish

You can publish your calendar by link, so other people can see it in their calendar app or in a browser. Nothing is published unless you do this.

• Anyone with the link can see what it shows, without signing in, and can pass the link on.
• “Busy times only”, the default, shows when you are busy and nothing else.
• “Everything” also shows event titles, descriptions and meeting join details, including for meetings other people invited you to, so anyone with the link could join them.
• Stopping or changing a link makes the old one stop working immediately. Calendar apps that already subscribed keep what they last fetched.

6. How long we keep it

• Your account and calendar — until you ask us to delete your account. When you delete something, a record that it was deleted (without its contents) is kept until then, so your other devices remove it too.
• Connected calendars and calendar links — until you disconnect or remove them. Their events are removed from your devices at the same time.
• Published calendar links — until you stop sharing.
• Sign-in links — 15 minutes, or until used. Sessions — 90 days, or until you sign out.
• Daily sign-up counts — indefinitely. They don’t identify anybody.
• Messages you send us — while they are needed to answer you and fix what you reported. Ask and we will delete them.
• Payment and invoice records — held by Lemon Squeezy, for as long as the law requires.

7. Security

Data is sent over encrypted connections. Sign-in links and sessions are stored in a form that can’t be used to sign in, and access to connected calendars and calendar links is encrypted, with the key kept separately from the database.

8. Your rights

Under the UK GDPR you have the right to:

• ask what personal data we hold about you, and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable form;
• withdraw consent at any time, where we rely on it.

You can disconnect a calendar, remove a calendar link or stop sharing a calendar yourself in Settings → Calendars. To withdraw Increment’s access on Microsoft’s side too, use account.live.com/consent/Manage, or your organisation’s account portal for a work or school account.

For anything else, including deleting your account, email [email protected]. We will respond within one month. Deleting your account does not remove the copy on your own device; you can remove that by clearing the app’s data.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

9. Children

Increment is not intended for children under 13, and we do not knowingly collect their data.

10. Cookies

The app sets one cookie, and only if you sign in: a session cookie that keeps you signed in. It is strictly necessary and is not used to track you.

This website uses Google Analytics cookies, only if you accept them, to see how many people visit, which pages they read and which buttons they click. They are not used for advertising. You can change your choice at any time with Cookie preferences at the bottom of every page, opt out with the Google Analytics opt-out add-on, or block them in your browser.

The website’s footer may show badges from directories that list Increment. Your browser loads each badge from that directory’s site, which receives your IP address.

11. Changes to this policy

If we change this policy in a way that materially affects you, we will tell you in the app or by email before the change takes effect. The date at the top shows the current version.

12. Contact

Stefany Nizamova
United Kingdom
[email protected]