Privacy

Privacy policy

Last updated: 10 October 2026

Organise You is a private personal organiser currently being tested by invited users. This policy explains, in plain language, the information the service uses to provide its features.

Information you add

Organise You stores information you choose to enter, such as calendar items, tasks, reminders, work schedules, contacts, birthdays, addresses, contact photos, notes, lists, settings and sharing permissions.

Local note drafts

While you are adding or editing a note, Organise You can keep unfinished changes in this browser’s local storage so accidental navigation does not lose what you typed. A draft can include the note title, body and related note-form choices. It stays on that browser/device and is not sent to the server until you save the note. Draft revisions are coordinated between tabs so an older tab cannot silently replace a newer draft. Saving the matching revision or choosing Discard draft clears that local draft.

Account information

Your account can also include an optional profile display name, profile photo and birthday. Your profile is only available to people connected to you through an accepted shared-calendar relationship. You choose whether your birthday stays private or is visible to those connected people. Your email address is not shown as part of the shared profile.

Your account includes information such as your username, email address and password hash. Passwords are not stored as readable text. If you enable two-factor authentication, Organise You stores the information needed to verify authenticator codes and hashed one-use recovery codes. The authenticator secret is encrypted on the server. If you request account recovery, Organise You stores a hashed one-use reset token, its expiry time and the request IP address so the request can be handled securely.

Email reminders and email-to-calendar

If you use reminder emails, Organise You stores the email address used for those reminders and records enough information to avoid sending the same reminder repeatedly. If you use email-to-calendar, messages sent to the configured incoming mailbox may be read and interpreted so they can be added to your organiser or shown for review.

Email and contact suggestions

If you use email-to-calendar, Organise You processes the sender address, sender name where available, subject and message text needed to interpret the request. Email contact suggestions use this email activity to suggest people you may want to add to your Address Book. Suggestions are never added automatically.

Waiting list and contact form

If you join the waiting list, Organise You stores the name, email address and optional use-case information you provide so an invitation can be offered later. If you send a message through the Contact page, Organise You uses the name, email address, subject and message you provide so the site owner can receive and respond to your message.

Calendar imports and syncing

If you import an iCalendar file or connect a calendar feed, Organise You processes the calendar information needed to show those items in your organiser. Connected feed details may be stored so the service can check for updates.

Address suggestions

If address autocomplete is enabled, the text you type into the address search may be sent to the configured address-lookup provider, currently Geoapify, so matching addresses can be suggested. The provider may process that request under its own privacy terms.

Site font

Organise You uses Google Sans Flex for its wordmark. Your browser may request the font stylesheet and font files from Google Fonts when a page loads, which can involve sending technical request information such as your IP address and browser details to Google.

Email delivery

Organise You currently uses PurelyMail for outgoing reminder and invitation emails and for the incoming email-to-calendar mailbox. Email delivery necessarily involves the email provider processing sender, recipient and message information.

Sharing and administrator access

Your organiser is private to your account unless you choose to share something. A calendar share remains pending until the recipient accepts it. After acceptance, the shared calendar only gives that user the access level you selected; it does not automatically share your Address Book, notes or other private organiser information. Combined calendar view overlays calendars the viewer is already allowed to see without merging ownership.

Site administrators can manage accounts, invitations and service operation, but Organise You is not designed to give administrators a normal browse-any-user-calendar view. Private organiser content is not intended to be casually inspected by the site owner.

Cookies and sessions

Organise You uses session cookies needed to keep you signed in and operate the service securely. If you choose Keep me signed in, the sign-in cookie can remain for the remembered-login period you select. Active-session records may include the browser/device user-agent, IP address, sign-in type, creation time and last-active time so you can recognise and revoke signed-in sessions. Organise You is not currently designed around advertising or behavioural tracking.

Audit, system and security logs

Organise You keeps an audit history of meaningful changes such as creating, editing, completing, cancelling, deleting and restoring organiser records. These entries can include the acting username, item reference, affected occurrence and time of the change so support can establish what happened.

Operational system logs record important successes and failures such as reminder delivery, email ingestion, imports, syncing and scheduled jobs. Security logs record events such as successful and failed sign-ins, two-factor failures, password changes or resets, session creation or revocation, rate limiting and repeated suspicious attempts. Security entries can include an IP address and browser/device user-agent. System and security logs are normally retained for 90 days; lower-level login-attempt records are kept for a shorter period.

Passwords, temporary passwords, authenticator secrets, recovery codes, session tokens, password-reset tokens and email-service credentials are not written to these application logs.

Keeping and deleting information

Information remains in your organiser until it is changed or deleted through the available controls, subject to technical logs and backups that may temporarily retain older copies. You can permanently delete your Organise You account from Settings → Account & Security → Delete account.

Security

Organise You uses measures such as password hashing, optional authenticator-app two-factor authentication, one-use recovery codes, revocable login sessions, CSRF protection, login throttling and private server-side configuration for service credentials. No online service can promise absolute security, so you should use a strong, unique password and avoid storing secrets that do not need to be in an organiser.

Changes to this policy

This policy may change as Organise You gains new features or moves beyond invite-only testing. The date at the top will be updated when the policy is materially revised.