Privacy Policy

ScheduleUs ("we," "our," "the app") helps you find a time you're free, invite friends to it, and lock in plans. This policy describes what the app actually collects, where it goes, and what you can do about it.

Information we collect

• Account information: your name and email address. Not your phone number. A number you add stays on your device: it is stored only in the app on your phone, it is never sent to our servers, and it is used for one thing — leaving your own number out of the list when you pick friends to invite. Signing out of the app removes it. Adding a number is optional and can be skipped.
• A user ID: an identifier we create for your account. It is attached to everything you create in the app, and it is sent to our analytics provider (below).
• Calendar availability: if you connect your calendar, we read only the start time, end time, all-day flag, and busy/free status of your events. We do not read titles, locations, notes, or attendees. What we store is smaller still: for each busy period, only your user ID and the start and end times. When you add a plan to your calendar, the app creates the event on your device and stores that event's identifier on our servers with the plan — or with your place in someone else's plan — so it can move or remove the event if the plan changes. The identifier is not the event's contents. Until 17 October 2026 this page did not mention that identifier.
• Contacts: when you open the screen for inviting friends, the app reads the contacts on your device that have both a name and a phone number (up to 1,000) so it can show them to you. That list is not sent to our servers. For each person you choose to invite, their phone number and their first name — the first word of their name as it appears in your contacts — are sent to our servers and stored; see the next section. We do not store the rest of your contact list. Until 17 October 2026 this paragraph said only the phone numbers were sent; the first name was always sent as well.
• Precise location: when you search for restaurants or activities, the app requests your device's location and sends those coordinates to Google Places to return nearby results. The coordinates are not rounded or reduced before they are sent. If you deny location access, search still works using a neighbourhood you pick instead.
• Your plans: the meal or occasion, the date and time, the venue you choose, any activities you add, the names of the people you invite, and the times you vote for.
• Your preferences: if you set them, your favourite neighbourhoods and cuisines, the times of day that suit you for each meal, and whether people planning with you can see them.
• Saved places: places you save to your list — the name, neighbourhood, cuisine, and, when available, the address.
• How you use the app: a record of certain actions — for example that a plan was created, a window was picked, or an invite was sent — along with details such as the meal type, the number of friends invited, the name and neighbourhood of a venue you choose, and — when something fails — a short error code. Each record is attached to your user ID. It is stored on our own servers and also sent to Amplitude, our analytics provider; what Amplitude receives is listed below.
• A push notification token: if you allow notifications, we store a token that identifies your device for delivery.

People you invite by text

The person you invite has no account linked to this invite. They have not agreed to this policy — we never asked them to. You gave us their number on their behalf. They can ask us to delete it at any time by emailing support@joinscheduleme.app, though there is no self-serve way to do it yet. So we hold as little as we can, for as short a time as we can, and delete it on a schedule that does not depend on anyone remembering to.

When you invite someone by text, we store that person's phone number, the first name as it appears in your contacts, and an invite code. The code is what the text message links to. Someone who has the ScheduleUs app and taps the link sees a preview of the invite — who sent it, the occasion, and the date and time — without creating an account. Someone without the app sees a web page saying they have been invited, which asks them to get the app to see the plan; it shows nothing about the invite itself. Corrected 18 October 2026: an earlier version of this page said anyone with the link could see that preview without an account. Without the app, the link has only ever shown that web page. Joining the plan requires a free ScheduleUs account.

• The code works once. After someone joins the plan with it, it stops working for anyone else.
• The code expires 30 days after the invite is created. After that it no longer opens anything.
• When they join, their phone number is deleted, and their first name stays, because that is the name the plan shows them by. The number leaves the invite in the same step that adds them to the plan, and a copy in the group record the app keeps for planning is removed by the next daily cleanup, up to a day later. Two corrections to what this page said before: until 12 October 2026 an accepted invite kept the number indefinitely, a defect that is fixed; and from 12 to 17 October 2026 this page said the number and the first name were both removed in that same step, when in fact the group-record copy of the number lasted until the next daily cleanup and the first name stayed on the plan.
• We delete their details 7 days after the code expires. The phone number, the first name and the invite code are removed — from the invite, and from the group record the app keeps for planning. What remains is that someone was invited by text and never joined. This runs every day, on our servers, whether or not anyone opens the app.
• Invitees join by tapping their invite link.

The record is deleted when the person who sent the invite deletes that plan, or deletes their own account, and a copy of the number in the group record the app keeps for planning is removed by the next daily cleanup. Until 17 October 2026 this paragraph did not mention that copy. Someone who was invited but never signed up cannot remove their own number from the app. If you have been invited and want your number removed, email us and we will remove it. There is no self-serve way to do this yet.

How we use your information

• To find times you are free, from your own calendar, for the plans you make. Corrected 18 October 2026: earlier versions of this page said the app finds mutual availability between you and the people you plan with. It reads only your own calendar; it has never read anyone else's.
• To suggest restaurants and activities near you.
• To send you notifications about plan invites, confirmations, and reminders.
• To understand which parts of the app are used, so we can fix and improve them.

What we don't do

• We do not sell your personal information.
• We do not read the contents of your calendar events — only whether you are busy or free.
• We do not share your data with advertisers, and the app contains no advertising software.

Third-party services

These companies receive some of your information, because the app depends on them to work:

• Supabase — our database and sign-in provider. Your account, plans, availability, and invites are stored there.
• Google Places — receives your location coordinates and what you search for, and returns places nearby.
• Amplitude — our product analytics provider. With each record of an app action described above, it receives exactly: your ScheduleUs user ID; a random identifier the app creates and keeps on your device; your device model and iOS version; the app version; a session number and the time of the action; the action's details, including the name and neighbourhood of a venue you pick and, when something fails, a short error code; and two technical fields (a random ID for each record and the analytics library's version). ScheduleUs does not send Amplitude your IP address, mobile carrier, language, or Apple's identifier for our app. Amplitude's own servers, however, can see the network address your device connects from. Amplitude uses that address to estimate your city, region, metro area and country, and retains the address itself. This applies to current builds, not only to older ones. That estimated location is linked to your ScheduleUs account identifier. We do not use it for advertising and we do not sell or share it. Removing it is a planned change; until it ships, it is disclosed on our App Store privacy label as Coarse Location. Test builds we distributed before 21 September 2026 also sent your IP address, mobile carrier, language and Apple's identifier for our app directly from the device. They also sent operating-system, platform and device-manufacturer names, and error message text in place of the short error code, and builds from 3 July to 15 September 2026 also sent the invite code from a text invitation you shared. No version sends Amplitude your calendar or your contacts. Corrected 17 October 2026: an earlier version of this page stated that current builds do not give Amplitude your location. That was wrong. Amplitude has always derived an approximate location from the network address, including on current builds.
• Expo — delivers our push notifications. Expo creates your device's notification token, and receives that token and the contents of each notification we send you.
• Apple — if you connect a calendar, availability is read through the device's own calendar permissions. Apple's services also turn coordinates into place names.
• Resy and OpenTable — some venues show a link to search for that restaurant on one of these sites. Tapping it takes you there, and their privacy policies govern what happens next.

Apple Calendar is the only calendar the app can connect to. ScheduleUs does not connect to Google Calendar or Outlook.

What other people can see

• People you invite to a plan can see the plan's details — the time, the place, and who else is invited.
• If you're invited to a plan, its creator can see whether you accepted or declined.
• People planning with you can see your preferences if you choose to share them. Sharing is on unless you turn off “Share my preferences with people planning with me” in your preferences.

Your choices

• Calendar: the app has no disconnect button yet. To stop it reading your calendar, turn off calendar access for ScheduleUs in your device's Settings. Availability we have already stored stays until you delete your account.
• Notifications: turn them off at any time in your device's Settings. The token we already stored is removed when you delete your account.
• Location: deny or revoke location access in your device's Settings. Search still works using a neighbourhood you choose.
• Your account: delete it at any time from Settings → Delete Account.

Deleting your account

Deleting your account removes from our servers, in one operation: your profile; every plan you created, along with its invites; your participation in other people's plans; your stored calendar availability; your saved places and preferences; the copy of your analytics records we keep ourselves; and your sign-in identity. It cannot be undone. Copies of your user ID, and of the phone numbers of people you invited, in the group records the app keeps for planning are removed by the next daily cleanup.

Deleting your account does not delete what has already been sent to Amplitude. The record of your actions in the app, labelled with your user ID and the random identifier the app keeps on your device, stays with Amplitude. To have it deleted, email support@joinscheduleme.app from the address on your account before you delete your account, and we will ask Amplitude to delete it. Once your account is deleted, we no longer hold anything that tells us which of Amplitude's records are yours, so we cannot find them. Until 17 October 2026 this page said deleting your account removed your analytics records, without saying that Amplitude's copy is not deleted. It never was.

Children's privacy

ScheduleUs is not intended for anyone under 13, and we do not knowingly collect information from children under 13.

Changes to this policy

We update this page when the app changes what it collects. The "Last updated" date above changes with it.

Contact us