Privacy Policy

Effective date: April 23, 2026  ·  Last updated: April 23, 2026

Vilyge Lite ("we", "us", or "our") is a family coordination app that helps households share calendars, tasks, and events. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

Account information. When you sign up, we collect your email address and any display name you provide.

Family data. Events, tasks, and notes you create within Vilyge Lite are stored in our database so they can be shared with your family group.

Google account data (optional). If you choose to connect your Google account, we request access to:

• Google Calendar – to read and write calendar events on your behalf so they appear in your family's shared view.
• Google Tasks – to read and write task lists so they stay in sync with Vilyge Lite.
• Google Drive (file scope) – used only to store app-generated files you explicitly create; we do not access other Drive content.

We store OAuth tokens (access token and refresh token) encrypted in our database solely to perform these syncs on your behalf. We do not sell or share these tokens with third parties.

2. How We Use Your Information

• Provide and improve the Vilyge Lite service.
• Sync your Google Calendar events and Google Tasks with your family's shared calendar.
• Authenticate you and keep your account secure.
• Send transactional emails (e.g., invitations, password resets) — no marketing emails.

3. Data Sharing

We do not sell your personal information. We share data only with:

• Supabase – our database and authentication provider (data stored in US regions).
• Google APIs – when you authorise Google integration, calls are made to Google's servers on your behalf.
• Cloudflare – our hosting and edge network provider.

Family members in your group can see events and tasks you share with the group. They cannot see your Google OAuth tokens or private credentials.

4. Google API Data Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google data to provide or improve the features that are visible to users in Vilyge Lite.
• We do not use Google data for advertising or to build user profiles outside the app.
• We do not allow humans to read your Google data unless you explicitly request support and consent.

5. Data Retention and Deletion

Your account data is retained as long as your account is active. You can delete your account at any time from Settings → Account, which removes all your personal data and disconnects any Google integration. Backup copies may persist for up to 30 days.

6. Security

We use industry-standard practices including HTTPS, encrypted storage for OAuth tokens, and row-level security in our database so users can only access their own family's data.

7. Children's Privacy

Vilyge Lite is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

8. Changes to This Policy

We may update this policy periodically. When we do, we will update the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the revised policy.