Privacy Policy
Last updated: September 14, 2026
Who we are
Calendar Travel Blocks (“the service”) watches the Google Calendars you choose and inserts travel blocks before events that have a location, based on live traffic data. The service is operated by Theo De Geest. For any privacy question, data request or complaint you can contact us at theo.degeest@gmail.com. The service is hosted on servers in the European Union.
What we collect
We only collect the data needed to run the service, when you sign in and as you use it:
| Google account info | Your name, email address and Google account identifier, collected when you sign in with Google. |
|---|---|
| Calendar data | With your permission (the read/write Google Calendar scope), the titles, times, locations and descriptions of events on the calendars you ask us to monitor, plus your chosen block calendar where travel blocks are inserted. |
| Settings you provide | Your home address, monitored and block calendars, travel mode, arrival buffer, time zone and any override tags, plus saved places. |
| API keys | If you choose Google Maps or bring your own TomTom key, the key you enter. Keys and access tokens are encrypted at rest. |
| Derived data | Geocoding and travel-time results used to calculate blocks (kept in a cache), and per-run logs and sync metrics used to operate and debug the service. |
We do not collect your browsing history, contacts, analytics, or any data unrelated to the service.
How we use your data
Your data is used only to provide the service you asked for: monitoring your selected calendars, computing travel estimates from live traffic data, and creating, updating and removing travel blocks on your behalf (typically every few minutes). Sync logs and metrics help us find and fix problems. We never sell your data, never show ads, and never share your calendar data with other users or third parties except the processors listed below.
Legal basis (GDPR)
Processing is based on your consent (signing in and choosing which calendars to monitor), on the performance of the contract the service provides to you, and on our legitimate interest in operating, securing and improving the service. You may withdraw your consent at any time by stopping sync, revoking access in your Google account, or deleting your data as described below.
Third-party services
To compute travel times and store your data we work with the following processors:
| Authentication and access to your Google Calendar. If you use the Google Maps provider, travel-time and geocoding requests run against Google Maps under your own API key. | |
| TomTom | Travel-time and geocoding requests when you (or the server) use TomTom as the travel provider, under your key or the server's. |
| OpenTripPlanner | A self-hosted transit routing engine used when transit mode is enabled. |
| Belgian Mobility feeds | Public GTFS-RT real-time transit feeds (NMBS, De Lijn, TEC) fetched by the server to estimate transit travel times. |
| Hosting | Servers operated by Netcup GmbH in Germany (EU), plus the domain and DNS provider. |
Where your data is stored & how it is protected
Data is stored in a SQLite database on servers in the European Union. All traffic is encrypted in transit (TLS). Google access tokens and any API keys you provide are encrypted at rest with AES-256-GCM. We follow the principle of least privilege: Google scopes are limited to what the service needs, and only the operator can access the infrastructure.
How long we keep data
| Account & settings | Kept for as long as you use the service, or until you delete your data. |
|---|---|
| Run logs | Automatically deleted after 7 days. |
| Sync metrics | Automatically deleted after 90 days. |
| Cache | Cleared when it expires or when you clear caches from your dashboard. |
Deleting your data
You can permanently delete your account and all associated data at any time from Settings (“Delete my account and data”). This removes your account, saved places, caches, logs and metrics, and revokes the service's access to your Google account. Travel blocks already added to your calendars are yours and remain there; you can remove them manually in Google Calendar. You can also revoke the service's access at any time from your Google account’s “Third-party apps” page. To request deletion manually, email theo.degeest@gmail.com.
Your rights
Under the GDPR you have the right to access, correct, export (portability), restrict or delete your personal data, and to object to its processing. You can exercise most of these directly from the app (settings, dashboards, deletion) or by emailing theo.degeest@gmail.com. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority, such as the Belgian Data Protection Authority (APD/GBA).
Cookies and local storage
We use a single session cookie to keep you signed in. We do not use tracking, advertising or analytics cookies. Server logs kept for security contain IP addresses and are retained for a short period.
Children
The service is not intended for children under 16 and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. Material changes will be announced in the app and via the current effective date above. Continued use of the service after changes means you accept the updated policy.
Questions? Contact Theo De Geest at theo.degeest@gmail.com · Back to the app