Privacy

Effective September 25, 2026

Sure is a private, read-only calendar made by Damasqas, Corp. (OnePatch). This policy covers Sure, including the calendar connection previously named Quiet Calendar.

What you connect

We receive your account email and sign-in information through WorkOS. When you connect Google Calendar, we request permission to read your calendar list and events: calendar names, event titles, times, descriptions, locations, and event links. Google account identity is used to distinguish connected accounts. We do not request Gmail access or permission to change your calendars.

You can also connect iCloud using an app-specific password or provide a private iCalendar feed URL. Treat these credentials as passwords. Sure only reads the source calendars.

What we use it for

Sure displays your calendars together and refreshes them in the background. The Unified view identifies duplicate events. To do that, overlapping event details and their calendar labels are sent to TypeSafe/Jev for automated comparison. Usual day boundaries are suggested from calendar history; this analysis uses observed times and supporting event details. Hidden calendars are excluded from these analyses.

These features process your connected calendars for your own account. We do not sell calendar data, use it for advertising, or use it to train general-purpose AI models. We do not share your calendar view with other Sure users.

Where it is processed

WorkOS provides sign-in and manages existing Pipes calendar connections. Our server processes calendar data, stores encrypted connection credentials and saved views, and uses TypeSafe/Jev for the features described above. Hosting and backup providers, including exe.dev and AWS, support this service. Cloudflare hosts this public website. These services receive the data needed for their role.

We restrict access to the systems that hold your data. Human access to Google data is limited to your affirmative consent, necessary security investigations, or legal requirements. Sure uses Google API data only for the features described here, and its use and transfer of that data follows the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion

Connection credentials are retained while the connection is active. Saved calendar views expire after seven days without a visit; saved duplicate decisions are bounded per account. Disconnecting removes that connection’s active credentials and clears saved calendar views and analysis results for your account. It does not delete events at Google or Apple.

Encrypted recovery backups can retain earlier copies after a disconnect. To request deletion of your account and retained data, including backup copies, email deep@onepatch.dev from your sign-in address. We verify ownership and handle requests directly. Data required for a security investigation or legal obligation may be retained for that purpose.

You can independently revoke Google access in your Google Account, revoke an Apple app-specific password, or reset a private feed URL. Disconnecting in Sure stops Sure from using that connection; revocation at the provider removes its authorization.

Website and updates

The public website has no advertising trackers or analytics scripts. The calendar app uses cookies for sign-in and connection security, and browser storage for display preferences. Service providers may process technical request information to operate and protect their services.

We will update this page when our practices change and seek consent before using Google data for a new purpose. For privacy questions, contact deep@onepatch.dev.