OnTimer Privacy Policy

Last Updated: August 15, 2026

1. Introduction

Breakout Growth ("we," "our," or "us") operates OnTimer, including the ontimer.app website, mobile applications, calculators, planning tools, reminder tools, educational content, subscriptions, and related services (collectively, "OnTimer" or "the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use OnTimer.

Some OnTimer features are available through the website, while others require the mobile application. The information we collect depends on the features you use and the permissions you grant.

This policy is a notice describing our data practices. It is not a request to consent to every practice described below. Where applicable law requires consent, such as for certain analytics cookies or device permissions, we request it separately.

🔒 KEY PRIVACY PRINCIPLES

Read-Only Calendar Access: We only READ your calendar events. We never modify, create, delete, or share your calendar data.
Local Storage: Calendar data is primarily stored on your device, not on our servers.
Minimal Data Collection: We collect only what's necessary to provide alarm functionality.
Permission-Based Location: Precise location is used only if you grant permission, such as for Time to Leave reminders.
No Data Selling: We never sell your personal information to third parties.

2. Information We Collect

2.1 Calendar Data (Read-Only)

When you connect Google Calendar, Apple Calendar, or Microsoft Outlook Calendar, OnTimer requests read-only access to the calendar information needed to display events, schedule reminders, deliver persistent notifications, calculate Time to Leave reminders, and allow you to select which calendars to monitor.

Google Calendar and Microsoft Outlook Calendar use OAuth authentication. Apple Calendar uses Apple's EventKit framework and iOS Calendar permissions instead of OAuth. In all cases, OnTimer's access is read-only: OnTimer cannot and does not create, edit, or delete your calendar events.

Data Type	Purpose	Storage Location
Event titles	Display in the app, reminders, and notifications	Stored locally on your device
Event start/end times	Schedule alarms, reminders, and persistent notifications	Stored locally on your device
Event descriptions	Display additional event details	Stored locally on your device
Event location	Display location information and support Time to Leave calculations	Stored locally on your device
Calendar names	Allow you to select which calendars to monitor	Stored locally on your device
Attendee information	Display meeting participants (optional)	Stored locally on your device

Important: OnTimer uses the following OAuth scopes:

Google Calendar: https://www.googleapis.com/auth/calendar.readonly (read-only access)
Microsoft Outlook Calendar: Calendars.Read (read-only access)

These scopes grant read-only access to your calendar events. Apple Calendar access is controlled by iOS Calendar permissions through Apple's EventKit framework. OnTimer cannot and does not modify, create, or delete your calendar events through any calendar provider.

2.2 Location Information

Time to Leave reminders may optionally use your current location together with an event location to estimate when you should leave. Precise location is used only if you grant location permission on your device. If you do not grant location permission, OnTimer may still display events and schedule non-location-based reminders, but location-aware Time to Leave features may be limited or unavailable.

We do not sell location information, and we do not use precise location for advertising.

2.3 Device Information

We collect limited device information to provide notification services:

Device token: For Apple Push Notifications (to trigger background syncs)
App version and build number: For troubleshooting and support
Operating system version: To ensure compatibility
Device timezone: To display event times correctly

2.4 App Usage Analytics

We collect anonymous usage data to improve the App:

App opens and feature usage
Notification interaction (dismissed, tapped, etc.)
Subscription status (free vs. premium)
Error logs and crash reports

This data is anonymized and cannot be used to identify you personally.

2.5 Website Analytics and Usage Information

When you visit ontimer.app or use website tools, calculators, educational content, or support pages, we use Google Analytics to collect analytics used to understand website usage, feature adoption, referral sources, and marketing performance, such as:

Pages viewed, links clicked, and referring pages
Browser type, device type, operating system, and approximate region
Usage of website tools, calculators, reminder tools, educational content, and related features
Campaign, attribution, and conversion information, such as whether a page visit leads to an App Store link click
Technical information used to keep the website secure and working properly

This website data is used to understand page usage, feature adoption, and referral sources, improve the Service, troubleshoot issues, and measure marketing performance. We do not use your calendar event content for advertising.

Cookie consent for UK, EU/EEA, and Swiss visitors: If you visit ontimer.app from the United Kingdom, European Economic Area, or Switzerland, we show a cookie banner and do not load Google Analytics until you accept it. You can decline at any time from that banner. Visitors elsewhere are not shown this banner, and analytics loads by default as described above.

2.6 Account Information

If you create an account or subscribe to premium features:

Email address: Used for account management and support (optional)
Subscription status: Managed by RevenueCat and the Apple App Store
Purchase history: Stored by Apple App Store and RevenueCat for subscription management, not by OnTimer as payment card information

OnTimer does not store your payment card information. Payments and billing are processed by the Apple App Store and related subscription providers.

2.7 Website Calculator and Medication Tool Inputs

Different website tools handle what you enter in different ways:

Travel and Time to Leave calculators: Origin, destination, airport, cruise terminal, and similar location text may be sent to OnTimer's server and then to Google Maps Platform services to return place suggestions or calculate a route and travel-time estimate. We do not use those entries to build a user profile.
Medication Schedule Generator: Medication names, start dates, and dose times are processed in your browser to create a calendar file and are not sent to or stored by OnTimer. If website analytics is enabled, we record a schedule-generated event that may include the selected frequency and duration, but not the medication name, start date, or dose times.
Provider medication schedule links: Schedule details are encoded in the URL fragment, the portion after the #. Browsers do not send that fragment to OnTimer with the page request. The recipient's browser reads the schedule locally and removes the fragment from the address bar after validation. Anyone who receives the complete link can read the schedule, so it should be shared only with the intended recipient.
Shared medication schedule page: Google Analytics is disabled on this route so the schedule fragment and imported schedule values are not captured by our website analytics.

2.8 Information We Do NOT Collect

OnTimer does not collect:

Email content or messages
Contacts or address book information
Files or documents from your accounts
Precise location data unless you grant permission for location-based features such as Time to Leave
Passwords (authentication is handled securely through OAuth)
Payment card information (processed by Apple and related subscription providers)

3. How We Use Your Information

We use the information we collect to:

Provide alarm functionality: Schedule and deliver reminders, persistent notifications, and alarms for your calendar events
Sync calendar data: Periodically refresh your event list to ensure accuracy
Display event information: Show event details in the app interface
Calculate Time to Leave reminders: Estimate when to leave for events with locations, using your current location only if you grant permission
Manage monitored calendars: Let you choose which connected calendars OnTimer should use for reminders
Operate the website: Provide website tools, calculators, planning tools, reminder tools, educational content, support pages, and related services
Measure website usage and performance: Understand page usage, feature adoption, referral sources, App Store link activity, and marketing performance
Improve the App: Analyze usage patterns to fix bugs and add features
Provide customer support: Respond to your questions and troubleshoot issues
Send service notifications: Alert you about App, website, or Service updates and service changes
Manage subscriptions: Process premium feature access and billing

4. Data Storage and Security

4.1 Local Storage

The majority of your calendar data is stored locally on your device using:

iOS Keychain (for OAuth tokens - encrypted)
SwiftData/Core Data (for event information - encrypted at rest)
UserDefaults (for app settings - non-sensitive data only)

4.2 Server Storage

Minimal data is stored on our servers:

Device tokens: Required for Apple Push Notifications (for background sync triggers)
Anonymous analytics: Aggregated app and website usage statistics
Subscription information: RevenueCat subscription identifiers and entitlement status
Crash reports: For debugging (anonymized)

We do NOT store your calendar events or personal calendar data on our servers.

4.3 Security Measures

We implement industry-standard security measures:

OAuth 2.0 authentication for Google Calendar and Microsoft Outlook Calendar (no password storage)
Apple Calendar access through Apple's EventKit framework and iOS permissions
HTTPS/TLS encryption for all network communications
Encrypted local storage using iOS security features
Regular security audits and updates
Minimal data retention policies

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Third-Party Services

OnTimer integrates with the following third-party services:

5.1 Google Calendar API

Purpose: Read calendar events from Google Calendar
Data shared: OAuth authentication tokens (managed by Google)
Privacy policy: https://policies.google.com/privacy

5.2 Microsoft Graph API

Purpose: Read calendar events from Microsoft Outlook Calendar and Microsoft 365
Data shared: OAuth authentication tokens (managed by Microsoft)
Privacy policy: https://privacy.microsoft.com/privacystatement

5.3 Apple Calendar and iOS Calendar Permissions

Purpose: Read Apple Calendar events through Apple's EventKit framework with your device-level permission
Data shared: Calendar permission status and event information made available through Apple's EventKit framework
Privacy policy: https://www.apple.com/legal/privacy/

5.4 RevenueCat

Purpose: Subscription management and payment processing
Data shared: Anonymous user ID, subscription status
Privacy policy: https://www.revenuecat.com/privacy

5.5 Apple App Store

Purpose: App distribution, subscriptions, renewals, cancellations, refunds, and billing
Data shared: Purchase and subscription information needed to manage access to paid features
Privacy policy: https://www.apple.com/legal/privacy/

5.6 Apple Push Notification Service (APNs)

Purpose: Trigger background calendar syncs
Data shared: Device token, silent push notifications
Privacy policy: https://www.apple.com/legal/privacy/

5.7 Analytics Services

Purpose: Anonymous app usage analytics, and Google Analytics for website analytics used to understand feature adoption, referral sources, marketing performance, and crash reporting
Data shared: Anonymized usage patterns, browser/device information, page usage, and error information
Note: No calendar event content is used for advertising. Google Analytics does not load on ontimer.app for UK, EU/EEA, or Swiss visitors until they accept the cookie banner.
Privacy policy: https://policies.google.com/privacy

5.8 Apple MapKit

Purpose: Calculate travel time and traffic-aware directions between your current location and an event's location for Time to Leave reminders
Data shared: Your device coordinates and the event's location, sent to Apple's Maps service only when you use Time to Leave features with location permission granted
Privacy policy: https://www.apple.com/legal/privacy/

5.9 Google Maps Platform

Purpose: Return place suggestions and calculate routes and travel-time estimates for website calculators
Data shared: Location text you enter, requested travel mode, and the departure-time information needed to calculate the estimate
Privacy policy: https://policies.google.com/privacy

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may disclose your information only in the following circumstances:

With your consent: When you explicitly authorize us to share information
Service providers: Third-party services necessary to operate the Service (as listed above)
Legal requirements: If required by law, court order, or government request
Protection of rights: To protect our legal rights, safety, or property
Business transfers: In connection with a merger, acquisition, or sale of assets

7. Data Retention

Calendar data: Stored on your device only; deleted when you disconnect your calendar or delete the App
OAuth tokens: Stored until you revoke access or disconnect your account
Apple Calendar permission: Controlled through iOS settings and removed when you revoke Calendar access or delete the App
Precise location: Used only with permission for location-based features and not retained longer than necessary to provide those features
Device tokens: Retained as long as the App is installed
Analytics data: App and website analytics retained for up to 2 years in anonymized or aggregated form
Account data: Deleted within 30 days of account deletion request

8. Your Privacy Rights

You have the following rights regarding your data:

8.1 Access and Control

View your data: Access all calendar data stored locally in the App
Disconnect calendars: Revoke access at any time through App settings
Control location permissions: Grant or revoke precise location access through device settings
Delete local data: Remove the App to delete all locally stored data
Manage subscriptions: Cancel or modify through App Store settings

8.2 Revoke Calendar Access

You can revoke OnTimer's access to your calendar at any time through:

In-App: Settings → Remove Calendar Connections
Google: https://myaccount.google.com/permissions
Microsoft: https://account.microsoft.com/privacy/app-access
Apple Calendar on iOS: Settings → Privacy & Security → Calendars

8.3 Data Deletion Requests

To request deletion of your data:

Delete the OnTimer app from your device (removes all local data)
Email support@ontimer.app to request server-side data deletion
We will delete your device token and any associated data within 30 days

8.4 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect
Right to know if we sell or disclose personal information (we do not)
Right to request deletion of personal information
Right to opt-out of sale (not applicable as we don't sell data)
Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@ontimer.app

8.5 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing

To exercise these rights, contact us at support@ontimer.app

9. Children's Privacy

OnTimer is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at support@ontimer.app and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. By using OnTimer, you consent to the transfer of your information to the United States and other countries where we operate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Updating the "Last Updated" date at the top of this policy
Posting a notice in the App
Posting a notice on the website
Sending an email notification (if you have provided your email)

We encourage you to review this policy when the "Last Updated" date changes.

12. Google API Services User Data Policy Compliance

OnTimer's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

OnTimer only requests the minimum scopes necessary (read-only calendar access)
Information obtained from Google APIs is used solely to provide calendar event display, alarm, reminder, persistent notification, Time to Leave, and monitored-calendar selection functionality
We do not transfer calendar data to third parties except as necessary to provide the App's core functionality
Calendar data is not used for serving advertisements
Human access to calendar data is limited to debugging and support purposes only

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Breakout Growth
Email: support@ontimer.app
Website: https://ontimer.app