Privacy policy
Last updated: 30 September 2026
Bernardo is a calendar with tasks, on the iPhone app and on the web. This page explains which data it uses, why, and how you can delete it. No ads, no profiling, no tracking.
Who handles your data
Data controller: [TO COMPLETE: name of the data controller]. For any privacy question write to support@bernardo.to.
What data we use
Account
Email, password (protected by a hash, never stored in plain text) and, if you add them, name, username, birthday and profile photo. The optional photo is stored privately and only displayed to you on the website. You can replace or remove it in Settings → Account details. Before upload, it is resized and re-encoded without the original photo metadata. If you sign in with Apple or Google we receive your email from them and, when they share it, your name.
You can choose a manual time zone in your account settings, which we store to display dates and times correctly. With “Follow device”, the website uses your device’s time zone. Time-zone setup does not request GPS access or collect precise location coordinates.
Your content
Events (title, times, repeats, alerts, place, notes, symbol), the people you add to an event (name, email or phone that you pick from Contacts), tasks, calendars and, in Notes, pages and attached files. They are used only to show them to you and keep them in sync across your devices.
Data that stays on your device
- Contacts birthdays: if you turn the option on, the app reads names and birth dates to show them in the calendar and in widgets. They are never sent to our servers.
- Local copy: the app keeps a copy of your data to work offline and for widgets.
- Alerts: notifications are scheduled on your phone.
- Website preferences: theme, wallpaper, widget order and the first day of the week are saved in the browser, together with the sign-in session.
Where it is stored
Account and content are stored with Supabase, on servers in the European Union (Frankfurt). Each person can read and edit only their own data. Confirmation and password-reset emails are sent through the same service.
Other services involved
- Public holidays: to show national holidays the app asks a public service for the calendar of the chosen country. The request includes the country code and year; like any internet connection, it also exposes the IP address to the service, Nager Holidays.
- Places: when you search for a place for an event, the search goes through Apple Maps.
- Website: the sign-in library is loaded from jsDelivr. We use no analytics tools or advertising cookies. Sessions and preferences use browser local storage to operate the service. Services receiving network requests, including the website host, also receive the IP address and technical request data.
- External calendars (optional, only if you connect them): from the iPhone Calendar or from Google Calendar the app reads, in read-only mode, title, times, place, notes, repeats and alerts of the events of the calendars you choose, and copies them into your Bernardo account to show them and keep them up to date. The Google authorization stays in this iPhone’s Keychain, never on our servers, and you can revoke it at any time from Bernardo or from myaccount.google.com/permissions. Bernardo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: the data is used only to show you your events, and is never sold, used for advertising or read by people.
- Gmail (optional, only if you connect it): read-only access to sender, subject, date and preview of the most recent inbox messages. The authorization is stored encrypted and you can revoke it at any time.
Why we use it
Account and content are used to provide the requested service (Article 6(1)(b) GDPR). Optional integrations are enabled only at your request and after the permissions required by your device or provider. You can revoke permissions at any time. Disconnecting a calendar does not remove imported events; you can delete them from the calendar.
For how long
As long as you have an account. When you delete an event or a task it is first marked as deleted, so it disappears from your other devices too; account deletion removes active server data, including files. Any backups follow the provider’s retention periods, which must be verified before release. Disconnecting an external calendar leaves imported events in place. Copies on offline devices cannot be erased remotely: remove them from the device or delete the app.
Your rights
Where provided by the GDPR, you can access, correct and delete your data, restrict or object to processing, and receive a portable copy. To exercise these rights, write to support@bernardo.to. You can delete your account at any time from the app (Settings → Delete account) or from the website (Settings → Privacy and security → Delete account). You can also lodge a complaint with your data-protection authority (in Italy, the Garante per la protezione dei dati personali).
Providers and international transfers
A European database region does not rule out processing outside the European Economic Area by providers or their subprocessors. Actual providers, data-processing agreements, transfer safeguards and backup retention periods must be verified before release.
Children
Bernardo is not designed for children under 14.
Changes
If this policy changes we will update the date at the top and, for important changes, tell you in the app.