1. Overview and who we are
Hagora is a planning and calendar application for iPhone. It helps people manage tasks, view selected calendars, share availability, create shared tasks, and coordinate in groups and lists.
For the purposes of applicable data-protection law, Hagora is the controller of personal data processed through the Hagora app and this website. Hagora is based in Portugal. Questions and privacy requests can be sent to support@hagora.app.
2. Data we collect
Account and profile data
When you create or use an account, we may process your email address, display name, Hagora username or identifier, authentication provider, internal user identifier, and account settings. If you use Sign in with Apple, Apple provides the identifier and any name or relay email you choose to share. Password authentication is handled by our authentication provider; Hagora does not store a readable copy of your password.
Content you create
We store the content needed to provide the service, including task titles, dates and times, durations, recurrence rules, notes, day notes, lists, list items, goals, group information, task suggestions, task responses, and related completion state.
Social and sharing data
We process friend connections, invitations, group membership, the names you assign to contacts inside Hagora, shared tasks and lists, sharing choices, and activity needed to keep shared views synchronized.
Device and service data
We may process an Apple Push Notification token, app language and settings, synchronization state, and limited technical logs needed to operate, secure, and diagnose the service. Our infrastructure providers may automatically process information such as IP address and request metadata when delivering the app or website.
Voice and AI features
If you choose to use voice or natural-language task features, the audio or text you submit and the minimum relevant task, friend, or group context may be sent through Hagora's secure proxy to OpenAI for transcription or interpretation. This processing happens only when you invoke the feature. Do not include sensitive information that is unnecessary for your request.
3. Apple device calendars and Google Calendar
Calendar connections are optional. Hagora requests access only after you choose to enable a calendar feature, and you can disconnect or disable access later.
Apple device calendars (EventKit)
If you grant calendar access, Hagora reads eligible timed events from calendars available through the iOS Calendar system so they can appear beside your Hagora tasks. The original Apple EventKit objects are not uploaded as raw calendar objects. Hagora keeps a converted on-device cache so the calendar can open quickly.
When external-calendar sharing is enabled, Hagora sends a bounded schedule snapshot to our servers. By default, friends who can view your calendar receive anonymous busy intervals. Event names are available only to friends you explicitly select. Event notes and locations from device calendars are not shared with friends through this feature. Events marked as free are not included in shared busy time.
Google Calendar data we access
If you connect Google Calendar, Hagora requests your Google account identifier and email, a list of your calendars, and access to events in the calendars you select. Depending on the event, this may include calendar and event identifiers, title, description, location, start and end time, all-day status, recurrence and availability information, time zone, update status, and related metadata.
How we use Google Calendar data
- Show selected Google calendars alongside your Hagora tasks.
- Keep those events synchronized when they change.
- Create, edit, or delete a Google Calendar event only when you ask Hagora to perform that action.
- Calculate your availability and display anonymous busy intervals to eligible Hagora friends.
- Display an event name and time to a friend only when you have enabled event-name sharing for that person.
How Google Calendar data is stored
Hagora stores an encrypted Google refresh token, your connected Google email and account identifier, selected-calendar metadata, synchronization tokens, and a normalized cache of selected events on our server infrastructure. This allows the app to load quickly, synchronize incremental changes, and receive Google change notifications. Access credentials and webhook secrets are server-only.
How Google Calendar data is shared
We do not give friends direct access to your Google account or calendar. Hagora shares only the availability representation required by the feature: anonymous busy intervals by default, or an event name and its time interval for people you specifically authorize. We do not share Google event descriptions or locations with friends. Google data may also be processed by the service providers listed below solely to operate Hagora.
4. How and why we use data
We use personal data to provide accounts; save and synchronize tasks and calendars; enable friend, group, list, and sharing features; deliver notifications; provide support; prevent abuse; maintain security; diagnose faults; and meet legal obligations.
For users in the European Economic Area, our legal bases generally include performance of our contract with you, your consent for optional permissions and integrations, our legitimate interests in operating and securing Hagora, and compliance with legal obligations. You can withdraw optional permissions at any time, although the associated feature will stop working.
6. Retention and deletion
We keep account and user-created content while your account is active or as needed to provide Hagora. Some short-lived synchronization, change-history, and security records are automatically removed after their operational purpose ends.
If external-calendar availability sharing is switched off, the shared availability becomes unavailable immediately and the related server snapshot is scheduled for deletion after a short grace period, currently 24 hours, unless sharing is re-enabled. Disconnecting Google Calendar revokes the connection where possible and deletes the Google connection, encrypted token, selected-calendar metadata, cached Google events, and Google-derived availability from Hagora.
You can permanently delete your Hagora account inside the app. Account deletion removes the authentication account and associated personal content from our active systems, subject only to narrowly limited records we must retain for legal, fraud-prevention, or security reasons. Data may remain briefly in encrypted backups until those backups rotate out.
7. Your choices and rights
- Control device-calendar, notification, and microphone permissions in iOS Settings.
- Choose which Google calendars appear, or disconnect Google Calendar in Hagora Settings.
- Choose whether particular friends may see event names rather than anonymous busy time.
- Revoke Hagora's Google access from your Google Account permissions.
- Correct profile information or delete your account in Hagora Settings.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to withdraw consent. Contact support@hagora.app to exercise these rights. You may also complain to your local data-protection authority; in Portugal this is the Comissão Nacional de Proteção de Dados (CNPD).
8. Security
We use safeguards designed to protect personal data, including encrypted network transport, access controls, row-level database rules, server-only credentials, and encryption of Google refresh tokens. No internet service is perfectly secure, so we cannot guarantee absolute security.
9. International transfers
Some providers may process data outside Portugal or the European Economic Area. Where required, transfers are protected through adequacy decisions, standard contractual clauses, or other lawful safeguards.
10. Children
Hagora is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data without appropriate authorization, contact us so we can investigate and delete it.
11. Changes to this policy
We may update this policy as Hagora changes or legal requirements evolve. We will publish the revised date here. If a change materially alters how we use personal or Google user data, we will provide appropriate notice and request consent where required before using data for the new purpose.
12. Contact
For privacy questions, rights requests, or complaints, email support@hagora.app.
Hagora
Portugal