Privacy Policy

Who operates mmddyy

mmddyy is operated by Blupp Infotech Private Limited, Delhi, India (“we”, “us”). For privacy questions, concerns, or requests about your information, contact mohit@blupp.co.

This policy covers information handled through the mmddyy website and calendar service, including access through our CLI and MCP integrations. A third-party app you choose to connect also has its own data practices and policies.

Information we handle and why

• Account information: your name, email address, handle, and authentication information, used to create your account, sign you in, maintain sessions, and handle password resets. Loomup processes authentication credentials.
• Calendar content: workspace and calendar names, colors and timezones, event titles, dates, times, recurrence, notes, and locations, used to store and display the plans you create.
• Sharing and publication settings: memberships, roles, invitations, profile visibility, and selected public calendars, used to determine who can access each calendar and which information you publish.
• Connected-app information: app identities, permissions, authorization records, and credentials needed to maintain the connections you approve and enforce their access.
• Technical and operational information: request and connection information, session state, and operational logs used to deliver the service, diagnose errors, and protect access. Hosting infrastructure processes information such as IP addresses and request metadata.
• Messages you send us: your email address and the contents of support or privacy correspondence, used to respond and handle your request. Please do not send passwords or access tokens.

Do not put information on a calendar unless you have the right to store it and share it with that calendar’s audience. Event notes and titles may contain personal information about other people.

Cookies, browser storage, and analytics

The app uses necessary authentication cookies and browser session coordination to keep you signed in and refresh your session. Blocking these can prevent account features from working. We do not use advertising tracking tools or cookies.

We use Cloudflare Web Analytics, including its browser beacon, to understand page visits and how the service performs. Cloudflare processes page and referrer information, browser and device information, country, and page-load and performance measurements for this purpose. Cloudflare states that Web Analytics does not track individual visitors across its customers’ websites. See Cloudflare’s documentation on data collection and analytics dimensions.

Who can access your calendars

Personal calendars and profiles start private. Sharing one personal calendar does not reveal your other personal calendars. A viewer can read event details on the shared calendar; an editor can also create, edit, and delete events. Calendar owners manage access, and team workspace owners can manage all calendars in their workspace. Shared access is not a free/busy-only view.

Anyone with an active invite link can sign in and accept its viewer or editor role. Links expire after seven days and owners can revoke them. Revoking a link prevents new joins but does not remove existing members. Removing a member does not revoke links they still hold.

If you make a profile public, its handle, public identity and calendar information, and ongoing and upcoming event titles and times from the calendars you select become available without sign-in. The public calendar output does not include notes, locations, email addresses, or membership details. New calendars are not selected for publication automatically.

Making a profile private disables future access through its public pages and data endpoints. It does not erase screenshots, downloads, or copies already obtained by others. Public pages request no search indexing, but this cannot guarantee that public information will not be found or copied.

Service providers and connected apps

We use Cloudflare to host and deliver the service and provide web analytics, and Loomup for authentication, data storage, and managed account email. These providers process information needed for those functions. We do not offer a commitment that data is stored or processed only in India.

You can separately authorize third-party apps, including apps that use AI, to access mmddyy. Review the permissions and the app’s own policy before connecting it. Granted permissions can cover calendars you can access now and in the future, subject to your calendar roles. An app may receive calendar content and perform actions within its permissions.

You can revoke a connection through Connected Apps. This stops future authorized access through that connection; it does not delete data the third party already received. Website sign-out does not revoke independent app connections.

We do not sell user data, use it for advertising, or use calendar data to train AI models. This describes our use of data; it does not determine how a third-party app you authorize uses information it receives. We may disclose information where required by applicable law or legal process.

Retention and deletion requests

Account and calendar records are stored to support your use of the service. You can edit or delete events where your calendar role permits. Deleting a repeating event affects the entire series. Account deletion is handled manually rather than through a self-service account-deletion control.

To request account deletion, email mohit@blupp.co from the email address associated with your account. We may need to verify your identity and clarify how your request affects shared team records. Do not send your password.

We have not published a fixed account-deletion turnaround or log and backup retention schedule. Removal from active use should not be understood as an assurance of immediate erasure from every log or backup. Some information may need to be retained for applicable legal requirements. Contact us about the handling and status of your specific request.

Your choices and requests

You can manage the sharing links, members, public visibility, and connected apps that you control. You can also contact mohit@blupp.co to request access to or correction of your information, request deletion, withdraw permission for processing, or raise a privacy concern. Requests are handled manually and subject to applicable law; some information is necessary to continue providing your account and calendars.

Security and policy changes

The service uses authenticated sessions and calendar-role checks to restrict access. Read Security and access for the current controls and their limits. No service can guarantee absolute security.

We may update this policy as the service or its data practices change. The current policy and its effective date are published on this page. An update does not remove rights you have under applicable law.