Private by default
Accounts and organization profiles start private. Sharing one personal calendar does not expose your other personal calendars.
Security and access
These are the sharing controls in the current version. Read them alongside our privacy policy before deciding what to put on a shared or public calendar.
Accounts and organization profiles start private. Sharing one personal calendar does not expose your other personal calendars.
Viewers read event details; editors can also manage events. Calendar owners manage members and invite links. Team workspace owners can manage every calendar in their workspace.
Invite links require sign-in, expire after seven days, and can be revoked. Revoking a link does not remove existing members. Removing a member does not revoke links they still hold.
Owners can publish selected calendars at /@handle. Public pages show ongoing and upcoming titles and times, not notes, locations, email addresses, or membership details. New calendars are not published automatically.
A viewer role exposes event details on that calendar; it is not a free/busy-only view. Making a profile private stops future access through its public page and data endpoints, but cannot remove copies someone already obtained. Public pages request no search indexing, which is not an access restriction or a guarantee against discovery.
You choose whether to authorize third-party apps and which permissions to grant. Calendar roles still apply. Permissions can cover all calendars you can access, including future calendars. Review each connection before approving it. Disconnect an app through Connected Apps to stop future access. Signing out of the website does not revoke an app connection.
Cloudflare hosts the service and Loomup provides authentication, storage, and managed email. We do not claim compliance certifications, an uptime guarantee, or India-only data residency. See our privacy policy for data use and manual deletion requests.
For a security concern, contact mohit@blupp.co. Do not include passwords, access tokens, or private calendar contents in your initial email.