Appvent Magyar
Appvent · Privacy

Privacy Policy

Effective from 27 October 2026

In short

  • No sign-up: we never ask for your e-mail address, phone number or a password.
  • No ads, no analytics, no tracking. We do not sell your data or build a profile of you.
  • Only what is needed to deliver a calendar reaches our server: its photos, messages and the names you enter.
  • A shared calendar is deleted automatically on 31 January of the following year, and you can delete it from the app at any time before that.
  • Payments are handled by Apple or Google; we never see your card details.

This policy applies to the Appvent mobile app (iOS, Android) and the appvent.hu website. We process personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Hungarian Act CXII of 2011 on informational self-determination. The Hungarian version of this policy prevails.

1. Who we are

Controller
Attila Szilágyi, sole proprietor (Szilágyi Attila e.v.)
Address
Sport utca 37., 4271 Mikepércs, Hungary
Registration no.
53666068
Tax no.
69774449-1-29
E-mail
[email protected]
Website
appvent.hu

We are not required to appoint a data protection officer. For any privacy question, please write to the e-mail address above.

2. Data that stays on your phone

The app stores the following only on your phone; it is never sent to us:

All of this is removed when you delete the app. The one exception is the random device identifier on iPhone (see section 3): it stays in the Keychain after the app is deleted, so that we recognise the same phone after reinstalling. It is not synced to other devices and is removed by a factory reset.

3. Data of a shared calendar

When you send a calendar, its content is uploaded to our server so that the recipient can open it with their code. We then process the following:

DataPurposeLegal basisRetention
Calendar title, sender's name (as you enter it), daily messages and the compressed version of the photos Delivering the calendar to its recipients Performance of a contract (Art. 6(1)(b) GDPR): the service under the Terms of Use Until 31 January of the year after the calendar's year, or until the creator deletes it in the app (“Everywhere”). It is then deleted permanently and automatically.
Recipients' names or labels (as you enter them), recipient codes, time of creation and first opening Knowing which code may open the calendar; counting the slots of the plan Performance of a contract (Art. 6(1)(b))
Original-quality photos (if this feature was purchased): the original file with its embedded metadata (e.g. time taken, phone model and, if enabled in your camera app, the location) Downloading the photos in original quality Performance of a contract (Art. 6(1)(b))
A fingerprint of the phone identifier (a one-way, irreversible value derived from it) and a fingerprint of the edit key A recipient code opens on one phone at a time, and the sender can move it to a new phone; only the creator can change the calendar Performance of a contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)): preventing abuse by passing codes on
Purchase data: the product, time of purchase, the calendar or code it was redeemed for, and a fingerprint of the store transaction ID Applying the purchased plan; preventing a purchase from being redeemed twice Performance of a contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)) 5 years; pseudonymised once the calendar is deleted (no names, photos or messages)
A salted fingerprint of the IP address Rate limiting against overload and abuse (at most 10 new calendars per address per hour) Legitimate interest (Art. 6(1)(f)): security of the service At most 1 day
Web server logs: IP address, time, requested address, browser or app type Operation, troubleshooting, defending against attacks Legitimate interest (Art. 6(1)(f)): security of the service According to the hosting provider's logging settings

For processing based on legitimate interest we have weighed your interests: this data is stored only as fingerprints or for a short time, and without it the service could not be protected against abuse. You may object to processing based on legitimate interest (see section 10).

Tip: if you do not want the location to be included in original photos, turn off location tagging in your camera app. The app removes metadata from the compressed version of the photos (which recipients see by default).

What we don't do

4. Who can see a calendar?

A shared calendar can be opened by anyone who knows the recipient code (or the link or QR code containing it). The code is 10 random characters, so it is practically impossible to guess, but whoever receives it can open it: only send it to the person it is meant for. A code opens on one phone at a time.

In a browser, the link shows a short page that may display the calendar title and the sender's and recipient's names; it does not show photos or messages. The page is not indexed by search engines.

5. Other people in your calendar

Photos and messages may include other people (family members, children), and you enter the recipient's name yourself. When uploading, it is your responsibility to have the right to do so, for example that the people in the photos (or a child's parent) have agreed. A calendar made for personal purposes within family and friends typically allows this.

If someone believes they appear in a calendar without permission, they can write to [email protected] (ideally with the code); we will investigate and remove the content if needed.

6. App permissions

You can revoke any permission in your phone's settings; only the related feature will stop working.

7. Who has access to the data?

Processor

Independent controllers

Apple and Google may also process data in the United States. They are certified under the EU–US Data Privacy Framework, which provides adequate protection under the European Commission's adequacy decision.

Beyond these, we only disclose data where required by law or by an order of an authority or court.

8. Security

Should a personal data breach occur, we will notify the authority as required by law and, if it poses a high risk to your rights, you as well.

9. Children

Children can enjoy the app too, and the recipient may be a child. Creating calendars, making purchases and uploading other people's photos, however, require the consent and supervision of a parent or legal guardian under the age of 16. We do not knowingly collect data about children; the creator decides which names and photos appear in a calendar (see section 5).

10. Your rights

Under the GDPR you have the right to:

Send your request to [email protected]. As there are no user accounts, we can only identify a calendar by its recipient code, so please include it. If the request comes from the creator, we may ask you to make this plausible (e.g. by describing the calendar). We reply free of charge within one month at the latest; this may be extended by two months where justified, in which case we will let you know.

11. Complaints

If you feel we have infringed your privacy rights, please write to us first so that we can put it right. You can also lodge a complaint with the supervisory authority:

Authority
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address
Falk Miksa utca 9–11., 1055 Budapest, Hungary
Postal address
1363 Budapest, Pf. 9.
Phone
+36 1 391 1400
E-mail
[email protected]
Website
naih.hu

You may also go to court. If you live in another EU member state, you can also contact your local data protection authority.

12. Changes to this policy

We may update this policy if the service or the law changes. The current version is always available at appvent.hu/en/privacy; we will announce significant changes in advance in the app or on the website.