Privacy
What Wallweekly reads, what it keeps, where it keeps it, and how to make all of it go away.
Last updated 25 August 2026.
What we read · What we keep · Private events · Who else sees it · Making it all go away
The short version
Wallweekly reads your calendar so it can draw it on your television. That is the only reason it reads anything. Your events are not sold, not shared, not used for advertising, and not used to train any model. Nobody at Wallweekly reads them. Delete your account and they are gone.
Who we are
Wallweekly is the Apple TV app and its companion iPhone app, published at wallweekly.app. Questions about anything on this page go to hello@wallweekly.app.
What we access from your Google Account
When you connect Google Calendar, Google asks you to grant these permissions, and Wallweekly asks for no others:
- See the list of calendars in your account (calendar.calendarlist.readonly)
- Used to show you which calendars you have, so you can choose which ones belong on the television and who each one belongs to. It sees their names, not what is in them.
- View events on all your calendars (calendar.events.readonly)
- Used to read the events themselves — that is what the television draws.
- Your email address (openid, email)
- Used to label the connected account in the phone app, so you can tell two Google accounts apart and know which one to disconnect.
Wallweekly requests no permission to write. It cannot create, change, or delete an event, or send an invitation. The television is a display.
What we actually store
To draw a week quickly and to notice changes without asking Google constantly, Wallweekly keeps a copy of what it read:
- Your email address, and the names of the calendars you connected.
- For each event you chose to show: its title, start and end time, whether it lasts all day, its location if it has one, whether Google marks it private, and whether it was cancelled.
- The names, any nicknames, and the colours you gave the people in your household.
- Photos you add to the album, if you use that feature.
- A Google refresh token, held encrypted, so the calendar keeps updating without you signing in every day.
- A record that a particular Apple TV is paired to your household. What we keep is a one-way scramble of that television's key, not the key itself — so the record cannot be used to read your calendar even by us.
- Roughly where the house is, and its time zone, so the week starts on the right day and the temperature is your temperature. Not a street address.
- The next few days' high temperature, refreshed daily.
Events from a calendar you did not switch on are not stored. Events from a calendar you switch off are removed.
The title of a private event never leaves our server
If Google marks an event private or confidential, the television is sent the time and the word Busy. It is not sent the title. The title is not hidden in the app — it is absent from what the app receives. The same happens to every title on a calendar you have set to times-only. There is an automated test that fails if a masked title ever appears in what the television is sent.
The colour is hidden too, when the colour came from the title. Wallweekly works out who an event is about by looking for a household member's name inside the title — so drawing Busy in that person's colour would announce who it was about straight after refusing to say what it said. A colour you set yourself, and a colour that follows from which calendar the event sits on, both still show: neither is worked out from anything that was hidden.
Who else sees it
Anyone in the room. That is the point of a wall calendar, and it is worth saying plainly: your week is drawn on a television, so your family, a babysitter and any visitor can read whatever is on it. If a calendar has events you would rather not put on a shared screen, do not connect it — or turn its titles off in the phone app, and the television shows the times with no words. You choose which calendars are connected, and you can disconnect any of them at any time.
Beyond the room: nobody is sold anything and nothing is shared for advertising. Wallweekly uses a few service providers to run, and they hold data only to provide that service:
- Convex
- Runs the database and the server code. Your calendar copy lives here.
- Cloudflare R2
- Stores the photos you add, if you add any.
- Apple's weather service
- Receives the rough area of the house — never an address, never anything about your calendar — and returns a forecast.
Each of them is bound to protect your information to the same standard this page describes, and none of them may use it for anything except running Wallweekly for you.
Apple handles the purchase. Wallweekly never sees your payment details.
We will disclose data if the law requires it, and we will tell you unless we are forbidden from doing so.
Google's Limited Use rules
Wallweekly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
In plain terms: Google Calendar data is used only to show your calendar on your own television. It is never used for advertising, never sold or transferred to anyone except as needed to run the app, and no human reads it except with your explicit permission — for example, if you ask us for help with a specific problem.
How long it is kept
Your calendar copy is kept while your account exists and is refreshed as your real calendar changes. Delete your account from the phone app and everything above — events, people, photos, tokens, paired televisions — is deleted. Disconnecting a single Google account removes that account's calendars and their events, and stops Wallweekly asking Google for anything further. To withdraw the permission at Google's end as well, use the page below — that is the switch that truly cuts us off.
You can also cut Wallweekly off from Google's side at any time, at myaccount.google.com/permissions. Wallweekly then stops updating and can no longer read anything.
Apple Calendar
If you use the iPhone's own calendar instead, the phone app asks the iPhone for permission and reads those events on the phone. They are stored the same way and treated the same way as the rest of this page describes, with one difference worth knowing: Apple's calendar has no private-event setting for Wallweekly to read, so nothing is masked automatically there. To hide titles from an iPhone calendar, set it to times-only in the phone app — then none of its titles are ever sent to the television.
Children
Wallweekly is for a household and is bought by an adult. We do not knowingly collect anything from a child directly. Children's names and events appear only because an adult in the household put them on the family calendar.
Your rights
You can ask what is held about you, ask for a copy, ask for it to be corrected, or ask for it to be erased. Write to hello@wallweekly.app and we will answer within thirty days. Deleting the account in the app does the same thing immediately.
Changes to this page
If this page changes in a way that matters, the date at the top changes and the app tells you the next time you open it.