Privacy policy
Last updated 6 October 2026
The short version
Tribora is a shared organiser for your household. We only store what you put into it so your household can use it together. We don't show ads, we don't sell your data, and we don't use analytics or tracking tools.
What we store
- Your account: your email address and name, and your password in hashed form (or your Google sign-in, if you use it).
- Your profile: the name, colour, emoji or photo, and family role you choose.
- Your household's content: calendar events, tasks, stars and rewards, lists, meal plans, recipes, and schools with their term dates. Everyone in your household can see these.
- Your settings: notification preferences, and a place name for the weather (for example “London”), which we turn into approximate coordinates. We never use your device's GPS.
- Push notifications: if you turn them on, a technical address for your device so we can deliver them.
Connected calendars
Google Calendar: if you connect it, we ask Google for access to read your calendar, to create a calendar called “Tribora” in your Google account, and to change or delete events you own. We store the access tokens securely on our servers. We copy events from your Google Calendar into your household's calendar, where your household can see them and choose who they're for. Family events that are for you — including ones that came from another member's Google Calendar — are copied into your Tribora calendar and kept up to date. When you change or delete one of your own Google events in Tribora, we make the same change in your Google Calendar; other members can't change or delete your Google events. You can turn copying off in Settings, which removes the Tribora calendar, and disconnecting removes it too. Our use of data from Google follows the Google API Services User Data Policy, including its Limited Use requirements.
iCloud Calendar: we no longer offer a new iCloud connection. Households that connected one earlier keep it only until they disconnect it in Settings: until then we store the Apple ID and app-specific password provided, securely on our servers, and use them only to read and update the chosen calendar. Disconnecting deletes them and removes Tribora's copies from that calendar. You can also revoke the app-specific password at any time at appleid.apple.com.
School calendars: if you add a school's calendar link, we fetch it about once an hour to show the school's events in your household's calendar. The link itself is stored securely and only its website name is shown in the app.
If you use the private calendar link in Settings, anyone with that link can see the family events you're in, so keep it to yourself — you can reset it at any time, which stops the old link working.
Services we use
We share only what's needed for each service to do its job:
- Supabase — our database, sign-in and file storage, where everything above is kept.
- Vercel — hosts the app.
- Google and Apple — only if you connect their calendars or sign in with them.
- Open-Meteo — receives your household's place name or coordinates to return the weather.
- GOV.UK — we download the public list of UK bank holidays (nothing about you is sent).
- TheMealDB — receives your recipe searches. When you add a recipe from a link, we fetch that page to read its details.
- Push services (Apple, Google, or your browser's) — deliver notifications to your device.
How long we keep it
We keep your data while you have an account. You can delete your account at any time in Profile → Delete account. That removes your account, profile and settings and disconnects your Google Calendar. Things you added to a shared household (events, lists, recipes) stay for the other members; if you're the last member, the whole household and everything in it is deleted.
Your rights
You can see and change most of your information in the app. To ask for a copy of your data, a correction, or anything else about your privacy, email us at support@example.com.
Children
Accounts are meant to be created by adults. A household can include children (for example, to assign them tasks), managed by the adults in it.
Changes
If we change this policy, we'll update the date at the top, and tell you in the app if the change is significant.