Last updated: 26 July 2026
EventFlow is developed by Timo “sginne” Junolainen @ Norsula.
Information processed
EventFlow may process:
- your email address during Google or email authentication;
- account identifiers, authentication sessions, account status, and credit balance;
- text, images, and voice-recognition transcripts submitted for event extraction;
- purchase identifiers and transaction status;
- rewarded-ad interactions and reward transaction identifiers;
- device, advertising, consent, diagnostic, and usage information processed by Google advertising services;
- technical information required for security, diagnostics, and operation of the service.
EventFlow stores a cryptographic hash of your normalized email address rather than the readable email address in its main database. Your device may store your email address and session token locally to keep you signed in.
How information is used
Information is used to:
- authenticate users and maintain accounts;
- process text and images into calendar event suggestions;
- manage credits, purchases, and rewarded-ad rewards;
- prevent duplicate transactions, abuse, and fraud;
- send account verification and password-reset messages;
- diagnose errors and maintain the service.
EventFlow opens the Android Calendar interface for events you choose to add. EventFlow does not read or independently manage your calendar.
AI processing
Text and images submitted for event extraction are sent through EventFlow’s backend to third-party AI processing services, including OpenRouter and the selected model provider.
Submitted content may contain personal information. Do not submit information that you are not authorised to process.
Retention and processing by AI providers are governed by their respective terms and privacy policies.
Voice input
Voice input uses the speech-recognition service available on your Android device. EventFlow receives the resulting transcript and does not directly store audio recordings.
Advertising
EventFlow uses Google AdMob to provide optional rewarded advertisements.
Google and its advertising partners may process device identifiers, advertising identifiers, IP-derived location, ad interactions, diagnostics, and consent information to provide, measure, secure, and personalise or limit advertising.
Users in the EEA, United Kingdom, and Switzerland can make and later change their privacy choices through Google’s User Messaging Platform. Declining consent does not necessarily disable advertising; non-personalised or limited ads may still be shown.
Rewarded advertisements are voluntary. Credits are granted only after successful reward verification and are subject to a daily limit.
Purchases
Credit purchases are processed by Google Play Billing. EventFlow receives purchase identifiers and transaction status but does not receive or store payment-card details.
Service providers
EventFlow uses service providers including:
- Google Identity and Android services;
- Google Play Billing;
- Google AdMob and User Messaging Platform;
- Cloudflare Workers and D1;
- OpenRouter and underlying AI model providers;
- Resend for verification and password-reset email.
These providers process information only as required to provide their services and according to their own terms and privacy policies.
Diagnostic logging
During closed testing and active development, diagnostic logging may temporarily process request metadata, errors, AI responses, or submitted content when necessary to investigate problems.
Diagnostic logging will be reduced for the public production release. Secrets, authentication tokens, verification codes, and passwords are not intentionally logged.
Data sharing
EventFlow does not sell personal information.
Information is shared only with service providers when required to operate, secure, diagnose, or improve the application, or when required by law.
Data security
Data is transmitted using encrypted HTTPS connections. Passwords are stored using salted cryptographic hashes. Authentication tokens and sensitive account operations are protected using appropriate technical safeguards.
No system can guarantee absolute security.
Data retention
Account and credit information may be retained while your account exists.
Authentication sessions, verification records, password-reset records, diagnostic logs, purchase records, and advertising reward records are retained only as required for operation, security, fraud prevention, accounting, or legal obligations.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal information.
You may:
- delete your EventFlow account by email;
- change advertising privacy choices inside the Account screen;
- avoid submitting optional text, images, or voice input;
- stop all processing by uninstalling the application and requesting account deletion.
Children’s privacy
EventFlow is not directed to children and is not intended for users under 13 years of age. EventFlow does not knowingly collect personal information from children where parental consent is legally required.
Changes to this policy
This policy may be updated when EventFlow’s functionality or service providers change. The latest version will be published on this page.
Contact
Privacy and account deletion requests: