Who we are
Timetabled is made by Dínamoxigenado Unipessoal, Lda. (NIPC 518435067), Rua Diogo Dias, n.º 96, 2870-272 Montijo, Portugal.
It is the data controller for timetabled.app.
Questions and requests: hello@timetabled.app.
What happens to your schedule
When you convert a schedule, you send us one of these: a PDF, a photo, a link or pasted text.
Photos are shrunk in your browser before they are sent. With a link, our server opens that page once to read it.
The file, photo, text or page is held in memory only while we process it. We do not write it to disk and do not keep it.
To find the events, our server sends it to OpenAI, which returns a list of events.
We ask OpenAI not to store the request or the answer. OpenAI may keep requests for up to 30 days to monitor abuse, and does not use API data to train its models. See OpenAI's privacy policy.
With each request we also send OpenAI a safety identifier: the pseudonymous daily code of your IP address described below, never the address itself. OpenAI uses it to detect abuse and may keep it for up to 30 days.
OpenAI processes these requests in the United States, outside the European Union. This transfer relies on the standard contractual clauses in OpenAI's data processing terms.
The events you check and edit stay in your browser. When you download the .ics file, they are sent to our server only to build that file, and are not kept.
"Add to Google Calendar" opens Google Calendar with that one event filled in. From there, Google's privacy policy applies.
Legal basis: providing the conversion you ask for (Article 6(1)(b) GDPR).
What we keep
For each conversion we keep a record without the content of your schedule:
- the date and the type of source (PDF, photo, link or text);
- the size of what you sent: pages, characters or image size;
- the number of events found and how many were marked for checking;
- the AI model used, tokens, estimated cost, duration, whether it worked and, if not, the error code;
- your country, estimated from your IP address on our own server;
- a pseudonymous daily code of your IP address, while it exists (see below).
The country is estimated with a database that runs on our server, IP to Country Lite by DB-IP, licensed under CC BY 4.0. Your IP address is used only for that lookup, at that moment.
To apply the free daily limit, the server turns your IP address into a pseudonymous code with a key that is kept only for that day. Codes from different days cannot be linked.
The code is deleted about 24 hours after the end of the day it was made. Your IP address itself is not stored.
When we refuse a request, for example because the limit was reached, we count refusals per day and reason, with no identifier.
Legal basis: our legitimate interest in applying the free limits, preventing abuse and controlling cost (Article 6(1)(f) GDPR).
How long we keep it: conversion records, 13 months. The IP address code, about 24 hours after the end of its day.
Visits and clicks
This site sets no cookies for visitors and uses no tracking or advertising tools.
We count page views and a few clicks: downloading the .ics, "Add to Google Calendar", "Keep it updated", and edits, merges and deletions in the review table. These counts never include the content of your events.
With each page view we keep the page, the page you came from without its parameters, and any campaign tags in the link (utm_source, utm_medium and utm_campaign).
To count daily visitors, the server turns your IP address and browser type into a pseudonymous daily code. The key for that code is thrown away every day, so codes from different days cannot be linked. Your IP address is not stored.
Legal basis: our legitimate interest in knowing how Timetabled is used and found (Article 6(1)(f) GDPR). You can object at any time.
How long we keep it: visit and click records, 13 months.
Fonts and images are served from this site. No request goes to third-party font, image or analytics services.
Keep it updated emails
Keep it updated is not available yet. If you tell us you want it, we record your interest with the type of source, the number of events and the pseudonymous daily visitor code, so the same person is not counted twice that day.
If you also give your email and tick the box, we keep that email, in lower case, to write to you once when Keep it updated is ready.
We do not use it for anything else and do not share it.
Legal basis: for the email, your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. For counting interest, our legitimate interest in knowing whether to build it (Article 6(1)(f) GDPR).
How long we keep it: the email, until you ask us to delete it. Write to hello@timetabled.app. The interest record, until we decide whether to build Keep it updated.
Who else receives data
- OpenAI, to find the events in your schedule, together with the safety identifier.
- The company that hosts our server, which processes data only on our behalf.
We do not sell data and do not share it with advertisers.
Your rights
You can ask to access, correct or delete your data, or to receive a copy of it.
You can object to processing based on legitimate interest, or withdraw your consent.
Write to hello@timetabled.app. We reply within one month.
Conversion, visit and interest records hold only pseudonymous daily codes, so we may not be able to find yours.
You can also complain to a data protection authority, in Portugal the Comissão Nacional de Proteção de Dados (CNPD).