Privacy Policy

What Junto is

Junto is a shared group calendar with RSVPs. It is operated by Asobi Labs. This policy explains what data we collect, why, and how we handle it.

Data we collect

• Display name — the name you enter when creating or joining a calendar. This is visible to other members of that calendar.
• Email address — optional. Only collected if you choose to receive event reminders. Used solely for sending reminders, never shared or sold.
• Calendar and event data — calendar names, event titles, dates, times, locations, notes, and RSVP responses. This data is shared with other members of the same calendar.
• Usage analytics— anonymous event tracking (e.g., "calendar created," "event RSVP'd") to understand how the product is used. No personal identifiers are attached to analytics data.

Data we do NOT collect

• Passwords or login credentials (there is no login)
• Phone numbers
• Payment information (not yet applicable)
• Precise location or GPS data
• Contacts, photos, or device data

Cookies

Junto uses a single functional cookie (junto_memberships) to remember which calendars you belong to. This cookie is essential for the app to work — without it, you would need to re-enter your code every time you visit.

We do not use advertising cookies, tracking cookies, or any third-party cookies. The functional cookie is exempt from GDPR consent requirements as it is strictly necessary for the service to function.

How we store data

Data is stored in a Supabase-hosted PostgreSQL database. All API access is server-side only — the database is not directly accessible from your browser. Row-level security policies are enabled on all tables.

Who can see your data

• Other calendar members — your display name, events you created, and your RSVP status are visible to other members of the same calendar.
• Calendar admins — admins can see all members, their names, and email addresses (if provided).
• Public calendar viewers — on public calendars, anyone with the link can see event details and RSVP counts.
• No one else — we do not sell, share, or provide your data to any third parties, advertisers, or data brokers.

Data retention

Your data is stored as long as the calendar exists. When a calendar is deleted by an admin, all associated data (members, events, RSVPs, notifications) is permanently deleted. You can leave a calendar at any time, which removes your membership data.

Your rights

You can:

• Clear your browser cookies to disconnect from all calendars
• Ask a calendar admin to remove you as a member
• Request deletion of your data by contacting us

If you are in the EU, you have additional rights under GDPR including the right to access, rectify, and erase your personal data. If you are in California, you have rights under CCPA/CPRA including the right to know, delete, and opt out of the sale of personal information (we do not sell personal information).

Children

Junto is not intended for use by children under 13. We do not knowingly collect data from children under 13.

Changes

We may update this policy. Changes will be posted on this page with an updated date.

Contact

Questions about this policy? Email maria@asobi-labs.com.