KT Group Calendar privacy policy

Effective 24 October 2026 · ktadvisers.com/calendar

KT Group Calendar is a planning tool for advisers in KT Group (RAY division), run by Keith (contact: [email protected]). This page explains what the app does with your Google account and Google Calendar data.

Who can use it

Only team members whose Google account the admin has added can sign in. The public booking page at ktadvisers.com/calendar/book/ needs no sign-in and is described separately below.

What we get from your Google account

Sign-in: your name, email address and profile photo, so teammates can see who logged an entry.
Google Calendar, only with your permission:
- See your calendar list (calendar.readonly), so you can choose which calendars appear in your week.
- See and edit events (calendar.events), so the app can show your events beside your logged time, work out when you’re busy, and create, change, delete or reply to events only when you ask it to, for example when you press “Save & update Google”, book a teammate, or reply to a team notice.

What we store, and where

Entries you log (date, time, activity type, title, client initials, location, notes). If you link or classify a Google event, its title, location, link and id are kept with the entry.
Busy times for booking: start and end times only, never event titles or details.
Your settings, plans, to-dos, bookings, replies to notices and any feedback you send.
Data is held in Google Firebase (Cloud Firestore, Singapore region). So you only connect once, KT’s server keeps your Google Calendar authorisation (a “refresh token”) encrypted, and uses it only to give your own browser short-lived access to your calendar. It never gives anyone else access to your calendar.
iCloud events are read live and not copied into our database, except an entry you log or link, as above.

Apple iCloud Calendar (optional)

You can choose to connect your iCloud calendars. If you do:

You give us your Apple ID email and an app-specific password that you create at account.apple.com. Never your normal Apple ID password.
The password is stored encrypted (AES-256) on KT’s own server in Singapore, with the key held in that machine’s system keychain. It is never shown back to anyone, never written to logs, and never stored in Firebase or Google Drive.
It is used only to show your iCloud events in the app, count them as busy time, and create, change or delete events when you ask it to.
Apple lets an app-specific password also open iCloud Mail and Contacts. We never use it for those.
Disconnect at any time in the app (Google calendars → Apple Calendar → Disconnect): your password is deleted from our server immediately. You can also revoke it at account.apple.com → Sign-In and Security → App-Specific Passwords, which stops it working everywhere.

Public booking page

If an adviser switches it on, the page shows their chosen display name, short intro, WhatsApp number and open time slots. Nothing about what they’re doing in those times is shown.

If you’re a client booking a meeting:

We collect your name, mobile number, email and any note you add, and only after you tick the consent box. We use them only to arrange that meeting with the adviser you chose and to contact you about it.
They are sent to KT’s own server, stored encrypted, and seen only by that adviser. They are never shown on the public page.
When the meeting is confirmed, the adviser’s Google Calendar sends you a calendar invite at the email you gave. The event in the adviser’s calendar includes your name, mobile and note.
Your booking record is deleted from KT’s server 60 days after the meeting date. The adviser may keep a short calendar entry with your initials.
You can also send a request through WhatsApp instead; then nothing is stored by the booking page.
To see, correct or delete your details, email [email protected].

What we don’t do

We don’t sell or rent your data, use it for advertising, or share it outside KT Group.
We don’t use Google Calendar data to train AI or machine-learning models.
People can see only what the app shows the team. They can’t read your Google Calendar.

Google API Services User Data Policy. KT Group Calendar’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your choices

To disconnect, remove the app’s access to your Google account at myaccount.google.com/permissions. Events already in your Google Calendar stay there, and KT’s server deletes its stored authorisation the next time it is used.
Ask for a copy of your data, a correction, or deletion by emailing [email protected]. We reply within 30 days, in line with Singapore’s Personal Data Protection Act.
When you leave the team, your access is removed and your data is deleted on request.

Changes

If this policy changes, the new version will be posted here with a new effective date.