Calendarium Solaris

This policy covers solariscalendar.org, your Solaris account, Solaris storage and the Solaris Focus app. It says what I keep, where I keep it, for how long, and what I cannot see.

1. Who I am

Calendarium Solaris is a project operated under a registered trade name with the Dutch Chamber of Commerce (Kamer van Koophandel). You can reach me at [email protected], or through Solaris Focus.

2. Where your data is kept

The server of solariscalendar.org runs at QDE in the Netherlands. I do not use third-party cloud services for your messages, your calendar or your files. Translation runs on a server of my own; section 5 says how.

3. The website

• Your account: your email address, the Solaris name you choose, and your password as a bcrypt hash, which cannot be read back. When someone registers, I receive a notice with the email address, so that I can see the registration worked.
• Your calendar: encrypted on your device before it is sent, with one random key that never changes. The server keeps that key only in two sealed envelopes, one opened with your password and one with your recovery key. The server can open neither, so I cannot read your appointments.
• Your recovery key by email: only if you ask for it. It passes through the server once, goes to the address of your own account, and is not stored. Whoever can open your mailbox can then open your calendar, which is why the email advises you to write the key down and delete the message.
• Page views and downloads: which page or file, when, and your IP address. The IP address is erased after 30 days; the page and the time stay as an anonymous count.
• Feedback: the category and the message you send, and your account if you were logged in.
• Place search: when you look up a place for the clock, only the name you typed is passed on to the geocoding service of Open-Meteo. Your IP address is not passed on.
• In your browser: the website uses localStorage, not cookies, for your login and for your calendar on this device. There are no tracking cookies. The fonts, Cinzel and Lato, are loaded from Google Fonts, which is subject to Google's own privacy policy.
• No access log: the web server does not keep a log of your visits.

4. Solaris Focus and your Solaris account

• Your account: username, display name, optionally an avatar, and your password in a form that cannot be read back.
• Messages and attachments: end-to-end encrypted. I cannot read the contents.
• When Focus is active, and on what kind of device (Android or iPhone/web), so that I can see the app works and how many people are online at the same time.
• How often a section is opened (chat, reflection, notes, Grow, clock and so on), counted anonymously. I do not record who opens a section, only that it happens.
• Feedback you send, including the build number of your app and, if you attach one, a screenshot.
• Per-account settings: which sections and programmes are enabled for you. This is needed to manage your access and contains no message content.
• Your journal, notes, calendar, Grow and Play: encrypted on your device with a random key of your own, sealed with your password and with your recovery key, the same way as the calendar on the website. I never receive that key, so I cannot read this data on the server. It also means that nothing can be handed back if you lose both your password and your recovery key.
• Files in Solaris storage: encrypted on your device before they are uploaded. The storage holds only what it cannot read.
• Nowhere is the group where Solaris itself posts, and everyone is a member of it. That group is encrypted too, but its members can see each other and each other's responses.
• Grow: if you ask Daan for help, Daan is invited to a guidance chat. Only that chat is visible to Daan, not your notes and reflections. Because Grow programmes are personal development programmes, Daan does see when you start a programme or sign up for one, with your name and which programme it is.

5. Translation

When you translate a message, its text is sent encrypted to a translation server of my own. There it is decrypted to be translated, and the translation goes back encrypted. The text is not stored and not logged. That is the one moment at which the text of a Solaris message is readable on a server. The WhatsApp bridge in section 6 is the other case, and it is the only other one.

6. WhatsApp

If you link WhatsApp, a bridge on the Solaris server logs in to WhatsApp for you and carries messages between the two. To do that it holds the keys of those conversations, so these are the one kind of conversation that is readable on the server while it passes through. Its own database keeps references, times and who sent what, not the text of your messages. When you link, recent history is brought over from WhatsApp.

What you send through WhatsApp also reaches WhatsApp itself, under their terms and not mine. If you would rather not have that, do not link it: everything else in Solaris Focus works without it.

7. Notifications

A notification says only that something happened. The server sends the notification service nothing but a reference to the conversation and to the event, in the event_id_only form, so no message text and no sender name leaves that way. Your device then fetches the message itself, encrypted, and shows it.

The notification service runs on the Solaris server. Until everybody has moved over to Solaris Focus, those signals can be read by somebody who knows the name of your notification channel. They carry no message content, only the reference.

8. What I do not do

No advertisements. No selling or passing on of data to third parties. No external tracking. No profiling: the section use I count is anonymous and not linked to you.

9. How long

Your data stays while your account exists. If you delete your account, or ask me to, your account and the data belonging to it are removed. Messages inside other people's conversations may remain there, just as in an ordinary conversation.

IP addresses of page views and downloads are erased after 30 days. A registration link expires after 24 hours.

10. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to see, correct and delete the personal data I hold about you, and to object to its processing. Ask by email at [email protected] or through Solaris Focus. I handle it by hand, and you will have an answer within 30 days.

11. Security

All connections use TLS. Passwords are stored only as hashes. Messages are end-to-end encrypted, and your calendar, journal, notes and files are encrypted on your device before they leave it. The local database of Solaris Focus on your device is encrypted as well.

12. Changes to this policy

When this policy changes, the date at the top of this page changes with it.

13. Contact

Questions about this policy: [email protected]