Private by design,
clear by default.

What leaves your iPhone

For reminder lists you enable, the title, due date and time, completion marker, chosen Outlook category or Google event label, and your event settings are sent directly to the active provider.

Reminder notes, links and priority are sent only if you explicitly enable those optional settings globally or for a specific list.

Every managed event includes an opaque hashed source key in provider-private metadata so JoinVia can reconcile it without exposing the Apple Reminder identifier. If Complete from calendar is enabled, incomplete events also receive the visible opaque completion URL described below in the provider event's Location field.

If you tap Create Label for Google Calendar, that Apple Reminder list’s name and a generated colour are sent to Google for the label.

Google or Microsoft stores those event copies in your connected account until you or JoinVia remove them. JoinVia never reads or sends a reminder's physical location and never sends undated reminders. When calendar completion is enabled, JoinVia reserves its managed event Location field for the completion URL.

What stays on your iPhone

Google and Microsoft access credentials are stored in Apple’s device-only Keychain. Settings, reminder and event identifiers, and hashed sync fingerprints are stored locally with iOS file protection.

JoinVia does not store readable reminder titles or dates in its mapping file.

Sync Activity stores at most 90 days or 500 timestamps, providers, triggers, result counts and safe error summaries on the device. The free view shows the 20 most recent runs. It contains no reminder titles or account details.

If an app-created Google calendar might still exist and its absence cannot be safely proven, one opaque calendar reference remains in the device-only Keychain solely to prevent JoinVia from silently creating a duplicate.

Permissions

Reminders: Apple labels the permission as full access because iOS offers no read-only permission. JoinVia reads reminders for sync. If calendar completion is enabled, it marks only the reminder whose action you tap. You can choose Complete immediately or Review first.

Calendars.ReadWrite: Microsoft requires this to create and maintain the separate JoinVia calendar. JoinVia never writes to your default calendar.

MailboxSettings.Read: Used only to read Outlook category names and colours. JoinVia cannot read or send email with this permission.

Google Calendar: Google access is limited to the app-created JoinVia calendar. Reconciliation reads events inside that calendar and leaves events without JoinVia’s private source key untouched. JoinVia cannot inspect your other Google calendars, email or profile.

Completion-link handoff

When enabled, an incomplete event contains an HTTPS link with an opaque, revision-bound reminder token after the URL's # character. The token contains no readable reminder title, notes or date, and an older token stops matching after the reminder changes.

A verified Universal Link normally opens JoinVia directly. If iOS or the calendar app uses the website fallback, the /complete page reads the fragment only in your browser, removes it from the address bar and asks iOS to open JoinVia. URL fragments are not sent with the web request. The page uses no JoinVia analytics or browser storage and cannot complete a reminder itself.

JoinVia validates the callback and finds the reminder locally. Complete immediately performs the selected action after that validation. Review first shows the reminder and requires a confirmation button. Older links and website fallback links always use Review first.

Website and security cookies

joinvia.online is delivered through Cloudflare. Cloudflare may process IP addresses, request headers, browser or device details and security signals to serve and protect the website.

Cloudflare may set strictly necessary security cookies for abuse prevention and reliable delivery. JoinVia does not add advertising, analytics or tracking cookies.

Your controls

You can turn completion links off at any time. Existing calendar events are cleaned up during the next successful sync.

Disconnecting a provider removes its sign-in token but keeps mappings and calendar copies for a safe reconnect.

Erase JoinVia Data can keep remote copies or remove mapped events first. Remote removal requires an internet connection and connected provider accounts. The narrow Google duplicate-prevention reference described above may remain when the old calendar’s absence cannot be safely proven.

Offline behavior

When the internet is unavailable, JoinVia makes no remote calendar changes and builds no retry queue. After a failed attempt, it rechecks when the app becomes active or the connection returns, then waits for the next normal sync opportunity.

If you use a completion action while offline, that Apple reminder is completed locally and JoinVia stays open to show that the calendar will catch up on a later successful sync.

Purchases and entitlement

Syncing to one chosen calendar destination remains free. The optional annual or lifetime JoinVia Pro purchase unlocks Google Calendar and Outlook together, calendar destination by Reminder list, premium appearance, 90-day activity with filters and Family Sharing for up to six family members.

Apple processes Pro purchases and optional tips; JoinVia does not receive or store payment details. JoinVia checks Apple-verified entitlement status on the device only to decide whether Pro features are available. Subscription renewal and cancellation, Family Sharing and refunds are managed through Apple. Tips do not unlock features.

Contact

Questions about this policy can be sent to support@joinvia.online.

Effective 30 August 2026