Security & calendar access

Couply syncs your connected calendars with read access so we can show your day. We never edit or delete events you didn't ask Couply to create. Optional shared-plan sync-out can create (and later remove) plans you explicitly add in Couply onto a Google or Outlook calendar you pick.

The one exception is Google Tasks. If you connect Google, Couply asks for read/write access to your tasks so that ticking a task off inside Couply also marks it complete in Google. We only mark tasks complete at your request — we don't create or delete your tasks. Your calendar events stay strictly read-only.

• You pick which calendars to connect — not all of them by default.
• You control which parts of your day are shared with your partner.
• Events marked private in your calendar appear to your partner only as “Busy”, with no title or details.

Couply connects to Google Calendar and Microsoft / Outlook via their official, read-only sign-in, and to iCloud and other calendars via CalDAV. We follow each provider's API rules and request the minimum scopes needed.

• All traffic is encrypted in transit over HTTPS.
• Provider access tokens are encrypted at rest.
• Access to data is restricted to what's needed to run the service.

You can disconnect a calendar from within Couply at any time. You can also revoke Couply's access directly from your provider:

• Google: Google Account → Security → Your connections to third-party apps
• Microsoft: Microsoft Account → Privacy → Apps and services

Unpairing stops sharing your snapshot with your partner immediately. Deleting your account removes your personal data and revokes stored tokens — see the Privacy Policy for details and timelines.

Found a security issue? We'd genuinely like to hear from you. Email hello@couply.co.uk with details and we'll respond as quickly as we can. Please give us reasonable time to fix issues before disclosing them publicly.