Privacy
Semsync is a student project. This page explains, in plain words, what it stores and why.
What Semsync stores
- Your Google account ID, name and email address, from "Continue with Google".
- A Google access token that lets Semsync manage only the calendar it made in your account, encrypted.
- If you use a subscribe link (for Outlook or Apple Calendar): the link's secret, encrypted, and a copy of your calendar for it. Anyone with the link can see that calendar, so replace it in Settings if it gets out.
- Your Canvas calendar feed link, encrypted.
- Your NUSMods share link, if you add one.
- A list of the events it has added for you (title, type and start time), so each sync only sends changes.
What Semsync does with calendar access
Google's permission is called "Make secondary Google calendars, and see, create, change and delete events on them". Semsync uses it to make one calendar in your account, "NUS semester", and to add your deadlines, classes and exams to it and keep them up to date. That permission doesn't let it see, change or delete any other calendar or event.
A few early users have a shared calendar instead, which Semsync keeps in its own Google account and shares with them. It works without any access to their account, until they move to their own calendar.
What Semsync can't see
Your Gmail, Drive or Canvas password. It reads only the calendar feed Canvas gives you, and public course data from NUSMods.
Where data lives
Semsync runs on Vercel and stores data in a Supabase database, both in Singapore. Google user data is used only to provide this feature. Nothing is sold, used for ads, or shared with anyone else.
Deleting your data
Use "Delete my data" in Settings. It removes every event Semsync added, revokes its Google access, and deletes every record about you straight away. You can also remove Semsync's access any time at myaccount.google.com/permissions.
Questions
Ask anything about your data by opening an issue on Semsync's GitHub page. Never put your Canvas link in it. For anything private, such as a security problem, use the private report form in the security policy.