Mosaic is built by That Data Person Limited. We take your privacy seriously. This policy explains what data the app collects, how it's used, and your rights.
Data storage
All planning data — tiles, schedules, completions, and preferences — is stored locally on your device. We do not operate servers that store your personal planning data.
Google Calendar access
Google Calendar integration is entirely optional. If you choose to connect your Google account, the app will:
- Read events from calendars you select, to use as planning constraints
- Write your plan back to Google Calendar (Pro feature only)
Calendar data is cached locally on your device for offline use. We do not transmit your calendar data to any third-party servers.
Protection of Google Calendar data
Mosaic treats Google Calendar data as sensitive and applies the following safeguards:
- On-device storage only — Calendar events are cached in a local database within Android's application sandbox. No calendar data is sent to or stored on any external server.
- Application sandboxing — Android's app sandbox ensures that Mosaic's database files cannot be read by any other app on the device.
- Secure credentials — Google OAuth tokens are managed by the Android Account Manager, which uses the device's hardware-backed keystore. Mosaic does not store your Google password or OAuth tokens directly.
- Minimal data access — Mosaic only reads event titles, start/end times, and recurrence information from your selected calendars. It does not access attendee lists, event descriptions, attachments, or other metadata.
- Encrypted transport — All communication with Google Calendar APIs occurs over TLS-encrypted HTTPS connections.
Google API Services compliance
Mosaic's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data retention and deletion
Mosaic retains Google Calendar data as follows:
- Cached events — Calendar events are cached locally to enable offline planning. The cache is refreshed on each sync; events from previous sync periods are overwritten.
- Calendar event IDs — When you push your plan to Google Calendar, the app stores the IDs of created events so it can update or remove them later. These IDs are deleted when you clear your plan or start a new planning period.
- No server-side retention — We do not transmit or store any Google user data on any server. All data resides solely on your device.
You can delete all Google user data held by Mosaic at any time:
- Sign out in the app — Go to Settings and disconnect your Google account. This removes all cached calendar data and calendar preferences.
- Uninstall the app or clear app data (Android Settings → Apps → Mosaic → Clear Data) — this removes all local data including cached calendar events.
- Revoke access from Google — Visit Google Account Permissions to revoke Mosaic's access. To also delete cached data on the device, clear app data or uninstall.
Plan events previously pushed to Google Calendar will remain in your calendar after disconnecting or uninstalling. You can delete them directly from Google Calendar.
To request confirmation that your Google user data has been deleted, or for assistance, contact us at hello@thatdataperson.com.
Analytics and crash reporting
We collect basic, anonymous crash reports to help us fix bugs and improve the app. This data does not include any personal information or planning content. No advertising SDKs or user tracking tools are included in the app.
Advertising
Mosaic contains no advertisements. We do not sell, share, or monetise your data in any way.
In-app purchases
Mosaic Pro subscriptions and lifetime purchases are handled entirely through Google Play Billing. We do not process or store payment information directly.
Children's privacy
Mosaic is not directed at children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact
If you have questions about this privacy policy, please contact us at hello@thatdataperson.com.
That Data Person Limited
86-90 Paul Street, London, EC2A 4NE
Company number: 13632844