This is a first draft for review, not a finished legal document -- written in plain language on purpose, consistent with our consent-first approach rather than a placeholder for "real" legal language later.

From organizers: a name, and if you connect a calendar, read-only access to your free/busy times -- never event titles or details. From people responding to an invite: just the name you type in. No account, no email, no download, unless you explicitly opt in to email reminders.

No location data, no device tracking, no advertising identifiers. No calendar data from anyone except an organizer who explicitly connects one -- and even then, only whether a time is free or busy, never what the event actually is.

Solely to run the event you're part of: showing your response to the organizer, showing everyone's tallied availability, and letting the organizer see who's responded. Nothing is sold, and nothing is used for advertising -- Tea Time doesn't have ads.

Only your name and the dates you picked are visible to the organizer and other responders on that specific event. The organizer never sees who's seen an invite and not responded -- only who has responded. This is intentional.

Event data is kept as long as the event exists in our database. [Decide: do we auto-delete events after some period, e.g. 6 months past the last proposed date? Still an open decision, not yet resolved.]

We use [hosting provider], [database provider], and [email provider] to run the service. None of them use your data for their own purposes beyond providing that infrastructure to us.

[Your name/email] -- reach out with any question about your data.