Privacy Policy

Last updated: October 2026

BigReminder is developed by Bullcode Servicos em Tecnologia LTDA. This Privacy Policy explains what data we collect, how we use it, and how we protect your privacy. We are committed to being transparent about our data practices.

BigReminder does not create user accounts. You do not sign up with an email or user ID to use the Mac app or the Windows app. Purchases are handled by Apple or Gumroad, and app settings stay on your computer.

This policy covers the BigReminder Mac app, the BigReminder Windows app (including the Microsoft Store version), and this website. Where the apps differ, we say so.

Information We Collect

Purchase Information

  • App Store purchases — StoreKit on your Mac reads your Apple purchase and subscription status so we can unlock Pro. Apple processes payment
  • Gumroad licenses — If you buy a lifetime license on Gumroad, the license key is stored in your Mac's Keychain and checked with Gumroad to activate Pro
  • Gumroad licenses on Windows — The license key is stored in Windows Credential Manager on your PC (in an entry named BigReminder:license) and checked with Gumroad to activate Pro
  • Only the license key, the product it belongs to, and a flag saying whether this is a new activation are sent to Gumroad. To keep a license on one computer, the app also stores an identifier of the computer next to the license on the device: the Mac's hardware UUID, or your PC's Windows machine ID (MachineGuid). This identifier is not sent to Gumroad or to us
  • To enforce the free plan's one reminder per day, the app keeps a daily reminder count on your computer: in the Keychain on Mac, and in Windows Credential Manager (BigReminder:dailyReminderCount) on Windows
  • We do not store card numbers or Apple ID credentials

App Analytics

  • PostHog — The Mac and Windows apps send pseudonymous product events (for example reminders shown, paywall viewed, and, on Mac, plan selected and purchase completed) tied to a random distinct ID, plus whether you have Pro and whether it is lifetime (is_premium, is_lifetime). We do not attach your name or email
  • App Store purchase and renewal events also include the transaction ID, product, purchase date, price, and currency
  • On Mac, the PostHog SDK also sends app lifecycle events (installed, updated, opened, backgrounded) with your device model, OS version, locale, and timezone. PostHog receives your IP address when the app connects
  • On Mac, feature flags (for example Google Calendar and Microsoft Calendar) are also delivered through PostHog
  • On Windows, the app sends the same kind of pseudonymous events (reminder shown, dismissed, or snoozed, meeting joined, app opened, paywall viewed, daily limit reached, Google or Microsoft account connected, license activated) under a random ID kept in the app's local storage on your PC. Each event is marked as coming from Windows and includes the app version and whether it is the Microsoft Store or direct-download version
  • On Windows, the PostHog library also sends standard device details: the app's browser engine and its version (including the user-agent string), Windows version, device type, screen and window size, language, time zone, the app's internal page address (not a website you visit), and a random session ID. PostHog receives your IP address when the app connects
  • On Windows, there is no automatic click tracking, page views, session recording, surveys, or feature flags. Only the app's own events described above are sent

Website Analytics and Ad Measurement

  • Website analytics — Anonymous page and CTA usage data (Vercel Analytics) and page performance data (Vercel Speed Insights) help us improve the website
  • Ad attribution — If you arrive from an ad, we may store campaign parameters for your browser session and use Meta Pixel or Meta Conversions API to measure whether ads lead to downloads or purchases
  • Conversions API events sent from our server include your IP address, browser user agent, and a hashed random ID kept in your browser's localStorage
  • After a Gumroad purchase, we send Meta the sale with a hashed (SHA-256) copy of the email you used at checkout, only if you consented or are outside a region that requires consent
  • For visitors in the EEA, the UK, or Switzerland, Meta marketing cookies and ad click identifiers are used only after consent
  • We set a br_consent_region cookie for 30 days. It records only whether your country requires consent, based on your IP country

Diagnostic Information

  • Crash and error reports — Sentry receives diagnostic data from the Mac app, the Windows app, and the website's server so we can fix crashes and errors (for example app hangs and failed StoreKit requests on Mac, or failed license checks on Windows)
  • On Windows, crash and error reports come from the app's windows and from its native process. Before they leave your PC, they are scrubbed of email addresses, calendar IDs, sign-in tokens, license keys, and your Windows account name

Update Checks

  • The Mac app downloaded from this website checks for updates with Sparkle, from Cloudflare R2
  • The Windows app downloaded from this website checks for updates shortly after it starts, then once a day, and when you choose Check for Updates in the tray menu, by downloading an update file from Cloudflare R2. Nothing is downloaded or installed until you click Install
  • Cloudflare receives your IP address when the app checks for or downloads an update
  • The Mac App Store version is updated by Apple, and the Microsoft Store version by Microsoft, through their stores

Information We Do NOT Collect

  • Calendar data — stays on your device, including Google and Microsoft calendar data, except when you open a meeting link or a location (which opens your browser or maps app: Apple Maps on Mac, Bing Maps on Windows)
  • Location data
  • Contacts or personal files
  • Browsing or search history
  • A BigReminder login, email, or user ID — there is no app account

Google Calendar Data

If you connect a Google account, BigReminder requests read-only access to your calendar list and calendar events. This access is used only to show your upcoming events and display full-screen reminders before they start. The Mac app and the Windows app request the same two read-only permissions.

  • Calendar data is fetched directly from Google to your computer and is never sent to our servers or any third party, except when you open a meeting link or location yourself
  • On Windows, you sign in to Google in your own web browser. The app receives the sign-in result on your PC through a temporary local address (127.0.0.1) protected with PKCE, and never sees your Google password
  • Google sign-in tokens are stored only in your Mac's Keychain or, on Windows, in Windows Credential Manager
  • BigReminder cannot create, change, or delete your Google calendar events
  • Google user data is not used for advertising and is not read by humans
  • Disconnecting an account in Settings deletes its tokens from your computer and asks Google to revoke access. You can also revoke access at any time at myaccount.google.com/permissions

BigReminder's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft Calendar Data (Outlook.com and Microsoft 365)

If you connect a Microsoft account, BigReminder asks Microsoft for read-only access to your calendars (Calendars.Read), your basic profile (User.Read, only to show which account is connected), and permission to stay signed in (offline_access). This access is used only to show your upcoming events and display full-screen reminders before they start. Both apps request these permissions. The Windows app also requests the standard sign-in permissions (openid,profile, email), which let it read the name and email address of the account you sign in with, only to show which account is connected.

  • Calendar data is fetched directly from Microsoft Graph to your computer and is never sent to our servers or any third party, except when you open a meeting link or location yourself
  • You sign in on Microsoft's own sign-in page, protected with PKCE. The app never sees your Microsoft password. On Windows, the sign-in page opens in your own web browser and the app receives the result on your PC through a temporary local address (localhost)
  • Microsoft sign-in tokens are stored only in your Mac's Keychain or, on Windows, in Windows Credential Manager
  • BigReminder cannot create, change, or delete your Microsoft calendar events
  • Disconnecting an account in Settings deletes its tokens from your computer. Microsoft doesn't let the app revoke its own access, so to remove it completely, go to account.live.com/consent/Manage for a personal account, or myapps.microsoft.com for a work or school account

How We Use Your Information

Data is used only to run the app, complete a purchase, and keep the product reliable:

  • Purchase status — To unlock Pro features from an App Store purchase or a Gumroad license
  • Product analytics — To understand which features are used
  • Crash data — To identify bugs and improve app stability
  • Ad measurement — On the website, to see whether our ads lead to downloads and purchases

What We Do NOT Do

  • No third-party advertising inside the Mac or Windows app
  • No selling or sharing data with data brokers
  • No Meta SDK or cross-app ad tracking inside the Mac or Windows app
  • No marketing emails (there is no app account to email)
  • No profiling or automated decision-making

When You Email Us

  • Send Feedback — Opens your email app with a message that includes the app version and build, your OS version, and your plan (Free or Pro). You can edit it before sending
  • Move to a new Mac / Move to a new PC — If you activated a Gumroad license, opens an email that includes your license key so we can move your license
  • We receive your email address and anything you write, and use them only to reply

Service Providers

  • Apple — App Store purchases and distribution of the Mac app
  • Gumroad — Lifetime license sales and license checks
  • Microsoft — Distributes the Windows app through the Microsoft Store (Microsoft Store version only), and Microsoft sign-in and calendar access, if you connect a Microsoft account
  • Google — Google sign-in and calendar access, if you connect an account
  • PostHog — App analytics (Mac and Windows apps) and feature flags (Mac app)
  • Sentry — Crash and error reports (Mac app, Windows app, and website server)
  • Vercel — Website hosting, Vercel Analytics, and Speed Insights
  • Cloudflare — Hosts downloads and update checks for the Mac and Windows apps downloaded from this website (served from Cloudflare R2)
  • Meta — Website ad measurement (Meta Pixel and Conversions API)

Service providers may process data outside your country, for example in the United States.

Data Storage & Security

Data Storage

  • App settings and reminder preferences stay in local storage on your Mac
  • Google and Microsoft calendar tokens, Gumroad license keys, and the daily free-reminder count are stored in your Mac's Keychain
  • On Windows, app settings, reminder preferences, and the list of connected Google and Microsoft accounts are kept in the app's local storage in its data folder on your PC (%LOCALAPPDATA%\app.bigreminder.windows). The Microsoft Store version keeps them in its own private package folder instead
  • On Windows, Google sign-in tokens are stored in Windows Credential Manager, in entries named BigReminder:google/<your email>, and Microsoft sign-in tokens in entries named BigReminder:microsoft/<account ID>
  • On Windows, the Gumroad license and the daily free-reminder count are stored in Windows Credential Manager, in entries named BigReminder:license and BigReminder:dailyReminderCount
  • Crash and error reports are processed by Sentry, and app analytics events by PostHog
  • Website analytics and ad measurement data may be processed by Vercel, Meta, and Gumroad
  • Calendar event data stays on your device, except when you open a meeting link or a location (which opens your browser or maps app: Apple Maps on Mac, Bing Maps on Windows)

Security Measures

  • Encrypted data transmission (HTTPS/TLS)
  • Keychain storage for tokens and license keys on Mac, and Windows Credential Manager on Windows

Data Retention

  • Local app data stays on your computer until you remove it
  • On Mac, deleting the app does not remove its settings folder (~/Library/Containers/app.bigreminder) or the Keychain items BigReminder stored (Google and Microsoft tokens, the license key, and the daily free-reminder count). You can delete the folder in Finder and the Keychain items in Keychain Access by searching for app.bigreminder
  • On Windows, uninstalling the Microsoft Store version removes its settings folder. If the settings folder of the installer version is still there after you uninstall, you can delete it. In both versions, Windows Credential Manager entries can remain after uninstalling
  • PostHog, Sentry, Vercel, Cloudflare, and Meta keep data according to their retention settings. We keep only what we need to run and improve BigReminder
  • Apple and Gumroad keep their own purchase records according to their policies

Your Rights

You can:

  • Disconnect Google or Microsoft — Remove a connected account in Settings, or revoke access at Google or Microsoft
  • Delete local data on Mac — Quit and delete the app, delete the ~/Library/Containers/app.bigreminder folder, then delete the app.bigreminder items in Keychain Access
  • Delete local data on Windows — First remove each Google and Microsoft account in Settings → Sources, which deletes its token (and, for Google, revokes access). Then uninstall the app. Finally, open Credential Manager → Windows Credentials and remove any entries whose names start with BigReminder:
  • Ask us — Email us to access, correct, delete, or get a copy of data we hold in PostHog, Sentry, and website analytics or ad measurement
  • Complain — You can complain to your data protection authority, such as the ANPD in Brazil or your local authority in the EU or UK

How to Contact Us

Contact us at contato@bullcode.com.br. We will respond within 30 days.

Changes to This Policy

We may update this policy from time to time. The current version is always posted on this page with the last-updated date.

Children's Privacy

BigReminder is not intended for children under 13. We do not knowingly collect data from children.

Contact Us

For privacy questions or data requests:

Bullcode Servicos em Tecnologia LTDA

CNPJ: 27.435.275/0001-04

Email: contato@bullcode.com.br