Privacy Policy
Last updated November 10, 2026
Finally is a to-do list and calendar for college students, on the web at finallyapp.us and as an iPhone app. This policy explains what Finally keeps about you, why, and what you can do about it. The short version: Finally keeps only what it needs to show you your own to-dos and calendar, never sells your information, and never shows ads.
What Finally keeps
- Your account: your email address and a scrambled (hashed) version of your password. Finally never stores your actual password.
- Your profile answers: your name, gender, whether you're a college student, and if so your school and graduation year.
- What you add: your sections, classes, organizations, to-dos and events, with their dates, times, locations and notes, and your settings (such as your time zone and the first day of your week).
- Sign-in sessions: a random sign-in code kept in your browser or iPhone so you stay signed in. Finally stores only a scrambled version of it.
- Anything you import: to-dos and events from a calendar link or file, from Canvas, or from Google Calendar or Google Classroom (see below).
How it's used
Only to run Finally for you: to sign you in, show you your to-dos and calendar on your devices, send the emails you ask for (sign-in codes and password reset links), and keep imported assignments and events up to date. Finally doesn't sell or rent your information, doesn't use it for advertising, and doesn't share it with anyone except the services that run Finally, listed below.
Google Calendar
If you choose Link Google Calendar, you sign in on Google's own page, so Finally never sees your Google password. You allow Finally to read, and only read:
- your Google email address, to show which account is linked;
- the list of your Google calendars (their names and colors);
- the events on those calendars (titles, dates and times, time zones, locations and descriptions), from the past month to a year ahead.
Finally uses this only to show the events from the calendars you choose in your Finally calendar and lists, and to keep them up to date (when you open Finally, when you press Sync now, and about once an hour). Events you've declined aren't brought in. Finally never adds, changes or deletes anything in your Google Calendar.
Like Google Classroom below, Finally keeps an encrypted connection key from Google only to check for updates. When you choose Unlink, Finally deletes that key, asks Google to end the connection, and deletes every event that came from Google Calendar. You can also remove Finally's access any time at myaccount.google.com/permissions.
Google Classroom
If you choose Link Google Classroom, you sign in on Google's own page, so Finally never sees your Google password. You allow Finally to read, and only read:
- your Google email address, to show which account is linked;
- the list of Google Classroom classes you're enrolled in (their names and sections);
- the assignments in those classes (titles, descriptions, due dates and times, and links back to Classroom), and whether you've turned each one in.
Finally uses this only to add your Classroom assignments to your Finally to-do list and calendar, check off the ones you've turned in, and check for new or changed assignments (when you press Sync now, and once a day). It never changes, submits or deletes anything in Google Classroom, and it can't see other students' work or grades.
Google gives Finally a connection key so it can check for updates. It's stored encrypted and is used for nothing else. When you choose Unlink, Finally deletes that key, asks Google to end the connection, and deletes every assignment that came from Classroom. You can also remove Finally's access any time at myaccount.google.com/permissions.
Finally's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Google data is never used for advertising, never sold, never used to train AI models, and never read by people except when you ask for help with your account or the law requires it.
Canvas and calendar imports
When you link Canvas or import a calendar, Finally reads the calendar link or file you give it once (and again when you choose Link again) and adds its events and to-dos to your account. It keeps a reference to each item's original so linking again doesn't add duplicates, and so Unlink Canvas can remove exactly what came from Canvas. Finally doesn't keep your calendar link.
Services that run Finally
- Cloudflare hosts the website and stores your account data, and gives Finally basic, privacy-friendly visit statistics.
- Resend sends Finally's emails (sign-in codes and password reset links).
- Google, only if you link Google Calendar or Google Classroom.
Keeping it safe
Everything travels over encrypted connections (HTTPS). Passwords and sign-in codes are stored only in scrambled form, and Google connection keys are encrypted.
Your choices
- Change your profile answers and settings any time in Settings.
- Unlink Canvas, Google Calendar or Google Classroom any time in Settings → Import; what came from them is deleted.
- To delete your whole account and everything in it, email account@finallyapp.us from your account's email address. It's deleted within 30 days.
Children
Finally is made for college students and isn't meant for children under 13.
Changes
If this policy changes, the new version will be posted here with a new date. Big changes will also be pointed out in the app.
Contact
Questions or requests: account@finallyapp.us.