Privacy Policy

Last updated: 27 September 2026

Rabium ("we", "us") is a birthday reminder service. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it.

1. Who we are

Rabium is operated by MADEPADIO. If you have any questions about this policy, contact us at madepadio99@gmail.com.

2. What we collect

We collect the following information:

  • Identity data: your first name, last name, and any other names you provide.
  • Contact data: your email address.
  • Profile data: your username and your date of birth.
  • Account data: your hashed password (if you set one) and, if you sign in with Google, your Google account identifier.
  • Connection data: the list of friends you have connected with through Rabium.
  • Invitation data: when someone joins Rabium using your share link, we record that the invitation came from you.
  • Preferences: whether you chose to receive product updates.
  • Google Calendar data (optional): if you choose to connect your Google Calendar, we store a refresh token that lets us create, update, and delete birthday events on your calendar. We do not read your other calendar events.

3. Google user data

Rabium uses Google Sign-In and the Google Calendar API. When you sign in with Google, we receive your email address, name, and Google account ID. When you choose to connect Google Calendar, we receive an OAuth refresh token that lets us write to your calendar on your behalf.

We use Google user data only to:

  • Authenticate you and identify your account.
  • Create, update, and delete birthday events on your Google Calendar when you connect your friends through Rabium.

We do not sell Google user data. We do not use it for advertising. We do not share it with any third party. We do not allow humans to read it except when necessary for security purposes, to comply with applicable law, or with your explicit consent.

Rabium's use of Google user data complies with the Google API Services User Data Policy , including the Limited Use requirements. You can revoke Rabium's access to your Google account at any time from your Google account permissions page at myaccount.google.com/permissions .

4. How we collect it

  • You give it to us directly when you register, complete onboarding, or update your settings.
  • Your friends give us your birthday when they submit it through your share link.
  • Google gives us your email address, name, and Google ID when you sign in with Google.
  • Google gives us a refresh token when you choose to connect your calendar.

5. Why we use it

  • To let you create an account and sign in.
  • To let your friends add their birthdays to your account, and to add yours to theirs.
  • To create birthday reminders on your Google Calendar when you connect it.
  • To let you manage your connections and settings.
  • To send occasional product updates, if you opted in.

6. Legal basis

We process your data on the following legal bases:

  • Performance of a contract: the data needed to run your account and deliver the service.
  • Consent: marketing communications and Google Calendar access. You can withdraw consent at any time.
  • Legitimate interest: protecting the service from abuse and improving the product.

7. Cookies

We use two cookies:

  • Session cookie: keeps you logged in. It is essential to the service.
  • External cookie (temporary): used briefly while completing the Google sign-in or Google Calendar connect flow. It is deleted immediately after use.

8. Third parties

  • Google: for sign-in and calendar integration. Data is transferred to Google under their privacy policy.
  • Railway: our application and database are hosted on Railway's infrastructure.

We do not sell your data. We do not share it with advertisers.

9. Retention

We keep your data for as long as your account exists. When you delete your account, we delete your profile, your friendships, and your calendar events that we created. If a calendar event could not be deleted at the moment you deleted your account (for example, if Google was temporarily unreachable), that event may remain on affected calendars and can be removed manually.

10. Your rights

Under NDPR and GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data. You can do this from your Account Settings page.
  • Delete your account and your data. You can do this from your Account Settings page.
  • Object to or restrict processing.
  • Withdraw consent (for marketing or calendar access) at any time.
  • Lodge a complaint with your data protection authority.

To exercise any of these rights, contact us at madepadio99@gmail.com.

11. Children

Rabium is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will remove the account.

12. Changes

We may update this policy from time to time. If the changes are significant, we will notify you by email or through the app.

This policy applies to Rabium, accessible at rabium.com.