Privacy policy
Philibert Group Board and band scheduler, by Esteef.Ai ยท Effective 25 October 2026
Philibert is an AI assistant that runs on your own computer, from a USB drive. Your chats, notes, files and AI models stay on that drive and are never sent here. This policy covers only the optional shared service at this address, which a group uses when its members want to share a message board and a schedule between their Philibert drives.
What is kept, and why
- Your group: its name, its invite code, and a random phone-alert topic.
- Members: the display name each person chooses, whether they are the group's admin, and a scrambled (hashed) copy of the key their Philibert uses to sign in. No email address or password is needed to join.
- What the group posts: posts, replies, poll choices and votes, and attached files (up to 5 MB each), shown to the group's members.
- Scheduling: each member's usual free times and blackout dates (with an optional reason they type), the band calendar's events (title, date, time, address, notes, who booked it), and - only if a member types it - their Gmail address, used to read their free/busy and to send them calendar invitations.
- Google Calendar connection (optional): if the group's admin connects a Google account, a Google sign-in key for that account, stored encrypted, and the id of the calendar Philibert created in it.
Nothing is used for advertising, sold, or shared with anyone outside the group, and there are no tracking or analytics tools.
Google user data
When a group connects a Google account, Philibert asks for only two permissions:
calendar.app.created- to create one calendar for the band in that account and to add, change and cancel the band's practices and shows on it, inviting the members who gave their Gmail address. It cannot see or change any other calendar.calendar.freebusy- to see when members are busy (for members who shared their calendar's free/busy with the band's account), so the scheduler doesn't suggest times they can't make. It never sees what an appointment is, who it is with, or where.
Busy times are read at the moment someone looks for a practice time and are used only for that answer; they are not stored. The data is used only to provide these scheduling features to the group, is not transferred to others, not used for advertising, and not read by people except where a member asks for help with a problem.
Philibert's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Phone alerts
If members choose phone alerts, the service sends a short note to the group's topic on ntfy.sh when something is posted or booked: the group's name, who posted, and the title - never the text of a post. Anyone who knows a topic can read its alerts, so it is a long random name that only the group sees.
Where it is kept
On Netlify (in the United States), encrypted in transit (HTTPS). Google Calendar events live in the Google account the group connected.
Removing it
- Disconnect Google: the group's admin presses Disconnect in the Band Manager's Schedule. The Google key is revoked and deleted at once. You can also remove access in your Google account at myaccount.google.com/permissions.
- Your Gmail address: clear it under My availability and save.
- Posts: delete your own at any time (the admin can delete any).
- A whole group or member: ask through Feedback Shooter in Philibert or on GitHub, and it will be deleted.
Changes and contact
If this policy changes, the new version will be posted here with a new date. Questions: use Feedback Shooter in Philibert or open an issue on GitHub.