Privacy

Bity Buy One Liner · Production Wall Calendar Squares · last updated 26 August 2026

The short version — how Bity Buy One Liner handles your schedule

Your one-liner is encrypted inside your browser before it is uploaded. Our hosting provider only ever holds scrambled bytes it has no key to open.
It is read on a single computer we own and keep in our own office. It is never sent to any outside AI service, and never used to train anything.
The uploaded file is deleted as soon as it has been read. The finished squares and the job record are deleted about two minutes after they reach you.
You can use the whole thing without an account. If you do sign in, the only thing we learn about you is your email address.

What happens to the schedule you upload

When you choose a PDF, your browser generates a one-time encryption key, scrambles the file with it, and locks that key so that only our machine can open it. The scrambled file is stored briefly by our hosting provider (Supabase) purely to hand it over. Because the key is locked to our machine, the hosting provider cannot read your schedule, and neither can anyone who obtains a copy of what they store.

Our computer unlocks it, reads it, builds your squares, encrypts those the same way, and hands them back to your browser, which unlocks them. Then:

The PDF you uploaded is deleted immediately once it has been read.
The finished squares and the job record are deleted about two minutes later.
Nothing about the contents — no show name, no scene, no location, no cast — is written to any log, kept in any database, or retained in any form.

The reading is done by ordinary software plus locally-installed AI models running on that same machine. Nothing is sent to OpenAI, Anthropic, Google, or any other outside service, at any point, for any reason.

Using it without an account

Choosing "Use it without an account" creates an anonymous session so the site can tell your uploads apart from someone else's. It contains no name, no email, and nothing that identifies you. We do not profile you, and we cannot contact you.

If you sign in

Signing in with Google, Apple, or an email link tells us your email address, and nothing else. We do not receive your Google or Apple password, your contacts, your calendar, your files, or anything else from those accounts. If you use Apple's Hide My Email, we only ever see the relay address Apple gives us.

We use your email address to keep your work associated with you, and to contact you about the service itself if something needs saying. We do not send marketing email and we never sell, rent, or share your address.

Signing in changes nothing about how your schedule is handled. The encryption, the on-premises reading, and the deletion timelines above are identical either way.

What we keep

A count of parses. A bare timestamp each time a schedule is successfully turned into squares — no file name, no account, no address. It exists so we know the service is being used at all.
A technical diagnostic line per parse: which internal reader handled the layout, how many days and scenes it found, and whether the arithmetic checked out. It identifies the document only as an 8-character one-way hash of the file name, which cannot be turned back into the name and exists solely so a re-upload of the same file is recognisable as the same file.
Your email address, if you signed in, for as long as your account exists.

"Help us fix this" — only if you ask

If a schedule fails to read, you are offered a button to send it to us so we can teach the software to handle that layout. This is entirely optional and off unless you tap it. If you do, the file is sealed with a six-word code shown only to you; it cannot be opened without that code, which you send separately. Sealed files are automatically destroyed after two days whether we have looked at them or not, and are used only to fix the reader.

Stored in your browser

We use your browser's local storage — not advertising cookies — for your sign-in session, whether you chose to skip signing in, and your card styling preferences. It stays on your device. There are no analytics scripts, no advertising trackers, and no third-party tracking pixels on this site.

Who else is involved

Only Supabase, which provides the sign-in system and the brief encrypted hand-off storage described above, and Cloudflare, which serves this page. If you sign in with Google or Apple, that sign-in happens with them. Nobody else receives anything.

Your choices

You can use the service without an account, sign out at any time, or ask us to delete your account and email address. Because schedules are deleted within minutes of being processed, there is normally nothing else of yours for us to hold. To ask for deletion, or to ask anything at all about this, write to bityapps2026@gmail.com.

Changes

If this policy changes in a way that affects what we collect or how long we keep it, the date at the top will change and the updated policy will appear here before the change takes effect.