Legal

Privacy Policy

Last updated: May 2026

The short version

Slow Calendar is intentional, focussed planning for the year. Your data — your people, moments, journal entries, intentions and events — belongs entirely to you. We don't sell it, share it, or use it for advertising. We store it securely so you can access it. That's it.

What we collect

Account data

Your email address and password (hashed — we never see it). Optionally, your full name if you add it to your profile.

Your personal data

Everything you add to Slow Calendar: people in your circles, moments you log, journal entries, intentions, events, and notes. This data is private by default and only accessible to you.

Usage data

We do not use analytics trackers, advertising pixels, or third-party tracking of any kind. We have no idea how often you open the app.

Email addresses of your contacts

If you send event invites, you may optionally save email addresses for your contacts. These are stored in your account and only used to send invites you explicitly trigger.

How we store it

All data is stored on Supabase — a secure, open-source database platform hosted on AWS. Every table has Row Level Security (RLS) enabled, meaning your data is cryptographically isolated from other users at the database level. Even we cannot query your personal data without your credentials.

Data is encrypted at rest and in transit (TLS). Backups are retained for 7 days by Supabase's default policy.

Third-party services

Supabase

Database, authentication, and file storage.

https://supabase.com/privacy

Resend

Sending event invite emails on your behalf. We pass them your event title, date, and the email addresses you provide. They do not receive your journal or people data.

https://resend.com/privacy

Vercel

Hosting the web application. Standard server logs (IP address, user agent, request path) are retained briefly for debugging.

https://vercel.com/legal/privacy-policy

Your rights

Access

Export all your data as a JSON file from Settings → Export my data.

Deletion

Delete your account and all associated data permanently from Settings → Delete account. This is immediate and irreversible.

Correction

Edit any data you've entered directly within the app at any time.

Portability

Your exported JSON file is human-readable and can be imported into any system that accepts JSON.

Legal basis (GDPR)

If you are in the European Economic Area (EEA) or UK, we process your personal data on the following legal bases:

Contract

Processing your account data and content is necessary to provide the service you signed up for.

Legitimate interests

Sending you a welcome email and occasional product updates about features you use.

Legal obligation

Retaining certain data where required by law.

Cookies

Slow Calendar uses one essential cookie: a secure, HTTP-only session cookie set by Supabase to keep you signed in. We do not use advertising, analytics, or tracking cookies.

You can clear this cookie by signing out. Blocking it will prevent you from staying signed in but will not affect your data.

Poll responses

When you share a poll link with event attendees, their availability responses (yes/maybe/no per date, and their name) are stored against the poll record. This data is visible only to you as the event organiser. Respondents do not need a Slow Calendar account.

Children

Slow Calendar is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

If we make material changes, we'll update the date at the top of this page. For a personal tool like this, we don't anticipate significant changes.

Contact

Questions? Email us at hello@slowcalendar.com

"Your time is your life. We just help you see it clearly."

© Slow Calendar · slowcalendar.com