Privacy notice

This notice applies to Calmer (https://mycalmer.life). What we store, why, where, and the rights you have (GDPR / UK GDPR and equivalent laws). Contact: hello@mycalmer.life.

What we store

Account data: name, email address, language, your confirmation that you are 16 or over, the terms version you accepted, and an encrypted form of your passcode.

Content you create: calendar tasks, to-dos, notes, whiteboards, extra pages, images, files and links.

Sharing: who each page is shared with, the permission granted, and any pending invitations or share codes.

Usage: a counter for storage used, so we can apply testing-phase limits.

Minimal technical data: devices you mark as trusted and activity dates used to keep your session secure. If you contact support, we keep that message so we can reply.

Waitlist: if you leave your email on the cover page, we keep that email, your language and the date, only to tell you when access opens. You can ask us to delete it at any time.

We do not use advertising tracking cookies. We use local storage (localStorage and IndexedDB) to save your preferences, a working copy of your content for offline use and fast syncing, and a technical session cookie to keep your access secure.

Why we use it

To provide the service to you (legal basis: performance of our contract with you), and to keep accounts secure and apply usage limits (legitimate interest).

We never sell your data, never use it for advertising, and never train AI models on your content.

Where it lives and who processes it

In a managed database with row-level security: each person can only read and write their own rows, plus rows for pages someone has shared with them.

Images and files you upload are kept in the same cloud's file storage, reachable only from your account and the pages you share.

Data controller: Gino Yunnissi, trading as Calmer, with contact address 3F1 Third Floor, 3 Hill Street, Edinburgh EH2 3JP, United Kingdom, and email hello@mycalmer.life. We manage your data in accordance with the GDPR and the UK GDPR.

Sub-processors

Lovable Cloud (Lovable.dev / Lovable Technologies Ltd) for hosting, database and authentication; Google (Google LLC) for optional sign-in; Resend (Resend Labs Inc) for sending email notifications.

Google: if you choose to sign in with Google, that service confirms who you are and sends us only your name, your email and an account identifier. We never see your Google password, we don't receive your contacts, photos or any other data, and nothing is posted on your behalf. Google handles your sign-in under its own privacy policy. Using Google is optional: email and the 4-digit passcode work just the same, and you can stop using Google at any time from your Google account settings.

All of these processors act under contract and only on our instructions, and their API terms prohibit using your data to train their public models. You can ask us for an up-to-date list of sub-processors at hello@mycalmer.life or https://mycalmer.life.

International transfers

Some of these providers may process data outside the UK or the European Economic Area. Where that happens, the transfer relies on standard contractual clauses or a recognised adequacy framework.

Shared pages

When you share a page, the people you invite can see its content and your name. With edit permission they can also change or delete what is there.

If you generate a share code, anyone who receives that code can join the page: only pass it to people you trust, and remove access when it is no longer needed.

Your personal pages are never shared unless you choose to share them.

Your content and AI

Although the software development of Calmer has involved the use of AI for coding and design, the experience we aim to create is intentionally crafted to help users enjoy a more organic, slower-paced relationship with their work, life, and projects.

Calmer purposefully excludes features such as AI chats, agents or automated replies from its front user experience. Everything users organise and the content they add remains under their control and ownership. Full account and data erasure is available at any time.

Users’ data is never sent to an AI service or used to train AI models.

Images, files and links

By uploading an image or saving a link you confirm you have the right to use it and that it doesn't infringe copyright or someone else's privacy.

Link previews (title, description and thumbnail) are fetched from the linked site by our server; we don't control that external content or its policies.

Search inside the site

Search runs over your own content and pages shared with you. Nothing is sent to an external search engine.

On-device storage

We keep preferences and a local copy of your content in browser storage so the site is fast and works offline, syncing when you are back online. These are not advertising cookies.

If you install Calmer on a phone or tablet, that local copy lives on the device and disappears when you sign out or clear browser data.

Email sign-in codes are single-use and expire; never share them with anyone.

Security

We use encryption in transit, encrypted storage of passwords and passcodes, and row-level access rules. No system is perfect: we cannot guarantee absolute security.

If a breach happens that poses a high risk to you, we will tell you and notify the relevant authority within the legal deadlines.

How long

For as long as your account exists. Items you send to the bin are permanently removed about 24 hours later.

If you delete your account from the account panel, or ask us to, we delete your account and its content, except anything the law requires us to keep. Residual backups are overwritten within a reasonable period.

Your rights

Access, correct, export, restrict and delete your data, and object to processing. Write to us from “Support”, at hello@mycalmer.life, or at https://mycalmer.life, and we reply within 30 days at the latest.

You can also complain to the data protection authority in your country or the Information Commissioner’s Office (ICO) in the UK (ico.org.uk).

Data you should not enter

Calmer is not designed for special category data (health, ethnicity, beliefs, sex life, biometric or genetic data), nor for medical, financial or legal records.

Please don't treat the site as a clinical history, financial file or legal archive. Anything of that kind you choose to add is at your own risk and can be deleted at any time.

If you store other people's details inside your content, that choice is yours and you should have their consent.

Children

Calmer is not intended for anyone under 16, and you confirm your age when signing up. If we find an account belonging to someone younger, we will delete it.

Changes to this notice

If we change something meaningful we will update the version and show it to you on the site next time you sign in.