Privacy Updated July 20, 2026
Your day is not marketing inventory.
The short version
Useful Acts stores the account and practice data needed to provide the product. We do not sell personal information, run session replay, capture keystrokes, or place reflections, useful acts, or calendar content into analytics, advertising, or AI systems.
Identity
Clerk provides Google and email sign-in, session security, and account identity. Clerk processes the identity details needed for those services, such as email address, name, authentication method, device and request information. Google sign-in for identity is separate from Google Calendar authorization.
The daily practice
Supabase stores your timezone, authored-day changes, day types, today’s useful acts, optional reflections, notification choices, trial and membership state, and connection metadata. Useful acts are intentionally ephemeral: earlier daily acts are cleared instead of becoming a completion history. Optional reflections and their authored closing lines remain until you delete them or the account.
Google Calendar
Calendar connection is optional and read-only. Useful Acts stores encrypted OAuth credentials and the identifiers of calendars you select. Event details are requested from Google only for the visible calendar window. We do not store event titles, descriptions, locations, attendees, or event copies in the Useful Acts database. Disconnecting removes the stored credentials and calendar preferences.
Billing and essential email
Stripe processes payment methods, invoices, subscription status, cancellation, and tax or billing information. Useful Acts stores Stripe customer and subscription identifiers, not full payment-card details. Resend may deliver essential account, billing, security, and service messages. Daily-use pressure and unchecked-act emails are not part of the product.
Browser notifications
If you opt in, Useful Acts stores the browser push endpoint and encryption keys required to send a morning invitation or optional pre-event question. Pre-event notifications are generic and do not include the calendar event name. Browser permission can be removed at any time.
Measurement and advertising
We record a limited funnel: landing visit and source, account creation, trial start, calendar connection, and subscription. These events contain no reflection, act, calendar, or typed content. Advertising pixels, if introduced for paid campaigns, load only after the visitor’s consent where consent is required. We do not use session replay.
Hosting and security
Vercel hosts the web service and processes ordinary request information needed to deliver and protect it, such as IP address, browser information, requested URL, and time. Calendar credentials are encrypted before database storage. Access controls separate each member’s data, and privileged credentials remain on the server.
Export, deletion, and retention
Account settings provide a machine-readable export and permanent deletion. Deletion cancels the billing customer where present, removes Useful Acts product data and encrypted calendar credentials, and deletes the Clerk identity. Providers may retain limited records when required for security, fraud prevention, financial compliance, or legal obligations.
Questions
Write to hello@usefulacts.com for privacy requests or questions.