Privacy, held with care.

Information we collect

We collect account information such as your email address and preferred name, profile details you choose to provide, and content you create in Serendipity, including intentions, priorities, reflections, wardrobe details, and personal settings.

If you connect Google Calendar, Serendipity requests read-only access to events on the calendars you own so your schedule can appear inside your personal daily guide. We may process event titles, times, and locations needed to display that schedule.

How information is used

We use your information to authenticate your account, provide and personalize Serendipity features, sync the services you request, maintain security, troubleshoot problems, and improve the experience using feedback you choose to share.

We do not sell your personal information or use Google user data for advertising.

Google API data

Serendipity's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Google Calendar access is limited to a single read-only scope (see and download events on calendars you own) required to show your schedule. Serendipity does not create, edit, or delete events in your Google Calendar.

Storage and protection

Account and application data is stored with Supabase. The application is hosted with Vercel. Google OAuth tokens are encrypted before storage and server credentials are kept outside browser code. Access controls are designed to keep each account's data separate.

Your choices

You may disconnect Google Calendar, export available account data, or request account deletion through Serendipity settings. You can also revoke Google access from your Google Account's third-party connections page.

Retention and deletion

We retain information while your account is active and as reasonably needed to provide the service, protect its security, and meet legal obligations. When an account-deletion request is completed, associated application data and stored Google connection credentials are deleted or de-identified unless retention is legally required.

Contact

Questions or privacy requests may be sent to christinaante@gmail.com.