Calmboard

Calmboard Privacy Policy

Last updated: November 2026

What we collect

1. Local data

By default, your tasks, notes, steps and preferences (such as light/dark theme and the energy filter) are stored locally in your browser’s local storage on your device. This data does not leave your device unless you sign in.

2. Account and sync data

If you choose to sign in (with email or Google) to sync across devices, we collect:

• Your email address and a basic profile identifier, via Supabase Authentication. If you sign in with Google, Google shares your name, email address and profile picture link with us; we use your name and email only to show who is signed in.
• Your board: tasks, subtasks (steps), notes, due dates, energy tags and column statuses, stored securely in our Supabase database.

3. Feedback you send

If you use “Send feedback”, we receive your message, the email address you choose to include (optional), and, only if you leave the box ticked, basic technical details (browser, screen size and language) to help fix bugs.

How we use your data

Exclusively to provide, sync and back up your Calmboard workspace across your devices, and to respond to feedback you send. We do not sell, rent or share your personal data or task contents with third parties or advertisers, and we do not use your data to train AI models.

Service providers

To run Calmboard we rely on a small number of providers who process data only on our behalf, to deliver the service:

• Supabase: sign-in, database and live sync.
• Netlify (hosting) and Cloudflare (DNS): deliver the website. Like any web server they may briefly process technical request data such as IP addresses.
• Google: only if you choose “Continue with Google” to sign in.
• jsDelivr: serves the open-source Supabase code library to your browser.

Data storage and security

Data is encrypted in transit (HTTPS/TLS) and stored with Supabase using strict Row Level Security (RLS), so only your authenticated account can access your tasks. Calmboard does not use cookies for tracking, advertising or analytics.

Data retention and deletion

• You can delete individual tasks at any time. Deleted tasks are removed from your board on every device.
• Data stored only on your device can be removed by clearing your browser’s site data for calmboard.net.
• You can delete your account and all synced data yourself at any time: open Calmboard, tap your account (top right), then Delete account. This immediately and permanently removes your sign-in record, all synced tasks, steps and notes, and any feedback you sent while signed in. You can download a copy of your tasks first.
• If you can’t sign in, you can also request deletion (see Contact below) and we’ll confirm once it’s done.
• We keep your synced data for as long as your account exists, unless you ask us to delete it.

Children

Calmboard is not directed at children under 13, and we do not knowingly collect personal data from them.

Changes to this policy

If we make meaningful changes, we’ll update this page and the “Last updated” date above.

Contact

For privacy questions, or to request deletion if you can’t use the in-app Delete account option, open Calmboard and choose Send feedback (the speech-bubble icon at the top), pick “Other”, and include the email address you’d like us to reply to. For deletion requests, please use the email address of the account you want deleted.