Legal

Privacy Policy

Last updated 5 August 2026. This is the whole policy — there is no second, longer version.

Consistency Calendar turns a goal into a private calendar you tick off. To do that it has to hold your plan and your progress. This page says exactly what that means, in the order you'd actually want to know it.

The short version

Who we are

Consistency Calendar is operated from the United Kingdom and is the data controller for the information described here. Contact: hello@consistencycalendar.com.

What we collect, and why

DataWhyLegal basis (UK GDPR)
Email address — only if you create an accountSo you can log back in and see your calendars on another device, and so we can send password resets and sign-in linksContract
Password — stored only as a salted hash, never as textTo secure your accountContract
Your plan — goal, dates, sessions, habits, any notes or documents you attachIt is the product; without it there is no calendarContract
Your progress — which sessions you ticked, habit history, weekly countersStreaks, stats and the coaching signals the app shows youContract
Optional tracked metric — e.g. body weight, if you choose to add oneDrawing your progress against a guide curveExplicit consent (see below)
Product events — timestamps of things like "a calendar was created", "a calendar was opened"To know whether the product works. These record that something happened, never what your plan saysLegitimate interests
Payment reference — a Stripe identifier if you buy a Sprint PassTo know your calendar is paid for, and to handle refundsContract / legal obligation

Health-related data

If you choose to track body weight, or describe an injury or medical constraint when planning, that is health data — a special category under UK GDPR. We only process it because you have explicitly chosen to provide it, we use it for nothing except showing you your own plan and progress, and you can remove it at any time by deleting the metric or the calendar. Consistency Calendar is a planning and tracking tool, not medical advice, and it is not a medical device.

What we don't collect

No card numbers. No government identifiers. No advertising identifiers. No third-party analytics or tracking cookies. The only cookie we set is the one that keeps you signed in.

Who else processes it

We use a small number of processors, each for one job:

ProcessorWhat it handlesWhere
CloudflareHosting, and the databases your account, plan and progress live inGlobal edge network
StripePayments. Card details are entered on Stripe's own checkout and never reach usUS / EU
ResendSends password-reset and sign-in emails. Receives your email address onlyUS
AnthropicBuilds and revises your plan. Receives your goal description and answers — not your email, not your tick historyUS
Cloudflare Workers AISame job as above, used only as a fallback if Anthropic is unavailableGlobal edge network
GoogleOnly if you connect Google Calendar. We create one calendar in your account and write your sessions to it — we cannot see your other calendarsUS

Some of these transfer data outside the UK. Where they do, they rely on the UK International Data Transfer Addendum or equivalent safeguards.

If you use Consistency Calendar through an AI assistant

You can connect Consistency Calendar to an assistant like Claude or ChatGPT. In that case the conversation happens in their product under their privacy policy, and they send us only what is needed to build or update your calendar. We never receive your wider chat history. Equally, anything you type into that assistant is subject to its own terms, not ours.

How long we keep it

Your rights

Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or withdraw consent for the optional metric.

You don't have to ask us for the two most common ones. In ⚙ Settings on any calendar, Download my data gives you the whole thing as JSON, and Delete this calendar permanently removes the plan, every version, all your progress, every snapshot and any attached documents. Deleting your account takes all of its calendars with it. Both are immediate and irreversible.

For anything else — correction, restriction, objection — email hello@consistencycalendar.com and we'll act within one month.

If you think we've got this wrong, you can complain to the Information Commissioner's Office — though we'd rather you told us first so we can fix it.

Security

Everything is served over HTTPS. Passwords are salted and hashed, never stored as text. Session cookies are signed, HttpOnly and Secure. Calendar links and feed links are long random tokens, and you can revoke or rotate them yourself from Settings. Optional per-calendar passcodes add a second lock.

Anyone holding a calendar link or a feed link can read that calendar — that is how sharing works, so treat those links like passwords.

Children

Consistency Calendar is not intended for children under 13, and we do not knowingly collect their data. Our planning assistant is instructed to decline to build a plan for anyone who says they are under 16.

Changes

If we change this policy materially we'll update the date at the top and, if you have an account, email you.