Privacy Policy

Last updated: 12 July 2026

Reviewal ("we", "us") is a personal timeline and reminder service at reviewal.net. This page explains what we collect, why, and what control you have. The short version: we collect what the product needs to work, we don't sell it, and you can have it deleted.

What we collect

• Your email address — it's how you sign in (we're passwordless) and where reminders go.
• What you put on your timeline — events, dates, sections, notes, checklists. This can include anything you choose to track, so treat it as yours: we only store and display it back to you and process it to send the reminders you configure.
• Recipient addresses you add — if you share a section or send a postcard, we store the addresses you provide and use them only for the sends you set up. Recipients can unsubscribe from every email we send them.
• Passkeys — if you enrol one, we store the public key (never anything that lets us or anyone else impersonate you elsewhere).
• Billing status — handled by Stripe. We never see or store your card number; we store only your subscription tier and a Stripe customer reference.
• Usage analytics — we run our own cookieless analytics (page views, signups, feature usage) to understand what's working. No third-party ad pixels, no cross-site tracking, no advertising identifiers.
• Documents you scan — if you use the scanning feature, the image is processed by Google's Gemini API to extract dates, then handled per your instructions. Don't scan documents you don't want processed this way.
• Photos you add to a moment — if you attach a photo to a moment in a postcard section, it is stored in your own Google Drive (in a folder the app creates for this), and we keep only a reference to the file — never a copy on our servers. When you send that postcard, we fetch the photo with your permission, resize it, and include it in the email itself, so recipients see it without any Drive sharing. Remove the photo or disconnect Google any time.
• Connected accounts — if you connect Google Calendar, we access it only to do what you asked (sync events) and store tokens encrypted. If you connect an AI assistant via MCP, that assistant acts on your account with your permission and can read and edit your timeline; disconnect it any time.

Who processes it

We run on a small set of infrastructure providers, each processing data only to provide the service: Vercel (hosting), Supabase (database and authentication), Resend (email delivery), Stripe (payments), and Google (document scanning via Gemini; Google Calendar and Google Drive if you connect them — Drive holds any moment photos you add, in your own account). We don't sell your data or share it with advertisers — there are none here.

Email

We send transactional email (sign-in links, receipts, confirmations) and the reminder digests you configure. Digest and shared/postcard emails carry a one-click unsubscribe. Sign-in links can't be unsubscribed from because they only arrive when someone asks to sign in with your address.

Retention & deletion

Your data stays as long as your account does. To delete your account and everything in it, email support@reviewal.net from your account address and we'll remove it. Analytics events are anonymized when the associated account is deleted. Short-lived security records (sign-in challenges, rate-limit counters) purge themselves automatically within hours.

Your rights

You can request a copy of your data, correction, or deletion at any time via support@reviewal.net. If you're in a jurisdiction with specific data-protection rights (GDPR, CCPA and similar), we honour them.

Changes

If this policy changes in a way that matters, we'll note it here with a new date and, for significant changes, tell you by email.