Privacy Policy

1. Introduction

LaterSafe helps you remember important future dates — visas, warranties, subscriptions, birthdays, and more. This policy explains what we store, what we deliberately don’t store, and how we protect it. We’ve tried to keep it plain-English.

2. Data Minimization (please don’t store secrets here)

LaterSafe is designed to work with the smallest amount of information possible. A short title and a date is usually enough.

Please do not store highly sensitive information in your reminders, such as:

• Passport, visa, or national ID numbers
• Payment card numbers, CVVs, or bank details
• Government-issued identifiers
• Scans or photos of documents
• Passwords or security answers

Reminders like “Passport expires” or “Card renews” with just a date work perfectly — no numbers needed.

3. What We Store

• Reminder titles
• Categories (e.g. Travel, Money, Warranty, Birthday)
• Reminder dates
• Optional notes you add
• Reminder notification schedules (e.g. 30/7/1 days before)
• Your email address
• Subscription and account status
• Reminder notification logs (which reminders were sent and when)

We do not sell your data, and we don’t use it for advertising.

4. Authentication

Sign-in is handled through Supabase, with optional Google OAuth. We never see your Google password. Sessions are managed using secure, industry-standard tokens and are scoped to your account.

5. Email Reminders

We send reminder emails automatically based on the schedule you set for each reminder. Emails are delivered through Lovable Cloud’s email infrastructure. The email address is only used to deliver your reminders and essential account messages — never marketing.

6. Privacy Mode

You can choose how much detail appears in reminder emails:

• Standard Mode: emails may include the reminder title and any notes you added, so you can act on them without opening the app.
• Privacy Mode: emails only show the category and date, with a “Sign in to view details” link. The reminder title and notes stay hidden in your inbox.

You can toggle Privacy Mode any time from Settings.

7. Security Measures

• HTTPS/TLS encryption for all traffic
• Encryption at rest via our platform infrastructure
• Row Level Security (RLS) so each user can only read or modify their own reminders
• Server-side authorization checks on every reminder and account operation
• Restricted access to user reminder data — only the account owner can read it
• Signed/verified webhooks for billing and authentication events
• Minimal logging — reminder titles and notes are not intentionally written to logs

8. Account Deletion

You can delete your account at any time from Settings. Deletion permanently removes your reminders, your profile, and your reminder notification history.

If you have an active paid subscription, you’ll be asked to cancel billing first so you aren’t charged again after your account is gone.

9. Data Export

You can export a copy of your reminder data as JSON from Settings, at any time.

10. Third-Party Services

We rely on a small number of trusted providers to run the service:

• Supabase — database, authentication, and storage
• Google OAuth — optional sign-in
• Stripe — subscription billing (we never see your full card number)
• Lovable Cloud email infrastructure — reminder and account email delivery

Each provider only receives the minimum data needed to perform its role.

11. Logging & Privacy Practices

Sensitive reminder content (titles, notes) is not intentionally written to application logs. OAuth tokens, session secrets, and payment credentials are never exposed in client-side code or public endpoints.

12. Reminder Delivery Disclaimer

We work hard to deliver your reminders reliably and on time. However, exact delivery timing depends on email providers, mailbox rules, and other external systems we don’t control. LaterSafe is a helpful safety net — not a substitute for critical legal, medical, or financial deadlines.

13. Changes to This Policy

We may update this policy as the product evolves. Significant changes will be communicated by email or in the app. Continued use of LaterSafe after changes means you accept the updated policy.

14. Contact

Questions about privacy or your data? Email samuel@samral.com.