Privacy policy

The short version

Time-Blind holds your reminders and the calendar behind them so it can tell you about them before the moment, not after it. It is yours, it is stored in the UK, nobody else can read it, and you can take it back or have it erased whenever you like. Nothing you put in here trains anyone's AI, and nothing about you is sold or advertised against. The rest of this page is the detail behind those sentences.

Who is responsible

Neuro Spicy Ltd is the data controller, registered with the Information Commissioner's Office under number ZC200663. Questions, requests or complaints go to the support team at support@neurospicy.group.

What we hold

• Your account. Name, email address, an optional profile photo and your password, which is stored hashed and never in readable form. This is the same account as The Spice Rack®, so one sign-in works across both.
• Your birth year. Asked once, so we know whether the account belongs to someone under sixteen and the rules below about parents apply. The year only, never the date.
• Your reminders. What each one says, when it is due, its steps, its category, whether it repeats, whether it nags, and when you ticked it off or snoozed it. Also a record of each time one was actually sent, so it is never sent twice.
• Your calendar. Events you type in, events read out of a document, and events from any calendar you follow. Following a calendar means we hold the link you gave us and fetch it about once an hour.
• Calendars on your phone. In the iPhone app you can switch on calendars you already have: iCloud, Google, work, a shared family one. Only the calendars you switch on are read, and only the ones you switch on are copied here: the title, time, place and notes of each event, from a month ago to about a year ahead. They are copied because the reminders hang off them and the alerts are sent from our server, which cannot reach into your phone. Switch a calendar off and its copies are deleted, apart from any event you have hung a reminder on. The one time Time-Blind writes to your phone's calendar is when you add an event here and choose a calendar to put it on. It adds that event and nothing else, and never changes or deletes anything that was already there.
• What you capture. The file itself is never stored. What is kept is the file's name, the dates that were found in it, and the sentences those dates came from, so you can see why it read what it read. That record stays until you delete it.
• Your run-ups and categories, including any you write yourself.
• Linked contacts. The email address of anyone you invite, the name you gave the relationship, and whether they said yes. When one of them sends you a reminder, we record that they sent it.
• Anything you report. If you report a reminder somebody sent you, we keep a copy of what was sent and anything you added, so that deleting the reminder does not destroy the record of it.
• Your settings. Timezone, quiet hours, whether you want feature suggestions and which ones you have answered, and whether you have agreed to documents being read.
• Technical bits. A device token for each device you turn notifications on for, the private link for your outgoing calendar feed, and the cookie that keeps you signed in.

Appointment letters and health information

A hospital letter says something about your health, and UK data protection law treats that as special category data needing extra protection. That is the only reason Capture asks for a separate tick at sign-up rather than being on by default. We rely on your explicit consent for it, and Settings has a switch that withdraws that consent and closes Capture the moment you use it. Withdrawing does not delete captures you have already made; deleting those is a separate choice, and yours.

Why we hold it

To send you a reminder at the right time, which is the whole product, and which cannot be done without holding the reminder. For most of what is listed above, the lawful basis is that we need it to provide the service you asked for. For reading documents it is your explicit consent, and for notifications it is your consent given per device. Nothing here is used for advertising or sold to anybody, and no decision about you is made automatically.

Who can see it

You. Nobody at Neuro Spicy reads your reminders in the ordinary course of things, and the database rules stop one account reaching another's.

A linked contact can do one thing: send you a reminder. They cannot see your reminders, your calendar, your captures or anything else, and their name is on anything they send. You can end a link at any moment, and doing so is immediate.

They can see, change and take back the ones they sent you, which are their own words. They are not shown whether you have done it, snoozed it or when. If you delete one, it stops appearing on their list, so they can tell it has gone. That is the honest cost of letting somebody correct a time they got wrong, and it is better than an app that pretends a change worked when it changed nothing.

One exception, for children. On an account belonging to somebody under sixteen, the parent or guardian named on it also sees whether the reminders they sent have been ticked off. Not the child's own reminders, not their calendar, not anything else they do in the app. The child is told this on the same screen where they name their parent, and it stops on their sixteenth birthday.

If you subscribe to your outgoing calendar feed from Apple Calendar, Google Calendar or Outlook, then anyone holding that link can read your reminders, and your calendar provider will hold a copy. That is what a calendar subscription is. The link is unguessable, it is not published anywhere, and Settings can reset it, which instantly breaks every copy of the old one.

Your profile photo, if you add one, is stored at a web address that is not listed or linked anywhere but is not secret either: anyone given the address can open it. It is shared with The Spice Rack®, which is the point of it.

The companies that help us run it

• Supabase stores the database and handles sign-in. Your data sits in their London region, in the UK.
• Vercel runs the app itself.
• Anthropic reads the documents you capture. The photo, PDF or text is sent to them once, the dates come back, and it is not kept by us afterwards. Under their commercial terms they do not use it to train their models. They process in the United States, so this is an international transfer, made under the safeguards in their data protection terms.
• Resend sends the email inviting somebody to become a linked contact. They see that address and the invitation.
• Apple and your browser's push service deliver notifications where you have turned them on. They carry the notification, not your record.
• Whoever hosts a calendar you follow sees a request from our server for the link you gave us, about once an hour.
• Gravatar may be asked for a default profile picture using a scrambled version of your email address. Add your own photo and this stops happening.

If you are under sixteen

You can use Time-Blind, and an account for someone under sixteen works the same way with two differences. A parent or guardian has to be linked to it, and they have to approve anyone else you want to allow to send you reminders, so no adult can reach you through this app without a parent agreeing first.

A parent approves contacts. A parent does not get to read your reminders, your calendar or anything you have captured. Once you turn sixteen you can remove any contact you like, including the parent.

There is no advertising here, no profiling, and nothing is designed to keep you using the app for longer. The one place the app suggests anything is a single card on Today about a feature you have not tried, and the suggestion about adding contacts is never shown to an account under sixteen.

How long we keep it

Your reminders, events, captures and settings stay until you delete them or delete your data. There is no automatic clear-out, because a calendar that quietly forgets last term is worse than useless. Two housekeeping exceptions: events from a calendar you follow are replaced each time it refreshes, and events from a followed calendar that are more than thirty days in the past are tidied away.

Deleting it

My profile has Delete my Time-Blind data. It erases every reminder, event, capture, template, category, calendar link, contact link and setting this app holds. It cannot be undone.

Your sign-in is shared with The Spice Rack®, so that button deliberately leaves your account alone: deleting Time-Blind should not delete your coaching record. To close the account itself, and everything across the family with it, use the account deletion in The Spice Rack® or ask support.

Your rights

You can ask for a copy of everything we hold, correct anything wrong, have it deleted, ask us to restrict or stop using it, withdraw a consent, or object to what we are doing. Ask support and it will happen within a month, usually far sooner.

If you are unhappy with how we have handled your information, tell us first so we can fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

One cookie, to keep you signed in. No advertising, no tracking across other websites, no analytics following you around. That is why there is no cookie banner: there is nothing to consent to beyond making the app work.

Changes

If we change this policy in a way that matters, we will tell you rather than quietly update the page and hope you do not notice.