Privacy Policy
Actual · last updated 26 October 2026
Actual is a calendar that keeps your schedule on your own device.
Signing in is optional, and nothing leaves the device unless you do.
What is collected
If you never sign in: nothing about you. The app stores your schedule
in your browser or phone's own storage. No account, no analytics, no
advertising identifiers, no tracking of any kind. The one thing the app sends on
its own is a crash report when something breaks, which
says nothing about you and can be switched off.
If you choose to create an account so the same schedule appears on more than
one device, two things are stored:
- Your email address and a securely hashed password (or,
if you sign in with Google, your Google account's email address), used to
sign you in and, if you leave Tips and offers by email on, to send
you the occasional email about Actual.
- Your schedule — the blocks, to-dos, lists, notes and the
record of what you actually did.
- Your meeting notes, if you take any — see
Meeting notes below.
If you also link your account with someone else's so you can
send each other blocks, three more things are stored: that the two accounts are
linked, the name each of you chose to be shown to the other, and a copy of each
block you send (its title, day, time, category name and tasks) along with
whether they added it, saved it or passed on it. The person you linked with sees
only the blocks you send them, never the rest of your schedule. Either of you can
unlink at any time from Settings → Account, which also takes
back anything you sent that they had not yet answered.
Crash reports
When something in the app goes wrong and the app can't recover by itself, it
sends a short technical note so the problem can be found and fixed: the error
message (with any quoted text removed), the place in the app's code where it
happened, the app's version, whether it was the web or Android app, and the
browser's name and version. It never includes your schedule, anything you typed,
your email address or who you are, and it carries no identifier that could link
two reports to the same person. Reports are kept for 90 days. Switch them off
in Settings → Backups → About → Crash reports.
The launch list
If you give your email address on the website to hear when Actual launches,
it is stored with the date you joined and used only to email you about Actual:
launch news, founding-member offers and, now and then, tips. Every email has an
unsubscribe link that takes you off at once.
Where it is kept
Account data is held in a private database hosted by
Supabase, which processes it on our
behalf. Access is restricted at the database level so that a signed-in person
can read and write only their own schedule, and a block you send can be read
only by you and the person you sent it to. Everything travels over HTTPS.
Emails are sent through Resend,
which holds the addresses on the email list on our behalf.
What is never done with it
- It is not sold, rented, or shared with anyone.
- It is not used for advertising. The app contains no ads
and no ad networks.
- There is no analytics — no record of what you open,
tap, or how often you use the app. Crash reports, above, are the only thing
the app sends by itself.
- Your schedule is not read by us except where you ask for
support and send it yourself.
Notifications
The Android app can remind you shortly before a block starts. These
reminders are worked out and shown entirely on your phone.
Nothing about them is sent anywhere, and no push service is involved.
Talking instead of typing
Talk it out lets you say a list of things and turns what
you said into blocks and to-dos. Actual never records, stores or uploads the
audio itself: only the text you choose to add is kept, as part of your
schedule.
- In the Android app, the words are recognised by your
phone's own speech service — on the phone itself where it supports that,
and otherwise by the speech provider your phone is set up with.
- In a browser, the words are recognised by the browser's
built-in speech service, which may send the audio to the browser's maker
(for example Google or Microsoft) under their own privacy terms.
If you are signed in and Sort rambles with AI is on (Settings
→ Adding things), the text of what you said — never the audio — is sent to
Anthropic's Claude model to
split it into separate items, then sent straight back. Actual doesn't keep the
text, only a count of how much was used; Anthropic handles it under its
commercial terms, which don't allow it to be used to train their models. With it
off, the sorting happens entirely on your device.
It only listens while the Talk it out sheet is open and says it is
listening, and you can switch it off entirely in Settings → Adding things.
Meeting notes
A meeting in Actual can hold your notes, and a summary or transcript you
paste or upload (for example one your video-call app made). Actual never records
a meeting itself. The notes are kept on your device and, if you are signed in,
in your account, where only you can read them; the people in the meeting don't
see them. Deleting your account deletes them.
If you press Find the action items while signed in, the
notes and the names of the people in the meeting are sent to
Anthropic's Claude model to
pick out who is doing what, then sent straight back. Actual doesn't keep a
second copy of what was sent, only a count of how much was used, and Anthropic's
commercial terms don't allow it to be used to train their models. Signed out, the
action items are found on your device and nothing is sent. Nothing found is sent
to any of the people in the meeting unless you press Send for
them. Before you paste in someone else's words, make sure they are fine with it.
If you send a meeting by email to someone who isn't on Actual,
their email address is stored with the meeting in your account, along with when
it was sent and the time it was sent for, so that a later change of day or time,
or a cancellation, can reach them. The email goes through
Resend, carries your name and
email address so they can reply to you, and never shows anyone else's address.
Every invite has a link that stops all meeting invites from Actual to that
address; we keep only a scrambled form of it (a one-way hash), so the address
itself isn't stored for that. People linked with you on Actual get a meeting the
way any shared block arrives, with its agenda and the names of who's coming.
Permissions the Android app asks for
- Notifications — to show those reminders. Decline it and
the rest of the app works normally.
- Alarms & reminders — so a reminder arrives at the
minute rather than whenever the system next wakes. Decline it and reminders
still arrive, just less precisely.
- Microphone — asked for the first time you press the
Talk it out button, never at launch, and used only while you are talking
to it. Decline it and everything else works normally.
- Internet — used to sync when you are signed in, and to
send a crash report if something breaks.
Deleting your data
You can delete your account and everything stored in the cloud from inside
the app: Settings → Account → Delete account. It is immediate
and cannot be undone.
Full instructions, including how to ask if you no longer have the app
installed, are on the account deletion page.
Keeping your own copy
Under Backups you can export everything to a plain file you keep
yourself, and import it back later. Your schedule is yours; the app is not a
place it gets locked into. (Meeting notes are not in that file yet; they can be
copied out of each meeting's notes.)
Children
Actual is a general-audience planning tool. It is not directed at children
under 13, and no account is knowingly created for one.
Changes
If this policy changes in a way that affects what is collected or how it is
used, the date at the top will change and the updated policy will appear here
before the change takes effect.
Contact
Actual is made by Actual Software LLC, an Arizona limited liability company, 4539 N 22nd St #7781, Phoenix, AZ 85016, United States.
Questions, or a deletion request: [email protected].