Privacy

Slightly Ahead reads what you choose to connect so it can tell you when something affects your plans. This page says what it reads, what it keeps, who else handles it, and how to make it forget.

Last updated 20 Oct 2026

In short

Read-only. It never sends, deletes or changes your email, and never changes your calendar.
From an email about your plans it keeps a short note, not the email.
No ads, no tracking, and your data is never sold.
Disconnect an account and it forgets what it learned there. Delete your account and everything goes at once.

What it reads

Chat: What you tell it, and files you attach there.
Gmail: If you connect it: read-only access. When you first connect, it reads the last 30 days of email, then new email as it arrives.
Google Calendar: If you connect it: read-only access to your events, including the next 90 days.
The web: Only to answer a question you ask or to keep an eye on something for you.

It never sends, replies to, deletes, labels or marks your email read, and never creates or changes calendar events.

What it keeps

Your account: Your email address, your name if you give one, your time zone, and your notification settings. A password, if you set one, is kept only as a hash.
Emails about your plans: A short note (at most two sentences), the plans it found, and the sender's address.
Any other email: Only its ID, so it isn't read twice.
Your calendar: Each event's title and times.
What it learns: Your plans, Updates, To-dos, interests, people and places it has learned, and your chat.
Files: Files you attach in Chat, so you can open them again. Passports, ID cards and visas are read and never kept.

It keeps these until you delete them, disconnect the account they came from, or delete your account. Nothing is deleted for age alone.

How it uses it

Only to run Slightly Ahead for you: to work out what changed in your plans, tell you when something needs you, and answer you in Chat. It isn't used for advertising, isn't sold, and isn't shared except with the services below, which do the work.

There are no analytics or advertising trackers.

Who else handles it

Your data is stored in the United States.

Neon: The database (AWS us-east-1).
Render: The service that reads your email and calendar.
Vercel: The web app.
Cloudflare R2: Files you attach in Chat.
Google: Gmail and Calendar, through the access you give. The pages load their fonts from Google, which sees your IP address.
Vercel AI Gateway: To work out what an email or message says, its content is sent through it to language model providers (see Language models).
Stripe: If you subscribe: your email address, to take payment. Your card goes to Stripe and never reaches Slightly Ahead.
Resend: Sign-in links, and notification emails: an Update's title and a line or two about it.
Your browser's push service: If you turn on push notifications: the same title and line, encrypted, passed on to your device by your browser's maker (such as Apple, Google or Mozilla).
Sentry: Reports when something breaks. Your name, email address and the content of your email and messages are removed before they are sent.

Language models

Slightly Ahead uses language models from providers such as OpenAI and Anthropic, through the Vercel AI Gateway, to read an email or message and to write replies. The provider receives the content it needs for that one request.

While in early access, zero data retention is not yet turned on for these requests, so a provider may keep what it receives under its own terms. Slightly Ahead does not use your data to train models.

Google user data

Slightly Ahead asks Google only for read-only Gmail and read-only Calendar, each when you connect it, and never to sign you in. Its use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Keeping it safe

In transit: Everything between your browser, the service and the providers above goes over encrypted connections.
Google access: The key that lets it read your Gmail or Calendar is encrypted (AES-256-GCM) before it is stored. Short-lived access is fetched as needed and never stored.
Signing in: By an emailed link that expires in 15 minutes, or a password you set later. Anyone who can open your email can sign in, so keep it safe.

Cookies and storage

Cookies keep you signed in. Your browser also keeps a few small notes for the app, such as which Updates you have seen; they hold no email or message content and are cleared when you sign out. No cookies track you on other sites.

Your controls

See and correct: Every plan, interest, person and place it keeps is listed in the app, and you can correct or stop any of them.
Disconnect an account: Its Google access is revoked (unless another connection uses the same Google account), and everything learned only from that Gmail or Calendar account is deleted.Settings, Connections
Download your data: Everything it holds about you, as one file.Settings, Account
Delete your account: Google access is revoked and everything, including your files, is deleted at once, with no grace period.Settings, Account
Revoke at Google: You can also remove its access from your Google Account at any time.Google Account, Third-party connections

Changes to this page

The date at the top says when this page last changed. If a change affects what it reads, keeps or shares, you'll be told before it applies.