Your privacy matters
We believe in transparency. Here's exactly how Sloth Spaced handles your data — no jargon, no surprises.
Last updated: July 10, 2026
Sloth Spaced ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp-based productivity service and web platform.
By using Sloth Spaced, you agree to the collection and use of information in accordance with this policy. We will not use or share your information except as described here.
What data we collect
We only collect data that is necessary to provide and improve our service.
WhatsApp Messages
Messages and voice notes you send to Sloth Spaced for task creation, reminders, and conversational interactions.
Phone Numbers
Your WhatsApp phone number, used solely to identify your account and deliver responses.
Google Account Information
Basic profile details (name, email) when you authenticate via Google for calendar and email integrations.
Email Access
Read and send access to your Gmail when you enable the email assistant feature. We only access emails relevant to your requested actions.
Calendar Access
Read and write access to your Google Calendar when you enable calendar sync, allowing us to create and manage events on your behalf.
How we use your data
Every piece of data serves a specific purpose in delivering your productivity experience.
Task Processing
We analyse your messages to extract actionable tasks, reminders, and to-dos, then store them in your personal workspace.
Email Sending
When you ask us to compose or send an email, we use your connected Gmail account to draft and send messages as instructed.
Calendar Management
We create, update, and manage calendar events based on your natural language requests, keeping your schedule organised.
Service Improvement
Aggregated, anonymised usage patterns help us improve accuracy and develop new features. We never sell personal data.
Data storage
Supabase
All user data is stored in Supabase, a Postgres-based platform with encryption at rest (AES-256). Database connections use TLS for encryption in transit. Regular automated backups ensure data durability.
Encrypted Google Tokens
OAuth 2.0 tokens for Google Calendar and Gmail access are encrypted using industry-standard AES-256 encryption before storage. Tokens are never stored in plain text and are rotated automatically when refreshed.
Security measures: We implement SSL/TLS encryption for all data in transit, rate limiting on API endpoints, regular security audits, and strict access controls. Voice transcription is processed locally — your audio never leaves our infrastructure.
Data retention
Active accounts
Your data is retained for as long as your account is active or as long as needed to provide services to you. We periodically review stored data and purge information that is no longer necessary.
Account deletion
When you request deletion, all personal data is permanently removed from our active systems within 30 days. Backup copies are purged within 90 days. Certain anonymised, aggregated data may be retained for service improvement.
Legal retention
Where required by law (e.g., financial records for billing), certain data may be retained for the legally mandated period even after account deletion.
Your rights
You are in control of your data. You can exercise these rights at any time.
Access Your Data
Request a complete copy of all personal data we hold about you.
Export Your Data
Download your tasks, messages, calendar events, and all stored information in a portable format.
Delete Your Data
Request full deletion of your account and all associated data. Permanently removed within 30 days.
Revoke Access
Disconnect Google Calendar or email access at any time through your account settings.
To exercise any of these rights, contact us at info@slothspaced.co.zw. We will respond to your request within 30 days.
Third-party services
We integrate with a limited number of trusted services. We do not sell your data to any third party.
Supabase
Database & AuthenticationHosts our database and handles user authentication. Your data is encrypted at rest within Supabase infrastructure.
OAuth 2.0 tokens are used to access Google Calendar and Gmail APIs. Tokens are encrypted and never shared with third parties.
AI providers
AI Language ProcessingRoutes natural language requests to AI models for understanding and task extraction. Queries are anonymised where possible.
Children's privacy
Our service is not intended for children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
Contact us
Questions about this Privacy Policy? We're here to help.
Email: info@slothspaced.co.zw
Phone: +263 77 993 1219
Address: 396 Arnold Way, Burnside, Bulawayo, Zimbabwe