Your tracker data is stored in Supabase and protected so only your signed-in account can read it. A user-scoped browser cache is retained solely for offline access.
The optional Apple companion requests full Calendar access only after you enable integration. It reads and changes events solely in a dedicated Revision Tracker calendar; unrelated calendars are never synchronized.
Calendar invitations and Apple-managed attachments are display-only. Deleted synchronized events remain recoverable for 30 days before permanent removal.