This page explains what Sidecar collects, on this website and in the product, why, and what you can do about it.
Who is responsible for your data
Kaleido Ltd is the controller of your personal data: we decide how it is used, and we answer to you for it.
On this website
When you join the waitlist or newsletter you give us your email address. We store it with the time you signed up, the page you signed up from, and, where a link carried one, a short campaign tag.
We also count page views, in aggregate and without cookies. When a page loads, your browser tells us which page it is, which site you arrived from and, where a link carried one, a short campaign tag. We add one to that page's count for the day and keep nothing else: no record of an individual visit is stored, and nothing identifies you. If your browser asks sites not to track you, through Do Not Track or Global Privacy Control, your visit is not counted at all.
There are no analytics cookies and no advertising trackers on this site.
This website's typefaces are served by Google Fonts: your browser fetches them from Google, which receives your IP address and the details of your browser, under Google's own privacy policy.
We send at most two emails to a waitlist address: one straight away to confirm it, and one when Sidecar launches. Nothing else is sent to it, and it is never added to another list. Both come from Sidecar's own address through Amazon Web Services. Every email carries an unsubscribe link, and unsubscribing takes effect immediately.
In Sidecar
Your account. When you create an account we store your email address and your name. Each time you sign in we keep a sign-in record with your IP address and the browser you used, so we can keep your account secure; it is removed when you sign out or when it expires.
What Sidecar stores to do its job.
- Your email address and name: to sign you in, and to send password resets and receipts.
- The tasks, bookings, goals and someday items you add: they are the product: Sidecar ranks them into your today view.
- The people you add: names, birthdays, when you last spoke, card dates and gift notes: so Sidecar can watch birthdays, cards to post and friends you have not spoken to in a while.
- The text you type into capture: kept as a log of what each captured item was made from, so you can check what Sidecar understood.
- Calendar events and contact names and birthdays from Google, if you connect them on Plus: read-only, so your existing calendar and contacts appear in your day without retyping.
- Which screens you use and when: first-party usage counts only, to see whether the product is working; no third-party analytics.
Email. We keep a record of the emails Sidecar sends you, and whether you have asked not to receive its updates.
How you use it. Sidecar records which of its features you use and when you were last active, linked to your account, so we can see how it is used and improve it. Only totals ever leave it.
Emails about your account. Sidecar may email you about getting started, your trial and your plan. Every one carries a way to stop them.
Support. If you write to our support address, we keep your message, our reply and your email address so we can answer you. A first draft of a reply may be written with an AI model (Anthropic's Claude) from what you wrote.
How we use it
We use what we hold to provide Sidecar to you, to keep it and your account secure, to tell you about your account (such as a password reset or a receipt), and to fix what goes wrong. We do not sell it, and we do not use it for advertising.
Why the law allows it
| What we use it for | Lawful basis |
|---|---|
| Running your account and Sidecar | Contract: we need it to provide Sidecar to you |
| Keeping sign-in records | Legitimate interests: keeping your account and Sidecar secure |
| Checking a form is filled in by a person (Cloudflare Turnstile) | Legitimate interests: keeping automated abuse out |
| Recording which features you use | Legitimate interests: understanding how Sidecar is used, so we can improve it |
| Emails about getting started, your trial and your plan | Legitimate interests: helping you get what you signed up for; you can stop them at any time |
| Answering what you write to our support address | Legitimate interests: answering you and putting problems right |
| Counting page views on this website, in aggregate | Legitimate interests: knowing which pages are read, without identifying anyone |
| Showing this website in its own typefaces (Google Fonts) | Legitimate interests: presenting the website as it was designed |
| The waitlist and occasional updates by email | Consent: you can withdraw it at any time with the unsubscribe link in every email |
Where we rely on legitimate interests, you can object, and we will stop unless we have a compelling reason to carry on. Where we rely on consent, you can withdraw it at any time; that does not affect what was done before.
Where it lives
Waitlist addresses and the page counts are stored on Amazon Web Services in London, United Kingdom. What Sidecar holds is stored at Amazon Web Services, London (eu-west-2). We do not sell any of it, and we never share it with anyone for their own marketing.
The services that handle personal data for us are listed on our subprocessors page. At present they are Amazon Web Services, Cloudflare, Anthropic, Google Fonts, Stripe and Google. Where one of them handles data outside the United Kingdom, the transfer is covered by the UK's adequacy regulations or by the safeguards the law requires, such as the International Data Transfer Agreement.
How long we keep it
- A waitlist address: until you ask us to delete it. When you unsubscribe, your address stays on our list marked as unsubscribed, with when you signed up, the page and any campaign tag, so that we never email you again by mistake; ask us and we will delete it entirely.
- Your account and what you put into Sidecar: for as long as you have the account. When you delete it, what it holds is deleted. Copies in our backups are deleted as those backups expire.
- Sidecar in particular: Kept while your account exists and deleted with it when you delete your account.
- A record of which features of Sidecar you use and when: 16 weeks, and then it is deleted.
- Support conversations: 24 months after the last message in the conversation, and then they are deleted.
- A record the law requires us to keep, such as a record of a payment for tax: for as long as the law says, and no longer.
Your rights
You can ask to see what we hold about you, to have it corrected, to have it deleted, to have a copy you can take elsewhere, or for us to stop or limit using it. We will answer within a month.
You can delete your account, and download a copy of your data, yourself, from Settings in Sidecar. For anything else, write to support@sidecarlife.com.
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office, the UK's data protection regulator.
Cookies
This website sets no cookies. Sidecar sets only the cookies it needs to work; our cookie statement says which.
Changes to this policy
When this policy changes, the date below changes with it. If a change matters to you, we will tell you before it takes effect, by email if you have an account.
Who we are
Sidecar is a product of Kaleido Ltd, a company registered in England and Wales, company number 17516332, whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
You can reach us at support@sidecarlife.com.