Privacy Policy

The Aurelius Club, Stockholm, Sweden ("we") is the data controller for personal data processed through this website. We collect as little as possible, and nothing quietly.

What we collect

• Newsletter. If you subscribe to the Sunday Letter, your email address is processed by Substack Inc., which hosts the list. Substack's own privacy policy applies to that processing.
• Shop orders. When the shop is open, payments are handled by Stripe. We receive the name, address and email needed to fulfil and ship your order — nothing more. Card details never reach us.
• Contact. If you email us, we keep the correspondence for as long as needed to answer you.

What we do not collect

This website sets no cookies and runs no tracking or analytics scripts. There is no profiling and no advertising. We never sell or share personal data for marketing.

The app

The Aurelius Club app is a quiet practice, and we treat your data the same way. This is the whole of it, in plain language.

• Your email — so you can sign in (a link, no password) and receive the Sunday Letter and the one weekly reminder. Stored with our database provider in the EU.
• Your journal — your daily vows, what held and slipped, your weekly reviews, and your Code. This is yours. It is stored against your account so it follows you to a new phone, and it is never shared, sold, or read by us for any purpose other than showing it back to you.
• Your Lookout — if you appoint one, we hold their name and email for the single purpose of writing to them if you let go of the practice for two weeks, and once when you return. Nothing else. They can decline in one tap.
• Your Testudo — if you form one, we hold the email addresses you invite so the invitations can be sent, and your formation sees only each other's first name, vow, season, and whether the week held. Never your journal.
• How you use the app — anonymous product events (for example, "a day was logged") help us understand whether the practice works. We never attach your journal text to this. Handled by an analytics provider in the EU.

The app does not track you across other apps or websites. There is no advertising, no ad identifiers, no data brokers. There is no chat, no feed, and no follower counts — by design.

Who processes data for us

Supabase (database & authentication, EU region), PostHog (analytics, EU), Resend (sending our email), and Google Workspace (receiving replies). Each holds only what its function requires. Data lives in the European Union.

Export and erasure

In the app, Settings → Your data lets you export your whole journal as a readable document, or delete your account and everything in it — immediately and permanently. You can also write to us and a person answers.

Legal basis and retention

Newsletter processing rests on your consent, which you can withdraw at any time via the unsubscribe link in every letter. Order processing rests on the purchase contract and on bookkeeping obligations under Swedish law (records are kept for seven years, as required, then deleted). Correspondence is deleted when the matter is closed.

Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to access, rectify and erase your personal data, to restrict or object to processing, and to data portability. To exercise any of these rights, write to hello@theaureliusclub.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

Last updated 7 July 2026.