diff --git a/docs/PRIVACY.md b/docs/PRIVACY.md
index b432f14..f32b035 100644
--- a/docs/PRIVACY.md
+++ b/docs/PRIVACY.md
@@ -1,15 +1,25 @@
-# Agendula — privacy policy
+---
+title: Privacy Policy — Agendula
+description: What Agendula does with your data. No servers, no account, no analytics — your tasks stay on your device unless you add a CalDAV server yourself.
+updated: 2026-09-07
+---
 
-> **This file is the policy.** Edit it here, in a PR, reviewed like any other
-> change — it is the source of truth.
->
-> It is *published* at <https://jeanlucmakiola.de/agendula/privacy>, which is
-> what the app's **Settings → Privacy policy** row opens and what the Play
-> Console field must hold. That page holds no copy of the prose: the website
-> build checks this repository out beside itself and renders this file through
-> an Astro content collection, so there is exactly one copy of the policy
-> anywhere and the two cannot drift. An edit here reaches the live page on the
-> site's next build.
+<!--
+  THIS FILE IS THE POLICY. Edit it here, in a PR, reviewed like any other
+  change — it is the source of truth.
+
+  It is published at https://jeanlucmakiola.de/agendula/privacy, which is what
+  the app's Settings → About → Privacy policy row opens and what the Play
+  Console field must hold. That page holds no copy of the prose: the website
+  build checks this repository out beside itself and renders this file through
+  an Astro content collection, so there is exactly one copy of the policy
+  anywhere and the two cannot drift. An edit here reaches the live page on the
+  site's next build.
+
+  The page supplies its own <h1> from the `title` above, so this body starts at
+  the first section — do not add one. This comment is HTML so that it cannot
+  render on the published page.
+-->
 
 _Last updated: 2026-09-07._