diff --git a/README.md b/README.md
index 86bea13..1377ed1 100644
--- a/README.md
+++ b/README.md
@@ -75,6 +75,15 @@ No coding needed: register on the Weblate server, pick (or request) a language,
 and translate the strings in your browser. You can also reach this link in the
 app from the top of **Settings → App language**.
 
+## Privacy
+
+No servers, no account, no analytics, no advertising, no tracking, no
+third-party SDK. Your tasks stay on your device unless you add a CalDAV account
+yourself, and then they go only to the server you chose — never to the
+developer.
+
+**→ [Privacy policy](https://jeanlucmakiola.de/agendula/privacy)**
+
 ## License
 
 MIT — see [LICENSE](LICENSE).
diff --git a/docs/PRIVACY.md b/docs/PRIVACY.md
index 0086fc2..74ca200 100644
--- a/docs/PRIVACY.md
+++ b/docs/PRIVACY.md
@@ -1,5 +1,17 @@
 # Agendula — privacy policy
 
+> **The published policy does not live in this repository.** It is
+> <https://jeanlucmakiola.de/agendula/privacy>, built from
+> `src/pages/agendula/privacy.astro` in the website repo
+> ([source](https://gitea.jeanlucmakiola.de/makiolaj/jeanlucmakiola.de/src/branch/main/src/pages/agendula/privacy.astro) —
+> self-hosted Gitea, same shape as Calendula's page). That URL is what the app's
+> **Settings → Privacy policy** row opens and what the Play Console field must
+> hold.
+>
+> This file is the text of record until that page ships, and then becomes a
+> pointer to it. Edit the Astro page, not this — or they will disagree, and the
+> one users read is the other one.
+
 _Last updated: 2026-09-07._
 
 Agendula is a task app for Android, published by Jean-Luc Makiola. This policy