Privacy policy
Daymap is a planner. You can use it without an account, in which case everything stays on your device. This policy explains what we collect when you create an account or use online features, why, who helps us run the service, and the choices you have. “We” means Andrew Vikuk (“Daymap”). Questions: vikukpost@gmail.com.
The short version
- As a guest, your planner never leaves your device.
- With an account, your planner is stored on our servers so it can sync between your devices. Only you (and people you explicitly share a board or list with) can read it.
- When you use the assistant or voice notes, the text or audio needed for that request is sent to our AI provider to produce the answer. It is not used to train models.
- We don’t sell your data, and we don’t show ads.
- You can export your data any time and delete your account in the app; deletion removes your cloud data.
What we collect
Account information
Your email address, an optional display name, and a securely hashed password — or, if you sign in with Google or Apple, the basic profile information they share (name and email).
Your planner
When you’re signed in we store what you put into Daymap so it can sync: tasks, lists, calendar events, boards and cards, habits, notes, focus time and planner settings. Preferences that only affect one computer (window, zoom, start-up options) stay on that device. Cover images stay on your device.
Links and files
Links you add to tasks and cards are saved with them. Files you attach (images, audio, video and documents; a Pro feature) are stored privately with your account, so you and the people you share that board or list with can open them. We count their total size to apply your plan’s storage allowance.
Assistant and voice
When you send the assistant a message, we send your message, the relevant part of your planner (for example today’s tasks and events) and the assistant’s working steps to our AI provider to generate a reply. For voice notes we send the recording for transcription; we keep the text you choose to send, not the audio. We record how much of your plan each request used (counts and token totals, not the content) to apply plan limits and to understand costs.
Calendar connections (optional)
If you connect a Google or Microsoft calendar, we store an access token for that connection and sync the events of the calendars you choose, both ways, so they appear in Daymap and changes you make in Daymap appear there. You can disconnect at any time, which deletes the token and the imported events.
Capture
If you use your personal capture address, emails you forward to it are processed to create tasks (subject, sender, a short excerpt of the body and the date). If you use the browser extension, only what you choose to save (page title, link and any note) is sent.
Shared boards and lists
When you share a board or list, the people you invite can see and (if you allow) edit it, and see your display name and email.
Payments
Subscriptions are processed by Stripe. We receive your subscription status and a customer reference; we never see or store your full card number.
Feedback and support
Messages you send through “Help & feedback”, with the app version and platform, and the email you give for a reply.
What we don’t collect
We don’t use advertising trackers, sell personal data or build advertising profiles.
Why we use it
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Provide your account, sync and backup | Account, planner | Contract |
| The assistant, voice notes, calendar sync and capture | The data each feature needs | Contract |
| Apply plan limits and bill subscriptions | Usage counts, subscription status | Contract |
| Keep the service secure and prevent abuse | Account, request logs | Legitimate interests |
| Answer feedback and support requests | Feedback, email | Legitimate interests |
| Meet legal and tax obligations | Billing records | Legal obligation |
Who helps us run Daymap
| Provider | What they do | Location |
|---|---|---|
| Supabase | Database, file storage, sign-in and server functions | EU (Frankfurt) |
| Vercel | Hosts the Daymap website and web app (sees standard request data such as your IP address) | Global network, United States |
| OpenAI | Assistant replies and voice transcription (API; not used for training) | United States |
| Stripe | Payments and subscriptions | United States / EU |
| Google, Microsoft | Only if you connect their calendar or sign in with Google | Various |
| Apple | Only if you sign in with Apple | United States |
Where data leaves the EU/UK we rely on Standard Contractual Clauses or an equivalent safeguard. Each provider may only use your data to provide its service to us.
Google user data
Daymap’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to show and sync your calendar inside Daymap; we don’t use it for advertising, don’t sell it, and humans don’t read it unless you ask us to for support or the law requires it.
How long we keep it
- Your account and planner: until you delete them. Deleted items stay recoverable for 60 days, then are removed.
- Attached files: until you remove them from their task or card, or delete your account.
- Usage counts: up to 24 months, for billing and limits.
- Billing records: as long as tax law requires (typically up to 10 years).
- Feedback: up to 24 months, unless you ask us to delete it sooner.
- Deleting your account removes your account and cloud data immediately; backups held by our providers roll off within 30 days.
Your rights
You can access, correct, export and delete your data — most of it directly in the app (Settings › Data & backup to export; Settings › Account & sync to delete your account). You can also object to or restrict certain processing, withdraw consent where we rely on it, and complain to your local data-protection authority. To exercise a right, email vikukpost@gmail.com.
Security
Data is encrypted in transit and at rest by our hosting provider. Each person’s data is isolated at the database level, calendar tokens are stored encrypted, and the AI provider key never reaches your device.
Children
Daymap isn’t meant for children under 16, and we don’t knowingly collect their data.
Changes
If we change this policy in a meaningful way we’ll tell you in the app or by email before it takes effect.
Contact: Andrew Vikuk, vikukpost@gmail.com