Privacy Policy

Daylot is a personal daily task app, built to be quiet and private. We collect as little as possible, and what we do collect is only ever used to make the app work for you. Here's the plain-language version of how it works.

What we keep

Your sign-in. When you sign in by email or with Google, we keep your email address so we can recognise your account. With Google sign-in we also receive your name. We never see or store your password.

Your tasks stay yours.The tasks and notes you write are encrypted on your own device before they ever leave it. They sync between your devices in that scrambled form, which means we can't read them — and neither can anyone else who might come looking. The trade-off of that privacy: please remember your encryption passphrase and keep it somewhere safe, because if it's lost, we have no way to restore your data.

A little usage data. We look at anonymous, aggregate signals — like which pages get used — to understand what to improve. This never includes the contents of your tasks.

Billing. If you subscribe, a trusted payment provider handles the transaction. We only ever see whether your subscription is active — never your card number.

Support chat. On selected public pages, our chat provider, tawk.to, receives basic connection data and anything you choose to send in a conversation. It may use browser storage to keep the conversation working. On your board, it loads only when you explicitly open live chat, and we never send your task content to it.

Cookies, and your choice

We run ads to find people who might like Daylot, so we use a small number of cookies to see which ads actually work. That's the whole purpose — there is no profile being built here, and no cookie ever touches the contents of your tasks.

If you're in the EEA or the UK, none of that runs until you say yes: we ask on your first visit, and until you answer, nothing non-essential is stored. Wherever you are, you can change your mind here at any time, and turning it off takes effect immediately.

How we know which features get used

Once you're signed in, we record which parts of the app you use: that a task was created, that the search box was opened, that the welcome video was closed. Event names and counts, on our own servers, tied to your account. It is how we find out which parts of Daylot are working and which ones people quietly give up on.

Your task content is never part of it. Not titles, not notes, not project names. Those are encrypted and we couldn't include them if we wanted to. When we need to know something about a task we store the shape of it, never the substance: that one had a note attached, that another was 40 characters long. We keep these records for 180 days and then delete them.

This is separate from the ad cookies above, and it is a separate choice. It sets no cookie and stores nothing on your device: it rides the sign-in you already have. If you'd rather we didn't, turn it off and we'll stop.

A short survey for new accounts

In your first two weeks we may ask two questions: how you found Daylot, and what you want it to help with. Answering is optional and you can skip it. Most answers are a tap on a listed option. If none fits, you can type a few words under “Something else”.

Your answers are stored on our servers and tied to your account, and they are not encrypted: the point is that we read them, to learn how people find Daylot and what they need from it. Please leave anything private out of the text box. We keep your answers for as long as your account exists, and they are deleted with it.

What we don't do

We don't sell your personal information. We don't run ads. We don't mine your tasks. There's no business model here that depends on knowing what you're working on — the subscription is the whole model.

Keeping it safe

We use industry-standard encryption in transit and at rest, and we work with established, reputable infrastructure providers who process data only on our behalf and under contract.

Your data, your call

You can export your data or delete your account at any time from within the app. When you delete your account, your associated data is removed. Depending on where you live, you may also have rights to access or correct your data — just reach out and we'll help.

Children

Daylot isn't intended for children under 13, and we don't knowingly collect their data.

Updates

If this policy changes in a meaningful way, we'll update the date at the top. Nothing here is designed to surprise you.

Get in touch

Have a question or a request? Email [email protected] and a real person will reply.