Privacy Policy

Who is responsible for your information

DayHarbor is responsible for the personal information described in this policy. This policy applies to the DayHarbor mobile apps, web app, public website, and support interactions.

You can contact us or submit a privacy request through Help & Feedback in the app. Account controls are also available in the web app.

Information we collect

The information we process depends on the features you use.

• Account and authentication information, including your email address, authentication provider, internal user identifier, and session information.
• Content you add, including brain dumps, tasks, notes, projects, priorities, estimates, schedule blocks, planning preferences, and generated plans.
• Focus information, including selected tasks, session timing, completion status, and focus history.
• Calendar information from calendars you select, including calendar name, event title, start and end times, all-day status, and availability.
• Feedback and support information, including ratings, comments, contact email, and related account and device context.
• Technical and usage information, including app version, platform, device and installation identifiers, feature events, diagnostics, crashes, and performance data.

Where information comes from

We receive information directly from you, from your device when you grant a permission, from the authentication provider you choose, and automatically when you use DayHarbor.

If you sign in with Apple or Google, that provider sends us the information needed to authenticate your account according to your provider settings.

Calendar and device permissions

Calendar access is optional. If you enable it, DayHarbor reads selected calendar events and syncs the planning fields listed above to your DayHarbor account so your plan can stay consistent across devices. DayHarbor does not edit or delete events in your device calendar.

Notification and Focus Protection permissions are also optional. Notification preferences and locally scheduled reminders may be stored on your device. On supported devices, the operating system applies the app or category restrictions you select for Focus Protection. You can change these permissions in system settings.

How we use information

We use personal information to:

• Create and secure your account, authenticate you, and keep your data synchronized.
• Provide planning, project, calendar, focus, notification, and account features.
• Generate AI planning results when you request them and validate those results before presenting them.
• Answer support requests and deliver feedback you choose to send.
• Monitor reliability, diagnose crashes, measure feature use, protect the service, and prevent fraud or abuse.
• Comply with legal obligations and enforce our Terms of Use.

Legal bases where applicable

Where data-protection law requires a legal basis, we process information as needed to provide the service you request and perform our agreement with you; for our legitimate interests in securing, maintaining, and improving DayHarbor; with your consent where we ask for it; and to comply with legal obligations.

You may withdraw consent or device permission at any time. This does not affect processing that already occurred lawfully. Some features cannot work without the information they require.

AI-assisted planning

DayHarbor sends the information needed for an AI planning request to our secure backend and AI provider only when you ask for features such as brain-dump planning or project breakdown. The response is checked against DayHarbor's expected structure before it is used.

AI-generated priorities, estimates, and schedules can be wrong. You control whether to use the result. DayHarbor does not use AI to make decisions that produce legal or similarly significant effects about you.

Analytics and diagnostics

DayHarbor uses limited product events to understand whether features work and where reliability needs improvement. Analytics identify an account by its DayHarbor user identifier rather than by task content.

We do not intentionally include task titles, notes, brain-dump text, email addresses, or calendar content in analytics event properties. Crash and performance reports may include technical information about the app, device, operating system, and failure. DayHarbor does not use personal information for targeted advertising or sell personal information.

Service providers and disclosures

We disclose information only as needed to operate DayHarbor, follow your instructions, protect the service, or comply with law. Depending on the feature and platform, providers include:

• Supabase for authentication, database hosting, and secure backend functions.
• OpenAI for user-requested AI planning and task breakdown.
• Google Firebase for analytics, crash reporting, performance monitoring, and messaging.
• Vexo for limited product analytics.
• Resend for delivering feedback and support messages.
• Vercel and Expo for website, app, and supporting infrastructure.
• Apple and Google for authentication, app distribution, operating-system permissions, and platform services.

International processing

DayHarbor and its providers may process information in countries other than the one where you live. Where required, we rely on recognized safeguards for international transfers, such as adequacy decisions or contractual protections.

Retention

We retain account content while your account is active so we can provide the service. Other records are kept only as long as reasonably needed for the purpose collected, including security, diagnostics, support, fraud prevention, and legal obligations.

When you delete your account, we begin deleting or de-identifying the account and associated DayHarbor data. Limited information may remain temporarily in backups or where retention is required for security, legal, or dispute-resolution purposes.

Your choices and privacy rights

Depending on where you live, you may have the right to:

• Access and receive a copy of your personal information.
• Correct inaccurate or incomplete information.
• Delete your information or restrict certain processing.
• Object to processing based on legitimate interests.
• Withdraw consent and manage optional device permissions.
• Receive portable information where the right applies.
• Complain to your local data-protection authority.

Account deletion

You can permanently delete your account from Account settings in the mobile or web app. If the mobile app is unavailable, use our public deletion page to sign in to the web app and complete the same request.

Deleting the app from your device does not delete your account. Account deletion is permanent and removes access to your tasks, plans, projects, focus history, preferences, and other associated DayHarbor data, subject to the limited retention described above.

Security

We use technical and organizational safeguards designed to protect personal information, including encrypted transport, authentication, access controls, and row-level authorization for user-owned data. No service can guarantee absolute security, so keep access to your email and sign-in provider secure and contact us if you suspect unauthorized access.

Changes and contact

We may update this policy when DayHarbor or applicable requirements change. We will update the date above and provide additional notice when a change materially affects your rights or how we use information.

For privacy questions or requests, use Help & Feedback in the DayHarbor app. We may need to verify your account before acting on a request.