Privacy Policy

1. Introduction & Our Privacy Commitment

At DaylyFlow ("we", "our", or "us"), your privacy and trust are paramount. We designed DaylyFlow to help you organize your daily life, cultivate positive habits, and maximize deep focus — not to monetize your private data or sell your personal details to advertisers.

This Privacy Policy explains what information we collect, how it is used, how your local browser storage operates, and the robust security measures we employ across daylyflow.com.

2. Information We Collect

We collect minimal information necessary to deliver a seamless online planning experience:

• Account Information: When you sign up via Google, GitHub, or email, we receive your basic profile data (name, email address, and profile avatar).
• Task & Schedule Data: Titles, descriptions, time blocks, category tags, and priority matrix settings created on your daily timeline.
• Habit & Streak Logs: Habit names, frequencies, completion dates, and streak statistics.
• Device & Preferences: Your selected theme (Dark/Light mode), custom color wheel hex codes, and view preferences saved locally on your device.

3. How We Use Your Information

Your data is strictly utilized to provide and enhance DaylyFlow features:

• To render your daily timeline, weekly calendar, and 365-day annual heatmaps.
• To calculate habit completion percentages and consecutive streak counters.
• To power the interactive AI Planning Assistant and generate smart time-blocked routines upon your direct request.
• To manage your Pro subscription status, authentication security, and customer support inquiries.

4. Local-First Storage & Data Security

DaylyFlow is engineered with a local-first architectural approach. Your immediate daily tasks, habit states, and custom UI preferences are cached securely in your browser's localStorage, allowing lightning-fast page transitions and uninterrupted offline productivity.

When authenticated, cloud sync is conducted over encrypted TLS 1.3 channels. We never store plain-text passwords, and payment processing is handled exclusively through PCI-compliant payment gateways.

5. Third-Party Services & Integrations

We partner only with industry-leading, privacy-conscious infrastructure providers:

• Authentication: Secure OAuth providers (Google, GitHub) and Supabase Auth.
• Calendar Synchronization: Google Calendar API (used solely when you explicitly connect or export your schedule).
• Analytics & Hosting: Privacy-preserving analytics to monitor uptime, page load speed, and error rates without tracking personal identities across websites.

6. Your Rights & Data Ownership (GDPR & CCPA)

You maintain 100% ownership of your schedule and personal data. Regardless of your location, you have the right to:

• Export Your Data: Export tasks, schedules, and habit history in standard JSON or ICS format anytime.
• Delete Your Account: Request immediate, permanent deletion of your account and all associated cloud records.
• Opt-Out: Clear your browser storage anytime via application settings with one click.

7. Contact Our Privacy Officer

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact our dedicated privacy team: