Daybreak privacy

Daybreak is a daily planner. Anyone can create their own account by signing in with Google. Each account is private to the person who owns it. Daybreak is run by Caleb Kolstad, and you can reach him at caleb@kolstadmedia.com.

The short version: your planner is yours. Daybreak does not sell it, show ads, or share it with anyone.

What Daybreak stores

• Your account: your name, email address and profile photo from Google, when you joined, and when you last used Daybreak.
• What you put in: tasks, subtasks, notes, goals, habits, daily and weekly check-ins, timers, channels, contexts and settings.
• Connected services, if you connect them: the Google calendars you choose and their events, and the Asana or ClickUp tasks assigned to you, so they can show up next to your plan. If you link Asana or ClickUp, Daybreak can also create, update, complete or delete tasks there when you do those things in Daybreak.
• Access keys: the tokens that let Daybreak reach Google, Asana or ClickUp for you. They are encrypted (AES-256-GCM) before they are stored and are never shown in the app or included in exports.
• Sign-in and safety: one cookie that keeps you signed in, and short-lived counts of sign-in attempts by network address to slow down abuse. There are no ad or tracking cookies.

How Google user data is used

When you sign in with Google and connect Google Calendar, Daybreak asks for:

• Your basic profile (name, email address, photo) to create and sign in to your account.
• Access to Google Calendar, to show your calendars and events beside your tasks and to create, move or remove the events you schedule from Daybreak (timeboxes). It does not change events that Daybreak did not create.

Daybreak's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms:

• Google user data is used only to provide and improve the planner features you can see in Daybreak.
• It is never sold, never used for advertising, and never used to build profiles of you.
• It is not transferred to anyone else, except as needed to run Daybreak (the hosting and database providers below), to keep it secure, or when the law requires it.
• No person reads it, unless you ask for help and agree to it, it is needed to investigate abuse or a security problem, or the law requires it.
• It is not used to train AI or machine learning models.

Who can see your data

Only you. Signing in with Google opens the Daybreak account with that same email address, and nothing else. A Google account you connect as an extra calendar never lets anyone into your planner. The Daybreak admin can see a list of accounts (name, email, when each joined and was last active, and which services are connected) so the service can be kept healthy. The admin screens do not show anyone's tasks, notes, goals or check-ins.

Service providers

Daybreak runs on Vercel (hosting) and Supabase (database). They store and process data only to run Daybreak. When you connect Google, Asana or ClickUp, Daybreak talks to those services for you, and their own privacy policies apply to what they hold.

Your choices

• Disconnect Google, Asana or ClickUp at any time in Settings. You can also remove Daybreak's access from your Google Account permissions.
• Export everything in your Daybreak as a JSON file from Settings, Account.
• Delete your account from Settings, Account. Daybreak revokes its Google access and deletes your account and everything in it right away. Copies may remain in the database provider's routine backups for a limited time, until those backups expire. Daybreak can only delete its own copy of an Asana or ClickUp access token, so revoke that token in Asana or ClickUp too. If you cannot sign in, email caleb@kolstadmedia.com from the address on your account and it will be deleted for you.

How long data is kept

Your data stays as long as your account does. Sign-in attempt counts are cleared after two days. When you delete your account, your data is deleted with it.

Children

Daybreak is not meant for children under 13, and does not knowingly collect their data.

Changes

If this policy changes, the date at the top changes with it. Questions or requests: caleb@kolstadmedia.com.