Privacy policy

DayNotch is a habit, quit-streak and recording app. It is local-first: everything you enter is stored on your phone, and the app works without an account. If you choose to sign in, your data is also synced to our server so that you have a backup and can use more than one device.

This policy explains what that means for your data. It covers the DayNotch apps for iPhone and Android and the website at daynotch.com.

Who is responsible

TechWright Labs is the controller of your personal data. You can reach us at [email protected].

What we collect

If you use DayNotch without an account

Nothing you enter leaves your phone. Your habits, quits, check-ins, recordings and notes are kept in a database on the device. We cannot see them. If you delete the app, that data is deleted with it.

If you sign in

You sign in with Apple or with Google. We then store the following on our server.

• Account details. Your email address and your name, as Apple or Google give them to us, and the identifier that Apple or Google use for your account. If you choose Apple's "Hide My Email", we receive the relay address instead of your real one. We never receive your Apple or Google password. Accounts that were created with an email address and a password, before sign-up was limited to Apple and Google, also store a one-way hash of the password.
• What you track. The names, colours, icons, schedules and reminder settings of your habits; the names and start moments of your quits; your check-ins, skips and their times; relapses you record; and any notes you write on them.
• Recordings. Any numbers you choose to log with a habit, with the label and unit you gave them, the time of each entry and any note. This can be information about your health. The names you give your quits can be too.
• Device details. For each phone you sign in on: whether it is an iPhone or an Android phone, when it last synced, and a one-way hash of the token that keeps it signed in. If you allow notifications, we also store a push token and an installation identifier so we can tell that phone when there is new data to sync.
• Shared links. Only if you turn on a link for a quit. See Shared links.

Collected automatically

• Server logs. When the app or your browser contacts our server, we log the request: the time, the address requested, your IP address and your browser or app version. Email addresses, tokens and passwords are removed from logs.
• Error reports and timing data. If our server fails while handling a request, a report of the failure is sent to our error monitoring service. It describes the failure and the request that caused it. The same service also receives timing measurements for a sample of about one request in ten, so that we can find slow parts of the service. We have not enabled the option that attaches personal details to these reports.
• Website cookie. The website daynotch.com sets one strictly necessary cookie. It holds a security token that protects forms and, if you sign in on the website, keeps you signed in. We do not use advertising or analytics cookies.
• Website sign-in page. The sign-in page on daynotch.com loads the sign-in buttons from Google and Apple. When you open that page, your browser contacts them directly and they receive your IP address. The other pages of the website load nothing from third parties.

What we do not collect

The app contains no advertising or analytics software and does not track you across other apps or websites. We do not collect your location, contacts or photos. Reminders are scheduled on your phone; the text of a reminder is not sent to us or to anyone else. Sync notifications carry no content from your habits, only a signal that new data is available.

Shared links

If you are signed in, you can turn on a link for a quit and send it to anyone. Links are off until you turn one on.

• What the link shows. The quit's name, how long it has been going and the day it started. The page counts to the second, so anyone with the link can work out the time the quit started, or the time of your last relapse, and your phone's time zone. It never shows your notes, your other habits or quits, or your email address. If you record a relapse, the count on the page starts again from it.
• Who can see it. Anyone with the link can open it. Apps you paste the link into, such as messengers, may fetch the page and its preview image to show a preview. The page asks search engines not to index it.
• Display name. A name is shown on the page only if you typed one when you shared.
• What we store. A random code that forms the link, the display name if you typed one, your phone's time zone so that the start day is shown correctly, how many times the page has been opened, and three card images that the app makes for the link. The card images are stored with Cloudflare R2.
• Stopping a link. You can stop a link at any time from the quit's screen in the app. A link also stops when you archive the quit, and every link stops when you delete your account. When a link stops, its card images are deleted from our storage and the page says the link was turned off. Copies of the preview image that apps have already fetched, or that Cloudflare's network has cached, can remain for some time after that.

Why we use it, and our legal basis

• To provide sync and backup. We use your account details and what you track to keep your devices up to date. The basis is our contract with you, the Terms of use.
• Health information. Where what you sync is information about your health, we process it on the basis of your consent, which you give by choosing to sign in and sync. You can withdraw it at any time by signing out and deleting your account. The app keeps working on your phone without an account.
• To keep the service secure and working. We use logs, error reports and timing data to find faults and to prevent abuse. The basis is our legitimate interest in running a reliable and safe service.

We do not use your data for advertising, profiling or automated decisions. We do not sell your data.

Where your data is stored

Our server and database run on Amazon Web Services in Frankfurt, Germany (region eu-central-1). The database is encrypted at rest and all connections to it use TLS. Traffic between your phone and our server is encrypted with HTTPS. The card images of shared links are stored with Cloudflare R2 in its European Union jurisdiction.

Who processes data for us

We use the following companies. Each one only receives what it needs for the job described.

• Amazon Web Services hosts the server, the database, its backups and the logs, in Frankfurt.
• Cloudflare provides DNS and network protection for daynotch.com, and stores the card images of shared links in Cloudflare R2. Requests pass through Cloudflare, which sees IP addresses and request details.
• Sentry receives server error reports and timing data.
• Expo delivers sync notifications. It receives your phone's push token and a content-free "new data" signal, and passes it to Apple or Google for delivery.
• Apple and Google provide sign-in and deliver notifications to your phone. They act under their own privacy policies.

Some of these companies are based in the United States and may process data outside the European Economic Area. Where they do, the transfer is covered by the EU–US Data Privacy Framework or by standard contractual clauses.

How long we keep it

• Account and synced data are kept until you delete your account.
• Items you delete or archive. When you delete a check-in, recording or relapse, it is marked as deleted so that your other devices remove it too. The marked record stays on our server until you delete your account. Habits and quits can be archived but not yet deleted one by one; to erase one from our server, delete your account or write to us.
• Shared links. A link's card images are deleted from our storage when the link stops; copies already cached elsewhere are described under Shared links. The record of a stopped link (its code, display name and view count) stays until you delete your account, so the old address keeps saying that the link was turned off.
• Backups are kept for 7 days. Deleted data can remain in a backup for that long before it is overwritten.
• Server logs are kept for up to 90 days.
• Notification delivery records are removed about seven days after delivery.
• Error reports and timing data are kept for up to 90 days.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, object to our use of it, and ask for it in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to [email protected] from the email address on your account. We answer within one month.

If you are in the European Union, the United Kingdom or Switzerland, you also have the right to complain to the data protection authority of the country where you live.

Deleting your account

To delete your account and everything stored on our server, write to us as described under how to delete your account. We delete it within 30 days. Deleting your account removes your account details, everything you synced and your device records from our server. Data on your phone stays there until you delete the app or the dataset.

Children

DayNotch is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of this page. If a change is significant we will tell you in the app before it takes effect.

Contact

Questions about privacy: [email protected].