1. Data that stays on your device
Tasks, notes, pinned items, lists, routines, brainstorm ideas, boards, scanned documents, downloaded files, settings and app-lock information are stored on your device. We cannot access them.
- Backup: the file you create with "Back up" is saved where you choose. If Android's own backup is enabled, app data may also be included in the Android backup in your Google account; this is managed by Android and Google.
- App lock: your passcode is kept on the device only as an irreversible hash. The lock protects the screen; data on the device is not encrypted.
- Document scanning: photos are taken with your phone's camera app and processed on the device. The app does not request the camera permission.
2. Permissions
- Notifications and exact alarms: for reminders, scheduled on the device.
- Calendar (read/write): only when you use "Export to calendar", to write tasks to your device calendar and update a previous export. Calendar data never leaves the device.
- Internet: for shared lists, purchases, update checks and downloads you start yourself.
3. Shared lists (optional)
When you share a list, or join a list through a share link, the following data is stored on servers in Europe through Google's Firebase services (Cloud Firestore, Firebase Authentication, Cloud Functions, Firebase Hosting):
- List content: the shared list's title, items, check state, who checked an item, and modification times.
- Display name: the name you enter when sharing or joining. It is shown to the other people on the list; the sharer's name is shown in the invite to whoever opens the link.
- Account: to join, an anonymous account is created automatically on your device; it contains no email or name. To share, you are asked to sign in with Google; your Google account's email address and profile name are then kept in Firebase Authentication. Your email address is never shown to other people on the list.
- Share link: contains an unguessable random key, is valid for 30 days, and can be revoked by the sharer at any time.
- Notifications: if you allow notifications, your device's Firebase Cloud Messaging address (token) and app language are stored so we can tell you when someone adds an item to a shared list. You can turn notifications off per list; addresses unused for 90 days, and this device's address when you delete your account, are deleted.
Anyone with a valid link can view the list's title and items on a read-only web page, even without the app. That page shows no personal information other than the list content (no name, email or account ID) and uses no cookies. Revoking the link or deleting the list closes the page and joining immediately.
If someone without the app goes from that page to Google Play, the link's key is passed to the app through the Google Play Install Referrer, so that on first launch the app offers to join the same list. It is used only for this purpose, once.
Firebase App Check with Google Play Integrity is used so that only the genuine Daykeep app can access the server; we do not store a device identifier as part of this check. To understand how the feature is used, the server keeps only daily totals (e.g. "links created today"); these contain no person, device, list or link identifiers.
4. Purchases
Premium subscriptions and purchases are made through Google Play Billing; we never see your payment details. RevenueCat is used to verify purchase status; a randomly generated anonymous user ID and purchase records are sent to RevenueCat. (RevenueCat privacy policy)
To understand whether Premium offers work, only daily totals are kept on the server (e.g. "how many times the Premium screen was opened today", "how many free and Premium devices opened the app today"). To increase these totals the app sends only the name of the event; no personal, device or account identifier is sent or stored.
5. Google Play services
The in-app review prompt and update check use Google Play's own interfaces; data processed there is subject to the Google Privacy Policy.
6. File downloads
When you share a link to Daykeep from another app, the file is downloaded directly from that link's server to your device; it does not pass through our servers.
7. Retention and deletion
- Data on your device stays there until you delete it or uninstall the app.
- When you leave a list or are removed, your membership is deleted immediately.
- When the sharer deletes a list, it closes for everyone and is permanently deleted from the server within 30 days. Expired links are deleted 30 days after they expire.
- Server logs (error and access logs) are kept for Google Cloud's default retention period.
- To delete your cloud account and shared data, see the account deletion page or write to elitplanner@gmail.com.
8. Sharing and sale
Your data is not sold, not used for advertising and not transferred to third parties. Google (Firebase) and RevenueCat act only as processors providing the services described above on our behalf. When you share a list, its content is shared, by your choice, with the people you give the link to.
9. Children
Daykeep is not directed at children under 13 and does not knowingly collect personal data from children.
10. Your rights and contact
You have the right to access, correct or request deletion of your data. For questions: elitplanner@gmail.com. If this policy changes, the current version is published on this page and the effective date is updated.