Privacy Policy

Dayly (getdayly.tech). “We” and “us” below mean Dayly. For anything privacy-related, email contact.hopup.lol@gmail.com.

• Your account: your email address. With Google, also the name and profile photo Google shares when you sign in. With email, your password is stored hashed by our auth provider and we never see it. If you choose to verify with X, your X username.
• What you enter: your handle, time zone, the numbers you log each day, captions, links to your best posts, products you list, and your settings.
• Accounts you connect (optional): a GitHub token and the commit messages and pull request titles from the repos you pick; a Stripe, Dodo Payments or Polar key and the revenue totals it returns; your YouTube channel's public subscriber count; your Threads or Instagram username, follower count and the engagement numbers on your own posts. For Stripe and Polar we only accept read-only keys. We never read source code or your customers' personal details.
• Billing: your plan and subscription status. Card details go straight to our payment providers; we never see or store them.
• Waitlist: the email and optional X handle you leave on the landing page.
• Technical data: standard server logs, and the IP address and browser of administrative actions, kept for security.

• To run Dayly: count your streak, draw your cards, show your history and keep connected numbers up to date.
• To write ShipStory drafts: your commit messages and revenue totals are sent to an AI model through Vercel AI Gateway, only to generate your posts.
• To email you: streak reminders and weekly recaps, only if they're switched on. Every email has an unsubscribe link, and you can turn them off in Settings.
• To handle billing, prevent abuse, and answer you when you write to us.

We don't sell, rent or trade your data, and we don't use it for advertising.

Nothing, unless you choose to share it. If you turn on your public page, anyone with the link sees your handle, photo, streak, heatmap and the numbers you haven't hidden. If you opt into the wall, your latest card can appear on our home page. Members of a group you join see your handle, streak and check-ins. You can change all of this at any time.

We rely on a small set of providers, each only for its job:

• Supabase: database and sign-in.
• Vercel: hosting, cookieless page-view analytics, and the AI Gateway for ShipStory drafts.
• Google and X: signing in and verifying your handle.
• Dodo Payments and Polar: payments, as merchant of record, under their own privacy policies.
• Resend: sending email.
• GitHub, Stripe, Dodo Payments, Polar, YouTube, Threads and Instagram: only when you connect them, and only to read the data described above.

Some of these providers store data outside India, including in the United States and the European Union.

Keys and tokens you connect are encrypted (AES-256-GCM) before they're stored. We only accept read-only Stripe and Polar keys; Dodo Payments can't limit keys to read-only yet, so with Dodo we only ever call its read endpoints. Database access is locked to your own rows, and every administrative action is logged.

We keep your data while your account is open. Disconnecting an account deletes its stored key or token right away. If you ask us to delete your account, we erase your data within 30 days, apart from billing records we're required to keep by law.

You can see and change most of your data in the app. Email contact.hopup.lol@gmail.com to get a copy of your data, correct it, or delete your account, and we'll reply within 30 days. Depending on where you live (including under India's Digital Personal Data Protection Act and the GDPR), you may also have the right to object to processing or complain to a data protection authority.

We only use the cookies Dayly needs to work: keeping you signed in and protecting sign-in with X, Threads and Instagram. Your light or dark theme is saved in your browser. There are no analytics, advertising or tracking cookies. We count page views with Vercel Web Analytics, which sets no cookies, doesn't follow you across sites and never sees what you type.

Dayly isn't meant for anyone under 13, and we don't knowingly collect their data.

If we change this policy in a way that matters, we'll update the date above and tell signed-in users before it takes effect.