Privacy Policy
The short version: DayDesk never stores your personal data on our servers. Your tasks, calendar events, finances, journal entries, and notes live in your own Google Drive or Microsoft account — not ours. We are a display layer, not a data warehouse.
Who we are
DayDesk is a personal productivity dashboard built and operated as an independent product. You can reach us at privacy@daydesk.app with any questions about this policy.
What data we collect
DayDesk collects the minimum information necessary to operate:
- Account information — your email address and name when you create an account. This is stored in our authentication provider (Supabase) to manage your login.
- Usage data — basic analytics such as page visits and feature usage to help us improve the product. This data is aggregated and never tied to identifiable individuals.
- Error logs — anonymous technical logs to help us identify and fix bugs.
What data we do NOT collect
We never collect, store, or access:
- Your tasks, to-do items, or projects
- Your calendar events or meeting details
- Your journal entries or notes
- Your financial data, bank statements, or spending records
- Your health or fitness data
- Your Google Drive files beyond the specific spreadsheets DayDesk creates
- Your email content
- Your AI API keys (these are stored locally in your browser only)
How your data is stored
All personal productivity data you create in DayDesk is saved directly to your own accounts:
- Google users — data saves to a Google Sheet called "DayDesk Data" in your own Google Drive. You own it and can view, edit, or delete it at any time independently of DayDesk.
- Microsoft users — calendar and task data is read directly from your Microsoft account and never duplicated to our servers.
- Local storage — your app preferences, configuration, and cached data are stored in your browser's local storage on your device.
Google and Microsoft permissions
DayDesk requests the following permissions from Google:
- Google Drive (drive.file) — to create and update the DayDesk data spreadsheet in your Drive. We can only access files DayDesk creates, not your entire Drive.
- Google Calendar (read-only) — to display your upcoming events. We cannot create, edit, or delete calendar events.
- Google Tasks — to sync your to-do list with Google Tasks if you choose to enable this.
- Profile (userinfo.profile) — to display your name and profile picture in the app.
DayDesk requests the following permissions from Microsoft:
- Calendars (read-only) — to display your Outlook calendar events.
- Tasks (read/write) — to sync your to-do list with Microsoft To Do.
- Profile (User.Read) — to display your name in the app.
You can revoke DayDesk's access to your Google account at any time at myaccount.google.com/permissions. For Microsoft, visit account.microsoft.com/privacy.
AI features
DayDesk offers an optional AI briefing feature. If you choose to use it, you provide your own API key from Anthropic, OpenAI, or Google. This key is stored only in your browser's local storage and is never transmitted to or stored on DayDesk servers. AI requests are routed through our Cloudflare Worker as a technical proxy to avoid browser restrictions — the key is used to authenticate with the AI provider and is not logged or retained.
Third-party services
DayDesk uses the following third-party services:
- Supabase — for user authentication. Stores your email and account creation date only.
- Cloudflare — for hosting and API proxying. Subject to Cloudflare's privacy policy.
- OpenWeatherMap — for weather data. Your city name is sent to retrieve weather. No personal information is shared.
- Google News RSS — for news headlines. Only your selected news topics are used in requests.
Cookies
DayDesk uses minimal cookies strictly necessary for authentication (to keep you logged in). We do not use tracking or advertising cookies.
Children's privacy
DayDesk is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@daydesk.app.
Your rights
You have the right to:
- Access the personal information we hold about you
- Request deletion of your account and associated data
- Revoke DayDesk's access to your Google or Microsoft account at any time
- Export your data (your DayDesk Google Sheet contains all your data)
To delete your account or request data deletion, email privacy@daydesk.app.
Changes to this policy
We may update this policy from time to time. We will notify users of material changes by updating the date at the top of this page. Continued use of DayDesk after changes constitutes acceptance of the updated policy.
Contact
Questions about this privacy policy? Email us at privacy@daydesk.app.