Privacy

Before you have an account

You can talk with our guide on the first screen without an account. What you type there is sent to our AI provider to get an answer. We do not store your conversation.

To stop misuse, we count the replies given per day. For that we keep only a salted hash of your IP address and a number, for two days, and then delete it. The hash cannot be turned back into your address.

When you pick your first colour, Daytone gives your phone a quiet identity without an email, so your daily message and your magazine work. It stores the same things as for any account, listed below. You can add an email later to open the same place elsewhere.

Your photo, your cutout and your cover stay on your phone, with or without an account.

What we store about you

We store this on our servers, linked to your account:

• Sign-in details: your email address, and your Google account name, email and id if you sign in with Google.
• Your profile: first name, city, interface language, the language of your daily message, tone you choose by default, and your hemisphere (worked out from your city).
• Optional details, only if you add them: your birth date, your style words, colours you love or avoid, and things you never wear.
• For each cover: the tone, the shade, the date, the issue number and whether you shared it. We do not store the image or the line on it.
• Taste signals: when you tap Love it, Not me or skip on a part of your message, we store the date, the part, the signal and its tags.
• Your daily messages: the text, tone, occasion, tags, language and the size of the request.
• Your plan: free or Plus, its status, trial and period dates, how you got it, and the payment provider's customer and subscription ids.
• Gifts: if you buy or redeem a gift, the gift code records and redeem attempts.
• Which features you have used: for each of a short fixed list (for example that you opened your full message, or shared a cover) a yes, and how many days you came back. We read only totals across everyone, to learn what people like. No text, photo or colour history is part of it.
• Morning reminder, only if you turn it on: your phone's notification address (a subscription), the time you chose, your time zone and language, your first name and the colour you last chose. You can pause or stop it in Profile at any time, and it stops by itself if your phone no longer accepts it.

What stays on your phone

Your photo and the cutout made from it are processed on your phone and never leave it. The finished cover is drawn on your phone and is not uploaded either.

Your phone keeps a small copy of each cover you save or share, so you can see your history. Your conversation with our assistant for the day is also kept on your phone only.

If you share or save a cover, the image goes where you send it. Your daily message is never part of it.

Who helps us run Daytone

We use these services. They handle data on our behalf:

• Railway hosts the app and its servers (EU West, Amsterdam).
• Supabase provides our database and sign-in.
• Anthropic provides the AI model that writes your daily message and answers your assistant questions. A request contains your first name, city, a weather summary, the date, season and hemisphere, your tone and shade, your message language, your style choices as you filled them in, your birth date if you added it, and the parts of past messages you liked or skipped. It contains no email address, account id, photo, cover or payment detail.
• Open-Meteo gives us the weather for your city. We send it the city name from our servers.
• Stripe takes payments for Plus and gifts. You enter card details at Stripe, and they never reach us.
• Resend sends the emails we send you, such as a gift email or a reminder before a trial ends.
• Google lets you sign in with your Google account, if you choose that.
• A model host serves the file your phone downloads to cut out your photo. It sees your IP address when your phone fetches the file. It never receives your photo.

Cookies and tracking

We use no advertising, no analytics and no tracking cookies. Our fonts are served by us, not by a third party.

We set a few first-party cookies so the app works: one remembers your tone, one your language, one that you have finished setting up (each lasts a year), and the sign-in cookies from Supabase.

Your rights

You can ask to see the data we hold about you, to correct it, to have a copy of it, or to have it deleted. You can delete your data yourself, at any time: in your profile, choose Delete my data.

Deleting cancels any subscription first, deletes your account and the information linked to it, and clears what is saved on your phone. Payment records such as invoices may be kept by our payment provider where the law asks for that.

For access, correction or a copy of your data, write to us at the contact address on this page. If you are in the EU or the UK, you can also complain to your data protection authority.

How long we keep it

We keep your data until you delete your account. There is no automatic expiry. Our providers keep their own records for the periods in their policies.

Data outside your country

Some providers above may process data outside your country. TODO_TRANSFERS: the owner and a lawyer confirm the transfer rules and safeguards for each provider before launch.

Changes to this page

When we change this page, we update the date at the top. If a change matters to you, we tell you in the app.