1. Information we collect. When you create an account, we collect your email and basic profile info. We store the calendar events, goals, notes, checklists, and settings you create in dayleap, plus any customization choices (themes, preferences).
2. Google Calendar. If you choose to connect Google Calendar, dayleap reads your calendar list and event details (titles, times, descriptions, locations, meeting links) and writes events you create, edit, or delete in dayleap back to Google Calendar. This is used solely to keep your calendars in sync, only for calendars you select, and you can disconnect at any time to revoke access.
3. Game data. dayleap includes a small built-in platformer game; if you play it, your high scores and any unlocked cosmetics are saved to your account.
4. Notifications. If you enable browser push notifications, dayleap uses Firebase Cloud Messaging to deliver them, which stores a device-specific token. If you enable email reminders, we use your email solely to send those reminders via our email provider (Resend).
5. How we use your data. Your data is used solely to provide dayleap's features — displaying your calendar, syncing events, and sending reminders you opt into. We do not sell your data or share it with third parties for advertising.
6. Storage. Your data is stored securely with our database provider (Supabase) and dayleap is hosted on Vercel. Access tokens for connected services are stored encrypted and used only server-side to perform the syncing you request.
7. Protection of sensitive data. Some information you put into dayleap, like event details, notes, and goals, may be sensitive because it can reveal things like your location, health or medical appointments, or other personal details you choose to write down. We protect it with HTTPS/TLS encryption in transit, encryption at rest in our database, and row-level access controls so only your authenticated account can read or write your own data. We don't request or store sensitive categories like health records, government IDs, or financial account numbers as part of dayleap's core features, and any third-party processor (Firebase, Resend, Google Calendar) only receives the minimum data needed to do its job.
8. Your control. You can edit or delete your events, disconnect Google Calendar, disable notifications, or delete your account at any time. Deleting your account removes your stored data, including any connected Google account tokens.
9. Changes. We may update this policy from time to time; continued use of dayleap means you accept the changes.
10. Contact. Questions about this policy can be sent to einstein1a2b@gmail.com.