Privacy Policy

DailyDeck LLC ("DailyDeck," "we," "us," or "our") operates the DailyDeck platform at DailyDeck.ai and DailyDeck.io (the "Service"). This Privacy Policy explains how we collect, use, share, and protect personal information when you use the Service.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

DailyDeck LLC is the data controller responsible for your personal information processed in connection with the Service. Contact details are provided below.

2.1 Information You Provide

• Account details (name, email address, and profile image). Authentication credentials are managed by our authentication provider (Clerk) and are not stored by DailyDeck.
• Payment methods and billing addresses, which are collected directly by Clerk's checkout. DailyDeck receives only your subscription status and does not store payment details.
• User Content you upload or enter into the Service.
• Feedback or error reports submitted through the app, and any messages you send us by email.

2.2 Information Collected Automatically

• Limited usage data, such as timestamps for specific product events (for example, when a task is split) and anonymous performance metrics. We process IP addresses only transiently to rate-limit requests and do not store them. We do not profile your device or operating system, and we do not track every page you visit.
• Cookies and local storage for authentication and your preferences, and, where analytics is enabled, for usage measurement.

2.3 Information from Third Parties

• Our payment processor (Clerk) provides subscription and payment status so we can reconcile billing. Our analytics provider (PostHog), where enabled, provides aggregate usage data.
• Our authentication provider (Clerk) shares basic profile information, such as your name and email, so we can create and manage your account.

We use personal information to:

• Provide, operate, and improve the Service and its features.
• Authenticate users, maintain security, and prevent fraud or abuse.
• Process payments, manage subscriptions, and provide customer support.
• Communicate important updates, technical notices, and administrative messages.
• Analyze usage to enhance performance, user experience, and product development.
• Comply with legal obligations and enforce our agreements.

When you use AI features, the relevant task content (such as a task title or note) is sent to our AI provider (Anthropic) to generate suggestions like a priority, a time, or a matching project. These suggestions are advisory: they take effect only when you accept them. We do not sell your content, and we do not use it to train our own models.

Where applicable, we rely on the following legal bases under GDPR/UK GDPR:

• Performance of a contract (to provide the Service you requested).
• Legitimate interests (e.g., to improve the Service, prevent fraud, secure our systems).
• Consent (e.g., for certain cookies/marketing where required).
• Compliance with legal obligations.

We do not sell your personal information. We may share it with:

• Service providers under contractual safeguards. These include Clerk (authentication and billing), Supabase (database and realtime infrastructure), Anthropic (AI analysis of task content you submit to AI features), Inngest (background jobs), PostHog (analytics), Resend (email delivery), and Vercel (hosting).
• Professional advisors (e.g., lawyers, accountants) under confidentiality duties.
• Authorities when required by law or to protect rights, safety, and security.
• Third parties in connection with a merger, acquisition, reorganization, or sale of assets.

If we transfer your data internationally, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms, where required by law.

We protect your information with HTTPS for data in transit and AES-256-GCM encryption for sensitive fields (such as notes, reminders, and goals) at rest, along with access controls and database row-level security. However, no method of transmission or storage is 100% secure.

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete your associated data immediately through cascading deletion. We may retain limited operational logs for security and diagnostics. We do not currently anonymize data in place.

Depending on your location, you may have the right to:

• Access and obtain a copy of your personal information.
• Rectify inaccurate or incomplete information.
• Request deletion of your information (subject to legal exceptions).
• Restrict or object to processing of your information.
• Data portability (receive your data in a structured, commonly used format).
• Withdraw consent where processing is based on consent.

California residents: you may also have rights to know/access, delete, correct, and opt-out of the sale or sharing of personal information, and to limit the use of sensitive personal information, without discrimination.

To exercise your rights, contact us using the details below. We may need to verify your identity before processing a request.

We use necessary and functional cookies for authentication and your preferences. Where analytics is enabled, it may set additional cookies. You can manage cookies through your browser settings.

Some browsers offer "Do Not Track" signals. Our Service does not currently respond to such signals. You can manage tracking via cookie settings as described above.

We use AI to generate task suggestions, such as priorities, timing, and project matches. These suggestions are advisory: they take effect only when you accept them. We do not engage in automated decision-making that produces legal or similarly significant effects based solely on automated processing.

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If we become aware that a child has provided personal information, we will delete it upon account termination.

We may update this Privacy Policy from time to time. If changes are material, we will notify you by email or by posting a notice on the Service. Your continued use after the effective date constitutes acceptance of the changes.

If you have questions or wish to exercise your privacy rights, contact us:

• Email: jacek@dailydeck.io