Privacy Policy
This policy covers the Dashday app (iOS/macOS) and the website dashday.io. Controller: mediawaves services GmbH / privacy@dashday.io.
1. Summary
- Todos are stored on your device by default.
- Free optional backup (CSV) to iCloud or Google Drive — your files.
- Optional sync (Dashday Plus) stores tasks in our Supabase project.
- Optional in-app purchases / subscriptions (Dashday Plus) go through Apple; billing and cancellation via your Apple ID.
- Dictation uses Apple speech recognition, preferably on-device.
- We do not sell data or use ad trackers.
- You can permanently delete your sync account in the app settings (including server-side todos).
2. Data we process
Local (app): task titles, notes, due dates, completion state, recurrence, ordering — in SwiftData on device (including the App Group for Share/Siri).
Account & sync (optional): email and auth via Supabase Auth; with active Dashday Plus, your todos in the todos table with row-level security (your user only).
Dashday Plus (optional): purchase and management via Apple (StoreKit). We receive subscription status from Apple to enable sync; Apple processes payment details.
Backup (optional): iCloud folder you choose, or Google Drive OAuth with drive.file scope to upload a CSV into a Dashday folder in your Drive.
Dictation (optional, iOS): microphone and speech recognition to create task text. Dashday does not run its own speech servers.
Website: standard host/CDN logs may include IP, user agent, and time. No analytics cookies for tracking.
3. Purposes & legal bases
Providing app features, optional sync/backup at your request, and keeping the service secure. Where GDPR applies: Art. 6(1)(b), (f), and/or consent for optional services.
4. Processors
- Supabase — auth and todo sync (if enabled).
- Google — Sign-In / Drive upload (if you enable Google backup).
- Apple — platform services, optional speech, iCloud (if chosen).
- GitHub Pages — hosting this website.
We do not share data for advertising.
5. Retention
Local data until you delete it or reset the app store. Synced data until you delete todos or request account deletion. Cloud backups remain under your control in iCloud/Drive.
6. Your rights
Access, correction, deletion, restriction, portability, and objection where applicable. Delete your sync account and server todos in the app under Settings → Delete Account. Contact privacy@dashday.io. You may lodge a complaint with a supervisory authority.
7. Children
Dashday is not directed at children under 13 (or the applicable minimum age).
8. Changes
We may update this policy. The date at the top reflects the latest revision.