Privacy, in plain words
Dayloop is a personal planner. Your day is yours.
What's stored
Your account (name, email and profile picture from the sign-in you chose) and what you put into Dayloop: tasks, reminders, tags, notes, subtasks, what you ticked off and focus sessions. If you add another calendar by its secret link, that link is stored encrypted and used only to fetch the calendar; its events are kept only as a cached copy. Settings like alarm sound and text size stay on your device only.
Where
In a private Postgres database (Neon, Singapore region), served by Vercel over HTTPS. Sign-in tokens from Google are encrypted at rest. Only your account can read your plans.
What's never done
No ads, no analytics or tracking scripts, and no selling your data. No AI looks at your plans unless you press an AI button (see below). Cookies are only used to keep you signed in.
Connected calendars (Google, Outlook)
If you connect a Google or Microsoft account, Dayloop gets read-only access to the calendars you can see there. It reads events from about a month back to six months ahead, keeps a copy (titles, times, places and short descriptions) to show beside your plans, and refreshes it when you open Dayloop. It never changes, shares or sells them, never uses them for ads or AI, and keeps the sign-in encrypted. Removing the calendar in Settings deletes the copy and, for Google, withdraws Dayloop's access; you can also remove access in your Google or Microsoft account settings. Dayloop's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
AI helpers (Dayloop Plus)
Only when you press an AI button (Brain dump, Plan my day, Spread out, Break into steps) or ask Ask Dayloop a question does Dayloop send what that helper needs to Google's Gemini API: the text you wrote for a brain dump; the names, lengths and tags of the tasks involved and your free times; or, for a question, the question with a summary of your plans from about two weeks back to two months ahead (titles, times, tags, what's done, short excerpts of notes, your backlog, events from calendars you added by link, and focus totals). Calendars connected by signing in to Google or Microsoft are never included. Gemini sends back a suggestion or an answer, and nothing in your plan changes unless you accept it. Dayloop keeps a count of AI uses (not the text) to apply daily limits. Google handles what it receives under its Gemini API terms.
Astrology (Dayloop Plus)
If you turn on astrology, your birth date, time and town (with its coordinates and time zone), the tradition you chose and any answers under About you are saved with your account, encrypted with a key of their own, so they work on every device. Remove my birth details (Settings → Astrology) or deleting your account erases them. Your good and tough days are worked out on your device. Only when you press Read my day or Read my year does the server work out that day's or year's facts and send Google's Gemini API those facts (signs, stars, lunar day and the like, never your birth date, time or town); only if you choose Personal readings does it also send your About you answers, your most-used tags and, for a day reading, the titles and times of that day's plans. It gets a few sentences back. As with other AI helpers, only a count of uses is kept on the server; the readings you asked for are kept on your device (the newest 60) so they open again without another use, and Remove my birth details clears them too. Birthplace search runs on Dayloop's own server over GeoNames' list of towns, so what you type isn't sent anywhere else.
Background photos
The built-in photos come with Dayloop. With the Shuffle background, Dayloop also shows photos from Unsplash and Pexels, which your device loads straight from their image services (images.unsplash.com, images.pexels.com), so they see your IP address the way any website you load pictures from does. Nothing about you or your plans is sent; which photo you see comes from a number your device picks, not from anything about you. Pick a built-in photo or Paper in Settings → Theme to stop loading it.
Notifications
Reminders ring inside Dayloop. If you allow notifications, they also reach your device when Dayloop is closed: each one travels end-to-end encrypted through your browser's own push service (Google for Chrome, Apple for Safari, Mozilla for Firefox), which can't read it.
Take it with you, or delete it
Settings → Backup exports everything as a file at any time. Settings → Delete my account permanently removes your account and everything in it straight away.