Privacy policy

Daychek keeps your lists, routines, habits, money, home, wardrobe and wellbeing notes in one app. This page says exactly what we store, where it goes, how long we keep it and how you control it.

Who is responsible

The controller of your personal data is [CONTROLLER NAME / ADDRESS]. Contact: support@daychek.com.

What we store, feature by feature

When you use Daychek with an account, the app keeps your data on your device and syncs it to our server. On the web, the device copy lives in your browser's storage.

Reminders are scheduled on your device and shown as local notifications; they are not sent through our server.

Home-screen widgets (iPhone and Android) keep a copy of what they show on your device only: the habits, today's routines and shopping-list lines from the areas you track (on iPhone, in storage shared only by the app and its widgets). A tap on a widget is saved on your device and synced by the app like any change you make in it; widgets send nothing to us or anyone else, and signing out clears their copy. Health reminders are never shown in widgets.

Routines shared in a family

On the Family plan you can share a routine with your family or assign it to members: everyone does it, whoever does it first, or you take turns. Family members who can see a routine see its title and details, when it is due, whose turn it is, and who completed it and when (by display name). Our server sends a routine and its completions only to the accounts allowed to see it. Everyone in a family sees the display names of the other members (never their email addresses; only the family owner sees those) so that routines can be assigned.

Other family members never see your cars or fuel log, your health routines unless you assigned or shared them, or routines you neither shared nor assigned. When someone leaves the family or is removed, is no longer assigned, or you stop sharing, the routine is removed from their devices. The routines of someone who leaves the family stay theirs.

Family rules

To keep Family fair, our server keeps a history of each family: who joined it and when, who left and when, and whether they left on their own, were removed by the owner or the family ended. It uses this to apply the rules in the terms: you can join a different family once every 12 months, and an owner can remove at most 2 members in any 12 months. It also stores how many extra seats an owner has. To check that the owner and a new member are in the same country, it works out each person's country from the shops they linked on the map; nothing new is collected for this, and when a country isn't known the check is skipped.

Once a day our server also looks for families that look unusual, for example members who share nothing after 30 days together, members whose linked shops have nothing in common, or many joins and removals. It only flags them for the service owner, who checks them by hand in the admin panel and notes what they found. A flag never removes anyone, changes a plan or sends a message on its own.

For community prices a family counts as one household (see Community prices above). A join record is kept while you are in that family and deleted 12 months after you leave it; a removal record is deleted 12 months after the removal. Flags are kept while the family exists. When you delete your account, your join records and the removals you made are deleted; if an owner removed you, that removal stays only as a time, without any link to you, so the owner's limit stays correct. Your own join and leave records are in your data export; removal records and flags are not, because they name other people or are the service owner's review notes.

Sharing prices with the community

Sharing is off by default. The app asks once, the first time you log a price at a linked shop, and you can change your answer at any time in Settings → Privacy. Guest accounts can't share. Switching sharing off stops new reports at once. Reports you already shared stay part of the combined prices, still without your name. Deleting a price you logged also deletes its report. When you delete your account, the link between your reports and your account is removed, so they become fully anonymous. Reports are deleted one year after the day they describe.

Reporting a wrong price

If you are signed in with an account (not as a guest), you can report a community price as wrong: a different price, not sold here, the wrong product or something else, and you can add the correct price. We store the report with your account id, the product's barcode, the shop, the reason, the price you entered and the time. A report at once makes that price count less and flags it for review; when 3 different people report it, it is hidden until new prices are reported. The owner of Daychek reviews reported prices in the admin panel and can hide a price, show it again or correct it; each such change is logged. Nobody else sees who reported a price. To stop abuse, you can report a product at a shop once a day, and there are limits per account and per IP address. Reports are deleted 1 year after they were made. When you delete your account, the link between your reports and your account is removed. Your reports are in your data export.

Shopping trips

When you tap Start shopping or Done — heading out, or tick items off a list at one of your shops, Daychek records that shopping trip: which of your own shops (as you named it), the list, when it started and ended, your device's time-zone offset (for the weekday and time of day), how many items went in the cart, what they cost, the order you ticked them in, and the barcodes in your cart. We use this to show your trip times and totals, to learn the order of your shop so we can offer to sort your list along it, to suggest a basket or trolley, and (Premium) to show insights such as your quickest times and fastest shop. We never use your location or GPS, and we don't record anything while Shopping is switched off in What you track. Trips are yours only. You can delete a trip at any time, and all of them with Delete Shopping data or by deleting your account. They are in your data export.

Saved places and drive times

If you track Car, you can save places such as Home or Work. A saved place is a name you choose and a town, village or bus stop you pick from a list made from OpenStreetMap data; we never ask for or record your GPS position or your address. To show drive times, the best order for several shops, the nearest bus stop to a shop and fuel stations on the way, our own server works out routes on OpenStreetMap map data, between the place or shop you pick and your shops that you linked to a shop on the map. No other company receives your places or routes. We keep a cache of drive times between map places and shops that is not linked to any account, and we don't log places, shops or routes. Drive times are map estimates without live traffic. While Car is tracked, a shopping trip also records where the drive started, when you left, the map distance, whether it counts the way back, the fuel cost and which car you drove. While Car is switched off in What you track, the app stores and sends none of this. Saved places are yours only. You can delete a place at any time, and all of them by deleting your account. They are in your data export.

Anonymous cart-size answers

After a trip you can tell us whether the suggested basket or trolley was the right size. That answer adjusts future suggestions for you. If you share community prices (Settings → Privacy) and have an account, it also adds one anonymous "bigger / smaller than expected" vote for each barcode that was in your cart. We combine these votes to improve size estimates for everyone, and only use a product's result once at least 3 different people have contributed. No one else can see your votes or link them to you. When you delete your account, your votes stay only as anonymous inputs with no link to you. Turning off community sharing stops new votes.

Chek points and leaderboards

If you share prices, Daychek keeps a list of the Chek points you earned: what each was for, when, and at which shop. It shows your points, level, badges and prizes, and ranks contributors for the monthly and yearly prizes.

Leaderboards are opt-in (Settings → Privacy). Other people see only the nickname you choose and your points, never your name or email. Prize winners who aren't on the leaderboard are listed as Anonymous contributor. The owner of Daychek sees contributors' email addresses in the admin panel, only to hand out prizes and stop abuse.

When you delete your account, your points, nickname, badges and prizes are deleted. A shop you suggested stays on the map without your name. Your points are in your data export.

Your price country

When you first switch on sharing prices, Daychek asks for your price country: the one country where you share prices and earn Chek points. It suggests the country your phone's region setting names, never your GPS position or where you are; you confirm it or pick another country that has community shops. We store the country you chose and when you last set it. You see and change it in Settings → Privacy, at most once every 90 days.

Prices, confirmations, wrong-price reports and shop suggestions are accepted only for shops in your price country, and Chek points, badges, leaderboards and prizes count only there. You can still see community prices in other countries. Points you earned stay in the country where you earned them. While you are a member of a family, the family owner's price country counts for you; your own choice is kept and counts again if you leave.

Your phone's region is sent once, with your choice, only to compare it with the country you picked; it is not stored. If it, or the country of the shops you linked on the map, is different from your price country, our server flags your account for the service owner. A flag stores your price country, the reason (phone region or linked shops), when it was raised and, once the owner has checked it by hand in the admin panel, when that was and the note they wrote. A flag never changes your country, your points or your plan on its own. The owner of Daychek can also let you change your country before the 90 days are over; this is logged.

Your price country and when you set it are in your data export; flags are not, because they are the service owner's review notes. A checked flag is deleted 12 months after it was resolved. When you delete your account, your price country and your flags are deleted.

Referral program

Guest accounts can't take part. If you invite friends or join with a code, Daychek stores your personal code, the link between the two accounts (who referred whom, and when) and a count of how often your link was opened, without recording who opened it.

To stop people from referring themselves, the app sends a random id that is made for each app install. We store only a keyed one-way hash of it, at most a few per account, and use it only to stop self-referral and to give the welcome month once per person. For accounts in the referral program we also keep a keyed one-way hash of who paid (the email used at web checkout, or the store's original purchase id), to spot a person paying for their own referral.

From RevenueCat and LemonSqueezy we receive the payment status of a referred subscription: paid, refunded or cancelled, the period and the plan, never card details. We keep the rewards and a log of every change to them.

The person who invited you sees you only as Friend 1, Friend 2 and so on, with your plan and the reward status, never your name or email. The person you invited sees only that they joined with a code. The owner of Daychek sees the email addresses of both accounts in the admin panel, only to check rewards and stop abuse.

We use this data to run the program (contract) and to prevent fraud (legitimate interest). It is kept until you delete your account. When you do, your code, the referral links and the install and payer hashes are deleted. The person who invited you keeps only anonymous reward counts (months and dates), so their limit of 12 months a year stays correct. Log entries lose the link to your account. If you got the free welcome month, the hash of the install id that got it is kept with no link to any account, so the month can't be claimed again on that phone. Your referral data is in your data export.

Who else handles data

Some of these companies are outside the European Economic Area and handle data under their own terms and safeguards. We use no other services with your data. Drive times, bus stops and fuel stations are worked out on our own server from OpenStreetMap data, so no other company receives your places.

Why we may use it (legal bases)

• To provide Daychek to you (GDPR Art. 6(1)(b), contract): your account, sync, sharing, backups, purchases and the referral program.
• Your explicit consent (Art. 9(2)(a)): mood and cycle data, and health check-ups and appointments.
• Your consent (Art. 6(1)(a)): sharing your prices with the community.
• Keeping the service safe (Art. 6(1)(f), legitimate interest): limiting sign-in attempts, keeping community prices free of abuse (one report per product, shop and day, and how reliable a reporter's prices have been) and correct (wrong-price reports), stopping self-referral and referral fraud (hashed install and payer ids), applying the family rules (family history and flags), checking price countries (price-country flags) and error logs.

How long we keep it

We don't keep an access log of requests to Daychek. The server keeps technical error logs to fix problems.

When you delete your account, every row it owns is deleted in one step, together with your profile picture and wardrobe photos. This includes your routines with their completions and assignments, the times you completed other people's routines, your cars and your fuel log, your saved places, and the times you ticked off list items assigned to you. Community price reports you shared stay, without any link to you. Copies in backups disappear when those backups expire (14 days).

How we protect it

• All traffic uses HTTPS. Passwords are stored only as bcrypt hashes.
• Every request for your data is checked against your account. Other people can't read it or link to it, except the lists you share, the share links you make and the routines you share with your family (see above).
• Deleting your account needs your password, a fresh Google or Apple sign-in, or a sign-in in the last few minutes.
• The database has no connection to the internet; only our server reaches it.
• Sign-in, password reset, background removal, export, shop search, community prices and referral codes are rate-limited.

Your rights

• Access and portability: Settings → Privacy → Export my data downloads everything we hold about your account as a JSON file.
• Correction: change anything in the app; it syncs.
• Deletion: Profile → Delete account in the app, or delete it here.
• Withdraw consent for health data: Settings → Privacy → Health data.
• Stop sharing prices: Settings → Privacy → Share my prices with the community.
• Restriction and objection: write to support@daychek.com.
• Complaint: you can complain to the data protection authority where you live or work.

Children

Daychek is not meant for children under 16.

Changes

When this policy changes, the date at the top of this page changes with it.