privacy

Account information. When you sign in with Apple, Google, or email, we collect your email address and a unique account identifier to create and secure your account. If you use Apple's "Hide My Email," we only receive Apple's relay address. Authentication is handled by our provider, Supabase.

Your content. Daybreak stores the content you create so it persists across sessions: your routine(s), intentions, gratitude entries, journal/notes, custom routine steps, completion history, and preferences (such as your name and chosen morning vibe). This is saved locally on your device and synced to our cloud (Supabase), tied to your account.

Location (for weather). To show local weather, we determine your approximate location. By default this is estimated from your IP address using third-party lookup services; if you grant location permission, we use your device's approximate coordinates instead. These coordinates are sent to OpenWeather to fetch conditions, and your city and coordinates are stored in your settings. We do not use precise, continuous, or background location.

Usage analytics. We use Umami, a privacy-focused, cookieless analytics tool, to understand aggregate, anonymous usage (for example, which routine steps are viewed). It does not use tracking cookies, does not build a profile of you, and does not track you across other apps or websites.

Reminders. If you enable morning reminders, they are scheduled locally on your device. We do not send push notifications from a server.

We use the information above to: create and secure your account; save and sync your routine and entries; show local weather; send the local reminders you enable; and understand, in aggregate, how the app is used so we can improve it. We do not sell your personal information or use it for third-party advertising.

Your data is stored on your device and with the following service providers ("subprocessors"), each acting on our behalf:

• Supabase — authentication and cloud database (stores your account and synced content)
• Apple / Google — sign-in, when you choose those methods
• OpenWeather — weather conditions for your area
• ipapi.co, ipwho.is, GeoJS — approximate location from IP (weather only)
• Umami — anonymous usage analytics
• Vercel — web hosting

Data may be processed on servers in the United States. By using Daybreak, you understand your information may be transferred to and processed there.

We keep your account and synced content until you delete it or delete your account. Anonymous analytics are retained in aggregate.

• Access / correct: Your content is visible and editable in the app.
• Delete your data and account: You can delete your account and its data from within the app (Settings). This removes your synced cloud data and signs you out. You may also email us at the address below to request deletion.
• Location: Weather is optional; you can decline location permission and the feature simply won't run.

Depending on where you live (e.g., the EU/UK or California), you may have additional rights to access, delete, or port your data, or to object to certain processing. Contact us to exercise them.

We protect your data in transit with encryption (HTTPS) and rely on our providers' security practices. No method of storage or transmission is 100% secure, but we work to protect your information and encourage you to secure your device with a passcode or biometrics.

Daybreak is not directed to children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above, and material changes will be reflected on this page.