Privacy Policy

Effective Date: April 15, 2026

Disclaimer: This is a template for informational purposes. Consult with a qualified attorney for legal advice specific to your situation.

Thank you for choosing to be part of our community at DeskDays ("Company," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to the DeskDays mobile application and the deskdays.app website.

1. What Information Do We Collect?

We only collect information that is strictly necessary to provide and improve the core functionality of DeskDays.

a. Personal Information Provided by You:

• Account Information: If you choose to create an account (e.g., using an email address, password, or Sign in with Apple), we collect your email, name (if provided), and authentication credentials.
• Support Data: When you contact us for customer support, we collect your email address and the contents of your message.

b. Information Automatically Collected via Device Permissions:

We will only access this data if you explicitly grant us permission through your device settings:

• Location Data (Always and When In Use): We use background and foreground location data strictly to detect when you arrive at your office to automatically log your office days.
• Calendar Data: We access your calendar to read and write events to sync your office days, PTO, and schedule.
• Reminders Data: We access reminders to help you sync and manage tasks.
• Push Notifications: If permitted, we collect a device token to send you relevant notifications and reminders.

c. Usage and Purchase Data:

• Subscription Information: We partner with a third-party service (RevenueCat) to manage subscriptions and in-app purchases. We do not process or store your payment details directly.
• Usage Diagnostics: We may collect non-identifiable, aggregated crash reports and usage data to improve app stability and performance.

2. Our Legal Basis for Processing

If you are located in the European Economic Area (EEA) or the UK, we process your personal information under the following legal bases:

• Consent: When you grant device permissions (e.g., Location, Calendar).
• Performance of a Contract: To fulfill our obligations under our Terms of Service (e.g., creating your account).
• Legitimate Interests: To improve the application, troubleshoot issues, and ensure security.

3. How Do We Use Your Information?

• Provide the core services of DeskDays, namely tracking office days and syncing with your calendar/reminders.
• Manage user accounts and authentication.
• Process subscriptions and premium features.
• Enhance, improve, and troubleshoot the application.

We do not use your information to build contact databases, for marketing to third parties, or for surreptitiously building user profiles.

4. How Do We Share Your Information?

We do not sell your personal data. We only share information with third parties when necessary to provide our services under stringent data processing agreements.

Our trusted third-party sub-processors include:

• Supabase: Used for secure database storage and user authentication.
• RevenueCat: Used for processing and managing in-app subscriptions.
• Resend: Used to manage support emails and transactional email delivery.

5. International Data Transfers

DeskDays and our servers are located in the United States. If you are accessing the app from outside the United States, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information.

6. How Can You Revoke Consent?

• Device Permissions: You can withdraw consent for Location, Calendar, Reminders, and Notifications at any time via your device Settings.
• Alternative Functionality: If you decline Location services, you can still manually enter your office days within the app.

7. Data Retention and Deletion

We keep your personal information for as long as necessary.

Account Deletion: You can request the total deletion of your account and associated personal data directly within the DeskDays app:

1. Go to the Settings page.
2. Select "Delete Account".

Upon request, your account and all associated data will be permanently deleted from our active databases. Any credentials linking the app to third-party logins (like Apple) will be revoked.

8. Your Regional Privacy Rights

Depending on your location, you may have specific rights regarding your personal data:

GDPR (Europe & UK):
You have the right to request access to and rectification or erasure of your personal data, data portability, restriction of processing, and the right to object to processing.

CCPA/CPRA (California Residents):
You have the right to know what personal information is collected, request the deletion of your personal information, opt-out of the sale of personal information (Note: We do not sell data), and the right against discrimination.

To exercise these rights, please email us at support@deskdays.app.

9. Children's Privacy

DeskDays does not knowingly solicit data from or market to children under 13 years of age (or 16 in certain jurisdictions). If we learn that personal information from underage users has been collected, we will deactivate the account and take reasonable measures to securely delete such data.

10. Updates to This Policy

We may update this privacy policy periodically. The updated version will be indicated by an updated "Effective Date".

11. Contact Us

If you have questions, comments, or wish to exercise your data rights:

Email: support@deskdays.app