Privacy Policy

DayCrate is run by AryaStack Technologies, 7-27-9, Srirama Nilayam, Maha Lakshmi Nagar, Road Number 2, Tadepalligudem, West Godavari, Andhra Pradesh 534101, India. We decide how your personal data is used, so we are the “Data Fiduciary” for it.

We use your data only for the purposes below, and only with your consent or where the law allows it without consent (for example, to keep the service secure or meet a legal duty).

• Account: your name, email address, password (stored only as a one-way hash), and profile photo if you add one. Used to create your account, sign you in and contact you about it.
• Your plans and notes: days, priorities, tasks, time blocks, focus sessions, quick notes, daily reviews, habits, decisions, projects and labels you create. Used to provide DayCrate to you.
• Family care (only if you use it): names, relationships, dates of birth, health notes, medicines, doses, health readings, appointments and vaccinations of the people you add. Used to remind and alert your family. You can only add a person after confirming you are their parent or legal guardian, or that they have agreed.
• Connected calendars (only if you connect one): events and calendar details from Google or Microsoft. Used to sync your schedule.
• Payments (only if you subscribe): your plan, invoices and payment status. Card and bank details are entered with our payment provider; we never see or store them.
• Security data: IP address, browser and device type, sign-in history and an audit log of account actions. Used to protect your account, detect misuse and investigate incidents.
• Support requests: messages and files you send us. Used to help you.
• AI features (off unless you turn them on): the parts of your data a request needs, such as task titles or a prescription photo you choose to scan, are sent to our AI providers. Search indexes of your notes are kept on our own servers. Your data is not used to train AI models. Turning AI off deletes your AI memory, insights and conversations.
• Analytics (off unless you allow it): pages and screens you use, collected with Google Analytics on the website (cookies, IP address) and through our server on mobile (an anonymous app ID). Used to understand which features are used.
• Notifications (mobile): a push token for your device, used to send reminders you asked for.
• Error reports: technical details when something crashes, used to fix bugs. Screen recordings are only captured around an error, with all text and images masked.

We do not sell your personal data or use it for advertising. We share it only with service providers who process it for us under contract, and only what they need:

• DeepSeek (China): AI text and image processing, only when AI features are on.
• TypeSafe AI: AI decision scoring, only when AI features are on.
• Razorpay (India) and Stripe: payments, only if you subscribe.
• Resend: sending emails such as sign-in codes and reminders.
• Google and Microsoft: sign in with Google, and calendar sync if you connect a calendar.
• Google Analytics: website analytics, only if you allow it.
• Expo, Apple and Google: delivering push notifications to your phone.
• Sentry: error reports.
• S3-compatible file storage: files attached to support requests.

Some of these providers process data outside India, including in the United States and, for DeepSeek, China. We only transfer data to countries the Government of India has not restricted, and only the data each provider needs.

You must be 18 or older to create a DayCrate account. Parents and guardians can keep records for their children in family care; those records are only added after the parent or guardian confirms who they are and consents. We do not track children, show them ads, or build profiles of them.

• Your account and content: until you delete your account. Deletion has a 30-day grace period, after which your account and content are erased, including families where you were the last member and files you uploaded.
• AI memory, insights and conversations: deleted as soon as you turn AI features off.
• Security logs: kept for one year, as the DPDP Rules require, then deleted. When you delete your account, they are unlinked from you.
• Expired sign-in sessions and codes: deleted daily.
• Invoices and payment records: kept as long as tax and accounting laws require.

• Access: download a copy of everything we hold about you from Settings → Privacy & Data, free on every plan.
• Correction: edit your details in the app, or ask us to correct anything you can’t change yourself.
• Erasure: delete your account from Settings → Delete Account.
• Withdraw consent: turn off AI features or analytics, remove people from family care, or delete your account, at any time. Withdrawing doesn’t affect what was already done.
• Nominate: name someone to exercise these rights for you if you die or become unable to. Email us their details from your account email.
• Grievances: contact our Grievance Officer (below). We respond within 30 days.
• Complain to the Board: if we don’t resolve your grievance, you can complain to the Data Protection Board of India.

Data is encrypted in transit (HTTPS), passwords are hashed, two-factor authentication is available, and staff access is restricted and logged. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires, including what happened and what you can do.

We use cookies that are needed to keep you signed in. Google Analytics cookies are only set if you allow analytics, and you can change that in Settings → Privacy & Data.

If we change this notice in a way that matters, we will ask you to review and accept it the next time you open DayCrate.

Grievance Officer, AryaStack Technologies: somasekhar@aryastack.com. Postal address: 7-27-9, Srirama Nilayam, Maha Lakshmi Nagar, Road Number 2, Tadepalligudem, West Godavari, Andhra Pradesh 534101, India.