Last updated 4 September 2026
Privacy notice
Luminate Digital Group operates the Dayprints website and application. This notice explains how we collect, use, disclose, and retain personal data when you visit Dayprints, create an account, use the application, contact us, or ask for optional updates.
Information we collect
Account and profile information. We process your email address, optional first name, timezone, authentication and security records, settings, and the history of your optional marketing choice. Supabase Auth processes authentication credentials; Dayprints does not store your password in readable form.
Your Dayprints content. The service stores the information you choose to add, such as tasks, notes, schedules and deadlines, reminders and delivery history, habits and logs, focus sessions and presets, planning and reflection entries, progress records, Dayprints, preferences, notification choices, push-subscription data, and account export or deletion requests.
Billing and support information. When you use Plus, Stripe handles payment details and sends Dayprints the customer, checkout, subscription, price, status, billing-period, and invoice information needed to provide and manage access. Dayprints does not receive your full card number or security code. If you send in-app feedback, we process the feedback text, your authenticated account identifier, the served app build, and the browser user-agent, and send that message to the Dayprints operator through Resend.
Usage and technical information. Dayprints records product events and reliability measurements using a pseudonymous identifier, event names, counts, low-cardinality state, app and build information, display mode, and delivery or performance diagnostics. The app browser keeps up to 200 recent event records in local storage and events may be sent to PostHog. We do not intentionally send email addresses, task titles, notes, reflection text, or feedback text to PostHog. Hosting, security, email, payment, analytics, and push providers may also process ordinary request information such as an IP address, user-agent, and timestamps to deliver and protect their services.
Optional updates. If you subscribe to updates, we keep your email address, when consent was granted or withdrawn, and a coarse label for the Dayprints surface where you made the choice. We do not add an IP address, user-agent, or free-text tracking field to that consent record. Unsubscribe links use a random one-purpose token, and Dayprints stores its cryptographic hash rather than the link token itself.
How we use information
We use information to create and secure accounts; store, synchronize, and display your work; deliver requested reminders, notifications, exports, and transactional email; provide trials, billing, invoices, subscription access, cancellation, and refunds; answer feedback and support requests; prevent abuse; diagnose reliability and performance; understand use of the product; and meet legal, accounting, security, and operational duties.
Optional account updates are used only for occasional Dayprints product news. They are separate from transactional messages about your account or actions you request. Withdrawing from updates does not stop password resets, receipts, security messages, reminders, or other service messages. We do not sell personal data.
Website analytics
We may use Google Analytics on the public website to understand visits and which pages are useful. Google Analytics may set or read analytics cookies and process information about your browser or device, pages visited, approximate location, and online identifiers. We configure IP anonymisation where supported and do not send your updates email address to Google Analytics. Article and Start free activity may include the page slug, content type, CTA position, and attributed signup destination; these fixed labels do not contain reader-entered or account data.
Microsoft Clarity may record anonymised usage sessions and heatmaps, including pages opened and where you tap, scroll, or pause. A session recording is a picture of the screen as you used it, so content visible at the time can appear in a recording. We use recordings only to improve Dayprints, and you may ask us to remove yours through the privacy contact below.
Service providers and disclosure
Supabase provides authentication and database storage; Vercel hosts and delivers the service; Resend delivers application email and in-app feedback; Stripe provides Checkout, subscription billing, invoices, refunds, and the customer portal; PostHog receives pseudonymous product and reliability analytics from the app; Google provides public-website analytics; Microsoft Clarity provides session recordings and heatmaps; and the push service selected by your browser or device routes Web Push notifications. These providers process information for the purposes described above and under their own service and data-protection commitments.
Access is limited to people who operate Dayprints and providers needed to run it. We may also disclose information when reasonably necessary to comply with law, respond to lawful requests, protect users or the service, investigate fraud or security incidents, or complete a business transfer subject to appropriate safeguards.
Browser storage and international processing
Dayprints uses necessary authentication cookies and browser storage to keep you signed in, remember preferences, support the installed-app and cached-shell experience, and buffer a small recent analytics and delivery-health record. Analytics providers may use cookies or comparable browser storage. Clearing browser storage may sign you out or reset device-specific preferences. Information may be processed in countries where our providers operate. We take steps intended to require protection comparable to the Singapore Personal Data Protection Act where applicable.
Retention
We keep account information and Dayprints content while the account is active and for as long as it is reasonably needed to provide the service, resolve requests, protect the service, and meet legal or business obligations. Account deletion can require billing and analytics cleanup to finish before Supabase account data is removed. If an in-app deletion request cannot complete, email us at privacy@dayprints.app.
We may retain limited billing, invoice, tax, fraud, security, dispute, and deletion-operation records when reasonably needed or legally required. Stripe may retain payment records under its own obligations. We keep optional-update records only while needed to provide the updates you requested or document a withdrawal, unless a longer period is required for a legal purpose.
Your choices and requests
You can correct profile information and update notification and marketing choices in Settings, unsubscribe through any marketing email, remove a push subscription, export account data in the available formats, and request account deletion in Dayprints. You may also ask to access, correct, explain, or remove personal data, or withdraw consent where it applies, by emailing privacy@dayprints.app. We may need to verify your identity, and legal exceptions may apply. Withdrawing information needed to operate the account can limit or end the service.
Security
We use technical and organizational safeguards intended to protect personal data, including authenticated access, row-level database controls, encrypted connections, server-only secrets, and restricted operator access. No internet service can promise absolute security.
Changes
We may update this notice as Dayprints develops. The date above shows when it was last revised. We will update the notice when collection, use, disclosure, or user choices change materially.
Contact
For privacy questions, complaints, or requests, contact the Dayprints data-protection contact at Luminate Digital Group: privacy@dayprints.app.