Last updated 20 September 2026
DayHQ is a personal productivity app. It stores the tasks, habits and focus sessions you create so they are available on your devices — and nothing else.
There is no advertising, no analytics, no tracking, and no third-party marketing SDK in this app. We do not sell or share your information, and we do not build a profile of you.
This policy explains exactly what DayHQ collects, why, where it is held, and how to get it back or delete it. It applies to the DayHQ mobile app and to getdayhq.com.
DayHQ is operated by Jaber Alenezi, an individual developer based in Kuwait, who is the data controller for the purposes of the UK and EU GDPR.
For anything in this policy, including a request to access or delete your data, write to privacy@getdayhq.com.
| Data | Why |
|---|---|
| Email address | It is how you sign in. DayHQ emails you a one-time code; there is no password to store. |
| Account identifier | A random ID that links your content to your account. |
| Display name | Shown in the app. Optional, and whatever you choose to type. |
| Language and time zone | So the app appears in your language and habit days start and end at the right moment. |
This is the content of the app. It is stored so that it survives reinstalling and appears on your other devices. It is not analysed, mined or used for any purpose other than showing it back to you.
If you subscribe, DayHQ records that your account has an active subscription and when it expires.
Payment is handled entirely by Apple or Google. Your card number, billing address and payment details go to them, never to DayHQ — we cannot see them.
This is worth stating explicitly, because many productivity apps do collect these:
Habit reminders are scheduled on your device by your device. Your phone holds the schedule and shows the reminder at the time you set.
No reminder is sent from a server, DayHQ holds no push token for your device, and no one — including us — can tell whether a reminder was delivered or opened. If you turn notifications off in your system settings, nothing about the rest of the app changes.
DayHQ keeps a full copy of your tasks, habits and focus sessions in a local database on the device, so the app works with no connection and stays fast. Your sign-in token is kept in the device's secure storage — the iOS Keychain or the Android Keystore — not in ordinary app storage.
Deleting the app removes the local copy.
Your account and content are stored with Supabase, which provides the database and authentication used by DayHQ. Supabase acts as a processor on our instructions and does not use your data for its own purposes.
The database is hosted in Sydney, Australia.
Access is enforced per row at the database level, so one account cannot read another's data even if the app were modified.
DayHQ does not sell your data, does not share it for advertising, and does not disclose it to anyone except the service providers required to run the app:
| Provider | What they handle |
|---|---|
| Supabase | Database and sign-in. Holds your account and content. |
| Email delivery provider | Delivers your one-time sign-in code. Receives your email address and nothing else. |
| Apple & Google | Distribute the app and process subscription payments. They provide us with subscription status only. |
We may disclose information if required by law, but only what is actually required, and we will tell you unless legally prevented from doing so.
Under the UK and EU GDPR, our lawful bases are:
We do not rely on consent for any processing, because we do none of the things that would need it.
Your content is kept until you delete it or delete your account.
When you delete something in the app it is first marked as deleted so the change can reach your other devices, then permanently removed. When you delete your account, everything belonging to it is removed within 30 days.
Email privacy@getdayhq.com from the address on the account and we will delete the account and everything in it within 30 days. You do not need to explain why, and we will not try to talk you out of it.
Wherever you live, you can ask us to:
Email privacy@getdayhq.com. We will respond within 30 days, and there is no charge.
If you are in the UK or EU and think we have handled your data badly, you may complain to your national data protection authority. We would rather you told us first so we can fix it.
If you are in California: we do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the preceding twelve months. Exercising any right above will never result in a worse service.
DayHQ is operated from Kuwait and its database is in Australia, so your data will in most cases be held in a different country from the one you are in.
Australia has no adequacy decision from the European Commission or the UK government. Transfers of UK and EEA data are therefore made under the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, which form part of our data processing agreement with Supabase.
DayHQ is not directed at children and is not intended for anyone under 13 — or under 16 where local law sets that age. We do not knowingly collect data from children. If you believe a child has created an account, write to privacy@getdayhq.com and we will delete it.
Traffic between the app and the server is encrypted in transit with TLS. Data is encrypted at rest by the hosting provider. Your sign-in token is held in the device's secure hardware-backed storage, and access to your rows is enforced by the database itself rather than only by the app.
No system is perfectly secure. If a breach ever affects your data, we will tell you and the relevant regulator within 72 hours of becoming aware of it.
If this policy changes materially, we will update the date at the top and notify you in the app before the change takes effect. We will not apply a materially different use of data already collected without asking you first.
Jaber Alenezi — DayHQ
privacy@getdayhq.com