Privacy Policy
1. Who we are
Welcome to Daybridge. This Privacy Policy explains what personal information we collect and how we use it to provide our calendar service, while respecting your privacy. Please read it carefully.
Capitalized terms used in this policy that are not defined here have the same meaning as in our Terms of Service.
Daybridge is designed to help you manage your whole life in one place. Our goal is to help you connect with others, save time, and achieve more.
We are deeply committed to protecting your privacy. We do not run ads, we do not sell your data to advertisers, and we do not use your data to target you with ads from others.
We are Daybridge Software Limited. Our registered address is C/O Passion Capital, Second Floor, Laxmi, The Tanneries, 57, Bermondsey Street, London, England, SE1 3XJ. You can contact our team at hello@daybridge.com. Our Information Commissioner's Office (ICO) registration number is ZA773714.
2. Information we collect and why
We only collect and use your information for specific, legitimate purposes.
- Account Information: We collect your name, email address, and phone number to create and secure your Account. We use your phone number for verification purposes.
- Your Content: We process your calendar entries, notes, and other Content to provide you with the core features of the Services.
- Your Public Profile: Your name, username, and profile picture are public. This helps others recognise you on Daybridge. Your email address and phone number are private by default.
- Discoverability (Finding Friends):
- By Phone Number: We use your phone number to help other users find your Daybridge account if they have your number in their contacts. You can control this in your privacy settings.
- By Contacts: If you grant us access to your device's contacts, we create an obscured (hashed) version of the phone numbers and email addresses in your address book. We upload these hashes to our servers to match you with other Daybridge users you may know, without ever seeing or storing your raw contacts list.
- AI Features: Our AI-powered features, such as creating an event from text you type, run on Amazon Bedrock inside Daybridge's own Amazon Web Services environment. To provide these features, the AI may need to process relevant Content, for example the text you type, your existing schedule, the names of people in your contacts, and potential locations for an event. This Content is processed only within our own environment and is not sent to any other AI service. The companies that make the underlying AI models cannot access your Content, and your Content is never retained by the models or used to train or improve any AI model.
- Location Information: If you grant us access, we use your location to provide more accurate nearby place data, manage your time zone automatically, and display your country and current time zone on your public profile.
- Payment Information: If you subscribe, our payment processor (Apple, Google, or Stripe) securely handles your billing information. We do not store your full card details.
- Usage Analytics: We collect technical and usage data (like IP address, device type, and feature usage) to monitor performance, fix bugs, and improve the Services. This data is anonymised or aggregated where possible.
3. Our legal basis for using your information
Under data protection law, we must have a valid legal basis to process your personal data. We use the following:
- Performance of a Contract: Much of our processing is necessary to provide the Services to you as described in our Terms of Service. This includes creating your account and processing your calendar entries.
- Legitimate Interest: We use your data where it is necessary for our legitimate interests, such as for usage analytics to improve our Services, provided our interests are not overridden by your rights.
- Consent: For certain features, we rely on your consent. This includes accessing your device contacts for discoverability or using your location. You can withdraw your consent at any time through your device or in-app settings.
- Legal Obligation: We may need to process your data to comply with a legal obligation, such as responding to a valid warrant.
4. Who we share your data with
- People You Interact With: We share your public profile information and any Content you choose to share (like an event invitation) with other users.
- Service Providers: We use trusted partners for services like cloud hosting (e.g., Amazon Web Services), payment-processing (Stripe), and providing AI features. They are contractually bound to protect your data and only use it to provide services to us.
- Legal Authorities: We will only share your data with law enforcement when we are legally compelled to do so by a valid warrant or court order.
- In Case of a Business Sale: If Daybridge is sold, your information may be transferred to the new owner to ensure service continuity.
5. Connecting other services (e.g., Google)
If you connect a Google account to Daybridge, our use of data received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We only use Google user data to provide and improve the features you have asked for, such as syncing your calendars, contacts, and tasks.
- We do not transfer Google user data to third parties except as necessary to provide these features, to comply with the law, or as part of a business sale as described in this policy.
- We do not use Google user data for advertising.
- We do not allow humans to read Google user data unless you have given permission, it is necessary for security purposes (such as investigating abuse), it is necessary to investigate or fix a technical problem (such as a sync issue affecting your account), it is required to comply with the law, or the data has been aggregated and anonymised.
- We never use Google user data, whether raw, aggregated, or derived, to create, train, or improve any artificial intelligence or machine learning models, and we never transfer it to any AI service that would do so.
6. How we protect your data
We protect all personal data we hold, and we apply the strictest safeguards to sensitive data such as your calendar Content, your contacts, and the credentials that connect other services (like Google) to Daybridge:
- Encryption in transit: All data moving between your devices, our servers, and connected services is encrypted in transit using TLS.
- Encryption at rest: Personal data stored in our databases and backups is encrypted at rest.
- Credential protection: The access tokens (OAuth tokens) for accounts you connect are stored securely, encrypted at rest, and are used only by our systems to provide the features you have enabled. They are never shared with third parties.
- Access controls: Access to production systems is restricted to a small number of authorised staff on a least-privilege basis, protected by strong authentication, and logged.
- Data minimisation: We only collect and process the data needed to provide the Services, and we delete your personal data when you delete your Account, as described in section 8.
- Incident response: We monitor our systems for security issues. If a breach affects your personal data, we will notify you and the relevant supervisory authority as required by law.
7. International data transfers
Daybridge is a global service. Your information may be transferred and processed in countries outside of your own, including the UK, EU, and USA, where our service providers operate. When we transfer your data internationally, we use legal mechanisms like Standard Contractual Clauses to ensure it remains protected to the standards required by laws like GDPR. We also use technical measures like encryption to protect your data.
8. How long we keep your information
We keep your personal information for as long as your Account is active. If you delete your Account, we will delete your information within a reasonable timeframe, unless we need to retain it for legal or regulatory reasons. Please note that when you share Content (like an event) with other users, a copy is shared with them. This means we cannot delete it from their accounts. Anonymised data may be kept indefinitely for statistical purposes.
9. Children’s privacy
Our Services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you are under 16, you may not create an Account or use our Services. If we learn we have collected information from a child under 16, we will take steps to delete that information promptly.
10. Cookies and similar technologies
We use cookies (small text files stored on your device) and similar technologies to help operate our Services. For example, we use them to remember your login details and understand how our website and apps are being used. You can control cookies through your browser settings and other tools, but if you block certain cookies, you may not be able to register, login, or use certain features.
11. Your data protection rights
You have other rights under applicable information protection laws. This includes the right to:
- access your personal information. You can make a subject access request;
- correct incomplete or inaccurate information we hold about you. Most of the time, you'll be able to make any corrections you need in your account settings. If you are having trouble correcting something – you can get in touch with us for help;
- ask us to delete the personal information we hold about you;
- ask us to restrict our handling of your personal information;
- ask us to transfer your personal information to a third party;
- object to how we are using your personal information; and
- withdraw your consent to us handling your personal information. If you'd like to withdraw your consent, you'll need to close your Daybridge account.
You also have the right to send a complaint to the supervisory authority in your region.
Please bear in mind that privacy law is complicated, and these rights might not be available to you all of the time.
12. Questions and comments
We'd love to hear your feedback and suggestions on our privacy policy. If you have any questions, including any requests to exercise your legal rights, please contact us at hello@daybridge.com.