Legal

Privacy Policy

How Daily24 collects, uses, and protects your data across every module — routines, Salat & Sawm, workouts, notes, planner, health, and budget.

Last updated: September 5, 2026

1. Information we collect

Account information: when you sign up, we collect your name, email address, and a securely hashed password. We never store your password in plain text.

Content you create: routines, prayer (Salat & Sawm) logs, workout sessions and templates, body metrics, notes, weekly/monthly/yearly plans, health data such as medications and symptoms, budget categories and expenses, currency preferences, and calendar events — all the data you enter while using Daily24.

Technical information: your device timezone (used to show the correct day boundaries for your tracked data), and standard request metadata such as IP address and user agent, used for security and abuse prevention.

Usage analytics: anonymized, aggregated page-view and performance analytics via Vercel Analytics. This does not identify you personally and is not linked to your account content.

2. How we use your information

To provide the core service: storing and displaying your daily data back to you, computing streaks, and syncing your day view to your timezone.

To authenticate you: your session is maintained via a signed, HTTP-only JWT cookie so you stay signed in securely between visits.

To maintain and improve Daily24: aggregated, de-identified usage patterns help us understand which features are useful and where the product needs work.

To communicate with you: only for account-related notices (e.g. password resets or important service updates) — never for unsolicited marketing.

3. How we store and protect your data

All personal data is stored in a MongoDB database. Passwords are hashed with bcrypt before storage and are never recoverable in plain text.

Every piece of user-owned data (routines, notes, workouts, health records, budget entries, and everything else) is scoped to your account and is not visible to other users.

Authentication uses a signed JWT stored in a secure, HTTP-only cookie, which mitigates common client-side token theft (e.g. XSS-based cookie access).

We take reasonable technical and organizational measures to protect your data, but no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

4. Cookies

Daily24 uses a small number of first-party cookies required for the app to function: an authentication cookie to keep you signed in, and a timezone cookie so your dashboard reflects your local day.

We do not use third-party advertising or tracking cookies.

5. Data sharing

We do not sell your personal data. We do not share your tracked content (routines, health data, budget, notes, etc.) with third parties for advertising or marketing purposes.

We may share data with infrastructure providers strictly necessary to run the service (e.g. our database and hosting providers), each bound to protect your data and use it only to provide their service to us.

We may disclose information if required by law, or to protect the rights, property, or safety of Daily24, our users, or others.

6. Your rights and choices

You can access, update, or delete the data you've entered directly from your dashboard at any time.

You may request a copy of your data, or full deletion of your account and associated data, by reaching out through our Contact page.

If you are located in a jurisdiction with data protection laws such as the GDPR or CCPA, you may have additional rights over your personal data, including the right to object to or restrict certain processing.

7. Data retention

We retain your account and tracked data for as long as your account remains active, or as needed to provide the service to you.

If you delete your account, we remove your personal data and associated records within a reasonable period, except where retention is required to comply with a legal obligation.

8. Children's privacy

Daily24 is not directed at children under the age of 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "last updated" date at the top of this page. Continued use of Daily24 after changes take effect constitutes acceptance of the revised policy.

10. Contact us

If you have any questions about this Privacy Policy or how your data is handled, please reach out via our Contact page.