Last updated 29 September 2026

Privacy

The short version

You can use Daybook without an account: then everything stays in your browser and nothing is sent to us. If you sign in with Google, your tracker is stored on our server so it can sync between your devices. If you turn on Google Drive backup, a copy is written to your own Drive. We don't sell data, show ads, or run analytics.

What we store when you sign in

• From Google: your name, email address, profile picture and a Google account identifier. We use them to recognise you and show who's signed in.
• Your tracker: run settings, goals, daily entries and notes, reflections, energy ratings, projects, reminders and the device subscriptions used to deliver reminders.
• For Drive backup (only if you turn it on): an encrypted Google refresh token, the ID of the “Daybook” folder and file we created, and the time of the last backup.
• A session cookie that keeps you signed in. No tracking or advertising cookies.

Google Drive

Drive backup uses the drive.file permission, which lets Daybook see and change only the files it created (the “Daybook” folder and the backups in it). It cannot read anything else in your Drive. Backups run on our server a few minutes after your data changes, and when you press “Back up now”. You can turn backup off in Setup, or remove Daybook's access at myaccount.google.com/permissions. Files already in your Drive are yours and stay there.

Use of Google user data

Daybook's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to sign you in and to write and read your own backups. It isn't used for advertising, isn't sold, isn't used to train AI models, and isn't read by people except when you ask us for help, it's needed for security, or the law requires it.

Where it's kept

On a server we operate (Hostinger, Bangalore, India), in a database that isn't reachable from the internet, over HTTPS. Refresh tokens are encrypted at rest.

Deleting your data

In Setup, “Delete account” removes your account and all tracker data from our server immediately and revokes Drive access. “Erase everything” clears the tracker but keeps the account. Signed out, clearing your browser's site data removes the local copy.

Contact

Questions or requests: Praveen Saxena, privacy@reauris.com.