Privacy Policy

Days Become is built and run by one independent developer based in the United States, operating as a sole proprietor rather than a company. That person is the data controller for the information described here, and can be reached at hello@daysbecome.com. This policy covers both the website and the iPhone app.

A few things are specific to the app:

• Camera: if you take a photo to put on a day, the app asks for camera access. Photos you take are added to your calendar the same way as photos you pick from your library; nothing is captured in the background.
• Saving to your photo library: when you export a calendar as an image, the app asks for permission to add it to your library. It only ever adds; it does not read your existing photos.
• Removing a photo's background: the app uses Apple's built-in on-device image analysis, so this needs no network access at all. On the website the same work happens inside your browser, though the browser does fetch the model that does it; see "How your information is shared" below.
• Settings stored on the device: small preferences such as your chosen background and fonts are kept on the device itself.

We use your information to provide and operate the Service, save your calendars, authenticate your sign-ins, process subscriptions, respond to support requests, keep the Service secure, and improve it.If you are in the EEA or the UK, the legal bases we rely on are: performing our contract with you (running your account, storing your calendars, handling subscriptions); our legitimate interests in keeping the Service secure and understanding how it is used; complying with legal obligations (such as keeping payment records); and your consent where the law requires it, which you can withdraw at any time.

We do not sell your personal information, and we do not share it for advertising. We share it only with the service providers that make Days Become work:

• Supabase: database, authentication, and file storage.
• Vercel: application hosting, content delivery, and privacy-friendly web analytics.
• Resend: sends the emails the Service needs to send you, which means your sign-in links and the welcome email. It handles your email address to do that.
• Our payment provider (Stripe): to process subscriptions bought on our website.
• Apple: to process subscriptions bought in the iPhone app, and to tell us that a subscription is active so we can unlock your account. Apple's handling of your payment is covered by Apple's privacy policy, not this one.
• img.ly: on the website only, and only if you use the background-removal tool. The first time you use it your browser downloads the model that does the work from img.ly's content delivery network, so that company sees the request the way any website you open does, including your IP address. Your photo is not part of that request and never leaves your browser.

We may also disclose information if required by law or to protect the safety and rights of users and the public.

Your profile is private or public, you choose which when you set up your account, and you can change it any time in Settings. While it is private, only you can see your calendars.Making it public means any signed-in visitor can open your profile and view the calendars on it. The photos on a public calendar are served from ordinary web addresses that do not themselves ask for a sign-in, so that they can be cached and load quickly. Anyone who has one of those addresses can open that image directly.Switching back to private is not retroactive. We stop serving your photos to anyone else straight away, but a copy already cached in someone's browser or on our content delivery network can stay reachable at its address for a while afterwards, and the same is true after you delete your account. Publishing on the internet is hard to take back, here as anywhere: treat anything you have made public as public.

We use essential cookies only: the ones that keep you signed in, a flag recording that you have finished setting up your account, and a short-lived cookie remembering where you were headed when we asked you to sign in. We use no advertising cookies, and our analytics are cookieless by design.The website also keeps some things in your browser's own storage rather than on our servers: your editor preferences, such as the background and fonts you picked and your export options. That data stays on your device and clearing your browser's site data removes it.

Days Become is operated from the United States, and the providers listed above store and process information there. If you use the Service from the EEA or the UK, your information is transferred to the United States. We rely on the safeguards our providers commit to for those transfers, such as the standard contractual clauses in their data-processing terms.

We keep your information for as long as your account is active.When you delete your account, we do it in one pass while you wait: any website subscription is cancelled and its payment profile deleted, every file you uploaded is removed from storage, and your account and everything attached to it (profile, calendars, settings, subscription records) is deleted. It is done when the request finishes, not queued for later.Three things outlive that by their nature: our payment provider keeps its own invoice records to meet its legal and accounting duties, our providers' backups and technical logs age out on their own schedules, and cached copies of anything you made public expire as described above.

We take reasonable measures to protect your information. No method of storage or transmission is 100% secure, so we can't guarantee absolute security. Keep your email account secure, since it controls access to Days Become.

You can access and update your profile, change your privacy settings, and delete your account at any time from Settings. Depending on where you live, you may also have the right to ask for a copy of your personal information, to correct it, to have it deleted, to object to or restrict how we use it, and to receive it in a portable form. To make a request, email us at the address below and we will answer within the time your law allows.If you are in the EEA or the UK and you think we have handled your information badly, you can complain to your local data protection authority, and in the UK to the Information Commissioner's Office. We would rather you told us first so we can put it right.If you are in California: we do not sell your personal information and we do not share it for cross-context behavioural advertising, and we will never treat you differently for exercising any of these rights.

Days Become is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll delete it.

We may update this policy from time to time. If we make material changes, we'll notify you (for example, by email or in the app). The "Last updated" date above reflects the latest version.

Questions about your privacy? Email us at hello@daysbecome.com.