DayCast Privacy Policy

This policy explains, plainly, what DayCast does with your data. It covers both the iPhone/iPad app and the Android app; where the two differ, the section says so.

Who we are

DayCast is built and operated by JC Mobile App Studio LLC, a one-person studio based in Pennsylvania, USA ("we", "us"). We are responsible for the app and for the small amount of data described below that reaches systems we operate. Contact: [email protected].

Short version

• We do not run analytics or crash-reporting SDKs, and there are no ads on any platform.
• Notes, journal entries, tasks, events, voice memos, spending records, net worth data, and PDFs are stored on your device. Sensitive fields are encrypted at rest with AES-GCM.
• On iPhone and iPad we operate no servers for DayCast and receive none of your content. The only copy that leaves your device is the optional iCloud Drive backup, which is encrypted with a password you choose and stored in your own iCloud account.
• On Android, optional cloud sync (off until you turn it on) stores a full copy of your DayCast data in a Google Firebase project we operate. That copy is not end-to-end encrypted. Details below.
• On Android, if you turn on transaction detection, DayCast reads incoming notifications on your phone to spot payment alerts. Details below.
• Some features contact third-party services: weather, place names and maps, stock quotes (iPhone and iPad), and currency rates. These requests carry your location or a ticker symbol, never your content.
• AI features run on your device. We do not send your text to a cloud AI model.
• We do not sell your data or use it for advertising.

What reaches us vs. what third parties receive

Data that reaches systems we operate. On iPhone and iPad, none. On Android, only if you turn on cloud sync: a Firebase sign-in record (an anonymous ID, or your Google account's email address and display name if you sign in with Google) and one snapshot of your DayCast data, stored in Google Cloud Firestore in a Firebase project run by JC Mobile App Studio LLC. Google hosts it for us as our service provider.

Data handled by third parties under their own policies. When you use the features below, the named provider receives the request directly from your device, along with your IP address, as any internet request does. We do not receive a copy.

• Apple (iPhone and iPad): WeatherKit weather, MapKit place names and location search, iCloud Drive backup, iCloud Keychain, App Store purchases. Apple Privacy Policy.
• Google (Android): Firebase Authentication and Cloud Firestore for cloud sync (Firebase privacy information), Google Play Billing, Android system backup, the Android Geocoder for place names, speech recognition, and ML Kit model downloads. Google Privacy Policy.
• Finnhub (iPhone and iPad): stock quotes for the ticker symbols you add. Finnhub privacy policy.
• ExchangeRate-API (open.er-api.com, both platforms): daily currency rates. ExchangeRate-API terms.
• Open-Meteo (Android): weather. Open-Meteo terms and privacy.
• OpenStreetMap (Android): map tiles on the journal map. OpenStreetMap Foundation privacy policy.

Where your data lives

Everything you create in DayCast is stored locally on your device. Sensitive text fields (journal entries, notes, voice memo transcripts, financial records) are encrypted at rest using AES-GCM.

On iPhone and iPad, the encryption key is generated on first launch and stored in iCloud Keychain, so it is available on your other Apple devices signed in to the same Apple ID. Apple end-to-end encrypts iCloud Keychain, and we cannot read it. If iCloud Keychain is unavailable, the key stays on the device. Deleting the app removes the local database; a key stored in iCloud Keychain may remain in your keychain.

On Android, the key is kept in the Android Keystore on the phone. The app's data is also included in Android's own device backup to the Google account signed in on the phone (Google's backup service, governed by Google's privacy terms). You can turn that off in Android Settings, Google, Backup.

DayCast adds your notes, tasks, events, and journal entries to your device's own search index (Spotlight on iPhone and iPad, AppSearch on Android) so you can find them from system search. That index stays on your device.

iCloud Drive backup (iPhone and iPad)

If you turn on backups in Settings, DayCast writes a backup file to your private iCloud Drive container. The file is encrypted with AES-GCM using a key derived from a backup password you set, and stored in your own iCloud account under Apple's privacy terms. We cannot read it. You can delete backup files at any time from the Files app. DayCast does not use CloudKit.

Android cloud sync

Cloud sync on Android is optional and off until you turn it on in Settings. When you use it, DayCast signs you in to Firebase Authentication (anonymously, which ties the copy to that install, or with your Google account, so two devices can share it) and uploads one snapshot of your DayCast data to Cloud Firestore in the Firebase project we operate.

What the snapshot contains. Your full DayCast data: notes, journal entries (including any mood, weather, place, and health summary lines attached to them), tasks, events, spending and net worth records. Fields that are encrypted on your phone are decrypted before upload, because the phone's key cannot leave the Android Keystore. Google encrypts the data in transit and at rest, but the snapshot is not end-to-end encrypted.

Who can read it. Server rules allow only the signed-in account that created the snapshot to read or write it through the app. As the operator of the Firebase project, we technically have administrative access to it. We do not read your snapshot or use it for anything except syncing it back to you, and we would only access it to handle a request you make (for example, deletion). If you sign in with Google, we receive your Google account's email address and display name and use them only to identify your account.

Turning sync off stops future uploads. "Delete account and cloud data" in Settings deletes the snapshot and the sign-in record.

Transaction detection from notifications (Android)

DayCast Premium on Android can detect purchases from the payment notifications your banking or wallet apps post. This is off until you grant DayCast notification access in Android's system settings (Settings in DayCast, Open notification access settings). You can revoke it there at any time.

While access is on, Android delivers the text of every notification on your phone to DayCast. DayCast checks it on the device for a currency amount plus a payment word (such as "charged" or "purchase"). Notifications that do not match are ignored and not stored. For a match, DayCast saves the amount, the notification title (usually the merchant or app name), and the name of the app that posted it, encrypted, as an expense waiting in your Review inbox. Nothing is added to your totals until you confirm it. A message from any app that happens to mention a payment and an amount can match, so review the inbox before confirming. Notification text is never sent to us or anyone else.

Apple Wallet import (iPhone and iPad)

If you choose, DayCast can import Apple Wallet transactions (such as Apple Card and Apple Cash) using Apple's FinanceKit. You either pick transactions in Apple's transaction picker, or grant DayCast access to your Wallet financial data. Imported transactions are saved on your device as expenses. They are not sent to us or to any third party.

Weather, places, and maps

iPhone and iPad. When you add weather to a journal entry, DayCast asks for your location and requests current conditions from Apple WeatherKit. When you opt in to attaching a place, your coordinates are sent to Apple MapKit to look up a city name. Searching for an event location sends what you type to Apple MapKit. The result, for example 72°F · Partly Cloudy or a city name, is saved with the entry as encrypted text.

Android. DayCast only requests approximate (coarse) location. Weather requests go to Open-Meteo (open-meteo.com) with those approximate coordinates. Place names come from Android's built-in Geocoder, which on most phones is provided by Google and sends the coordinates to Google. The journal map loads map tiles from OpenStreetMap's tile servers, which see the area being viewed and your IP address.

In all cases your location is handled by the provider named above and is not sent to us.

Net Worth, stock quotes, and currency rates

On iPhone and iPad, if you add a Holding (such as VTI or BND) to the Net Worth tracker, DayCast requests a quote for that ticker symbol directly from Finnhub (finnhub.io), using an API key built into the app. Only the ticker symbol and that app key are sent, never your share counts, balances, or account names. On Android, holdings are valued by the amounts you enter; no quote service is contacted.

On both platforms, DayCast fetches daily exchange rates for multi-currency totals from open.er-api.com, at most about once a day. That request carries no personal data.

On-device AI

Journal reflections, summaries, prompt suggestions, proofreading, rewriting, translations, the spending coach, and task generation run on your device: Apple's on-device foundation model (Apple Intelligence) on iPhone and iPad, and Gemini Nano through Google's AICore and ML Kit on Android. DayCast does not send your text to a cloud AI model, does not use Apple's Private Cloud Compute, and we never see prompts or outputs. On Android, Google may download the AI and translation models to your phone the first time a feature is used. On hardware without on-device AI, these features are unavailable or show simpler built-in text.

Receipt and document scanning use on-device text recognition on both platforms.

Voice memos and dictation

Voice memos are recorded with your microphone and stored on your device. On iPhone and iPad, transcription uses Apple's speech recognizer in on-device mode only; if on-device recognition is not available for your language, DayCast does not transcribe rather than send audio to Apple. On Android, DayCast uses the on-device recognizer when your phone has one. If it does not, DayCast falls back to your phone's default speech service (usually Google's), which may process the audio on its servers under the provider's privacy policy.

Calendar

If you grant Calendar access, DayCast reads events from your calendars so they appear next to your Planner, and writes events you create in DayCast back to the calendar of your choice. Calendar data stays with iOS or Android; we do not receive it. On Android, events you create in DayCast are part of the cloud sync snapshot if you turn sync on.

Journaling Suggestions (iPhone)

DayCast can open Apple's Journaling Suggestions picker. Apple shows the suggestions; DayCast only receives the ones you choose to add to an entry, and saves them on your device.

Apple Health and Health Connect

DayCast can attach a short health summary to a journal entry, for example 8,432 steps · 7h 20m sleep · 45m workout. This is off by default. Nothing is read until you turn it on in Settings and grant permission.

• iPhone and iPad (Apple Health). DayCast reads four values for the day of the entry: step count, time asleep, workout duration, and mindful minutes. If you separately turn on Log Moods to Health, DayCast writes the mood from a journal entry to Apple Health as a State of Mind entry. Nothing else is ever written. You can revoke either permission in the Health app.
• Android (Health Connect). DayCast reads steps, sleep, and exercise sessions, read-only. It never writes to Health Connect. You can revoke access in Android's Health Connect settings.

The values are turned into that one line of text and saved with your entry as encrypted text on your device. No raw health samples are stored.

Consumer health data

Some of what DayCast handles can count as consumer health data under laws such as Washington's My Health My Data Act and Nevada's similar law. Here is what that means for DayCast:

• Categories. Daily step count, sleep time, workout or exercise time, mindful minutes (iPhone and iPad), and the moods and personal reflections you write in your journal.
• Source. You, and, only with your permission, Apple Health or Health Connect on your device.
• Purpose. Only to show you context in your own journal, and, on iPhone and iPad if you choose, to log your mood to Apple Health.
• Processing. On your device. It leaves your device only through features you turn on: your encrypted iCloud Drive backup (which we cannot read), the Android cloud sync snapshot described above (stored in our Firebase project, not end-to-end encrypted), or Android's own device backup to your Google account.
• Sharing. We do not share it with any third party, sell it, or use it for advertising or marketing.
• Your rights and deletion. Delete the entries in the app, revoke Health access in your device settings, delete your Android cloud data from Settings, or email [email protected]. See "Your privacy rights" below.

Subscriptions

DayCast Premium is a subscription billed through Apple's App Store on iPhone and iPad, and through Google Play on Android. Apple or Google handles the payment; we never see your card details. The store gives the app a transaction record that is used on your device to confirm your subscription is active.

Sale, sharing, and targeted advertising

We do not sell personal data, share it for cross-context behavioral advertising, or use it for profiling. DayCast has no ads and no advertising SDK on any platform, and does not use your device's advertising identifier.

Permissions DayCast may request

• Location (When in Use on iPhone and iPad, approximate on Android), only to attach weather or a place name to a journal entry.
• Camera, only when you snap a receipt, scan a document, or attach a photo.
• Microphone, only when you record a voice memo or dictate.
• Speech Recognition, to transcribe voice memos, as described above.
• Photos, through the system photo picker, only for images you pick.
• Calendars, only to read and write the events you ask DayCast to manage.
• Health, off by default, as described above.
• Apple Wallet financial data (iPhone), only if you use Wallet import.
• Notification access (Android), only if you turn on transaction detection.
• Face ID / Touch ID (or fingerprint / face unlock on Android), only to unlock the app when you turn on App Lock.
• Notifications, alarms, and exact alarms, only to deliver reminders and focus-session alerts you set.

Diagnostic information

If you opt in via iOS Settings, Privacy & Security, Analytics & Improvements, Apple may share anonymized crash reports and performance metrics with us. On Android, Google Play may do the same if you opted in to usage and diagnostics. These reports do not contain your DayCast content. DayCast itself includes no crash-reporting or analytics SDK.

Data retention

• On your device: until you delete it in the app or uninstall DayCast.
• iCloud Drive backups: until you delete the files in the Files app or turn backups off and remove them. They are in your iCloud account, not ours.
• Android cloud sync: the snapshot is replaced each time you sync and kept until you delete your account and cloud data in Settings, or ask us to. The sign-in record is kept for the same period.
• Third-party requests (weather, maps, quotes, rates, speech): we keep nothing. Each provider's retention is set by its own policy.

Delete your account and data

iPhone and iPad. There is no account and we hold no data. Delete items in the app, or delete the app to remove its local database. Export tools are in Settings. To remove iCloud Drive backup files, use the Files app; for your Apple account data, see privacy.apple.com.

Android. If you turned on cloud sync, open Settings in DayCast, tap your account row, and choose "Delete account and cloud data". That deletes the synced snapshot and the sign-in immediately; the data on your phone stays until you delete it in the app or uninstall. If you can no longer open the app, email [email protected] from the Google account you signed in with and we will delete the account and its data within 30 days. If you synced without signing in to Google, the copy is tied only to an anonymous ID we cannot match to you, so use the in-app option before you uninstall.

Your privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, Indiana, Kentucky, Rhode Island and other US states, or the EU/UK), you may have the right to access, correct, delete, or get a copy of personal data, and to opt out of targeted advertising, sale, or profiling. Many of these laws may not apply to a studio our size, but we honor these requests from everyone.

To make a request, email [email protected]. We respond within 45 days. We will not treat you differently for asking. If we decline your request, you can appeal by replying to our answer with "Appeal", and we will respond within 45 days (up to 60 days where the law allows). If your appeal is denied, you may contact your state attorney general.

For most DayCast users there is nothing for us to access or delete, because your content stays on your device or in your own iCloud account. Requests mainly apply to Android cloud sync data.

Children

DayCast is a general productivity app and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has used Android cloud sync, contact [email protected] and we will delete that data.

International users

We are based in the United States. Data we hold, the Android cloud sync snapshot and sign-in record, is processed in the United States and stored with Google Firebase, which may process it in its own data centers. By using cloud sync you understand your data will be handled there.

Security

DayCast encrypts sensitive fields on your device with AES-GCM, supports an optional App Lock (biometrics or PIN), and encrypts iCloud Drive backups with your password. Network requests use HTTPS. Android cloud sync data is protected by Google's encryption in transit and at rest and by per-account access rules, but it is not end-to-end encrypted. No system is perfectly secure; a strong device passcode and two-factor authentication on your Apple ID or Google account help most.

Changes

When this policy changes, we update the "Last updated" line above and post the new version at this URL. Material changes are also noted in the app's release notes.

Contact

Questions or requests: JC Mobile App Studio LLC, [email protected]