Privacy Policy

Effective date: October 19, 2026

This Privacy Policy explains how Intern Labs, Inc. ("Dayplan", "we", "us") collects, uses, and shares information when you use the Dayplan applications and websites, including dayplan.do, the Dayplan web app (app.dayplan.do), and our desktop, iOS, and Android apps (together, the "Service").

If you have questions, contact us at support@dayplan.do.

Information we collect

Account information: your email address and password, or — if you choose to sign in with Google — your name, email address, and profile photo from your Google account. Authentication is handled by our identity provider; we do not see or store your plaintext password.
Content you create: tasks, plans, notes, pages, projects, goals, habits, and anything else you enter into Dayplan.
Calendar data: if you connect a calendar, the events (titles, times, attendees where present) needed to display and sync your schedule. Google Calendar is accessed via Google OAuth (see "Google user data" below); iCloud Calendar is accessed via CalDAV using an app-specific password you provide, which we store encrypted.
Connected app data: if you import from another app, the items you authorize us to access.
AI assistants you connect: if you connect an AI assistant (such as Claude, ChatGPT or Cursor) to Dayplan, we keep a record of each connection: the assistant's name and website, the access you chose, how long it lasts, and when it was created and last used. Sign-in tokens for the connection are stored only as one-way hashes. When the assistant adds a task, we note which assistant added it. We record which Dayplan actions an assistant uses and whether they worked, but not what it sent or what Dayplan answered. We do not receive or store your conversations with the assistant.
Coach conversations: messages you exchange with the Dayplan Coach in the app or over iMessage, including your phone number if you use the iMessage channel.
Support messages: messages and screenshots you send us through "Message us" in the app, our replies, and where you wrote from (the page, app version, device type, and timezone), so the Dayplan team can answer you. They are stored on our servers and are not end-to-end encrypted, even if you use a Private space. Photos are re-encoded before upload, which removes location and camera data; small screenshots and GIFs may be uploaded as they are. Support messages are kept until you delete your account; screenshots you attach but don't send are deleted after a day.
Voice and images: if you use voice input, your audio is transcribed and not retained after transcription. If you use scan import, the photo is processed to extract tasks and events and is not retained after processing.
Usage and device data: product analytics events, device and browser type, timezone, IP address, and crash/error reports.

How we use information

Provide, maintain, and sync the Service across your devices
Power the AI features you invoke (planning, coaching, transcription, scan import)
Let AI assistants you connect read and update your planner, within the access you chose
Send you messages you've asked for (reminders, coach check-ins, and replies to your support messages, which we may also send to your email)
Send you service emails (account, security, and billing notices) and, where permitted, newsletters, product updates, and planning tips about Dayplan. You can unsubscribe from newsletters and other non-essential emails at any time via the link in each email or in Settings
Understand feature usage and improve the product
Detect, investigate, and prevent abuse, fraud, and security incidents
Comply with legal obligations

We do not sell your personal information, and we do not use your content to train AI models.

We share data with vendors who process it on our behalf, only as needed to run the Service. These providers fall into the following categories: authentication, application and database hosting, billing and payments, AI model providers (described in "AI processing" below), product analytics, error and crash reporting, messaging infrastructure, and email delivery. All are bound to protect your information and use it only to provide services to us.

AI assistants you connect. If you connect an AI assistant to Dayplan, we send it the information it asks for, within the access you chose. For example: your tasks with their notes, steps, areas, dates and deadlines; your areas; and the titles and times of calendar events and your free time for the days it asks about. The assistant's provider (for example Anthropic for Claude, or OpenAI for ChatGPT) receives this as part of your conversation and handles it under its own terms and privacy policy, and your settings with that provider, not under this policy. You can disconnect an assistant at any time (see "Your choices for AI assistants").

We may also disclose information if required by law, to protect the rights and safety of users or the public, or in connection with a merger or acquisition (with notice to you).

AI processing

Dayplan's AI features (the Coach, planning suggestions, scan import, voice input, and writing assistance) are powered by third-party model providers. Language-model requests are routed through OpenRouter, an AI gateway, under an account configured for zero data retention with all data-training options disabled, so requests are only served by endpoints that do not store request data or use it for training. Live voice transcription is provided by Deepgram, which receives only your audio. Content you submit to an AI feature is used solely to generate your response; we do not use it — and do not permit any provider to use it — to develop, improve, or train generalized AI or machine-learning models.

AI assistants you connect yourself are not Dayplan's AI features. The zero-data-retention setup described above applies to Dayplan's own AI features, not to an assistant you connect. When you use Dayplan from such an assistant, what Dayplan returns becomes part of your conversation with it, and the assistant's provider's retention and training practices, and your settings with that provider, apply.

Google user data and Limited Use

If you connect Google Calendar, Dayplan accesses the calendars you subscribe to and events on those calendars through Google's OAuth APIs. Depending on the information present in your calendar, this may include calendar names and identifiers and event details such as titles, descriptions, start and end times, all-day and recurrence information, attendees and organizers, locations, conference or event links, status, and synchronization metadata. Dayplan's Google Calendar access is read-only: Dayplan does not create, edit, or delete events in Google Calendar.

We use this Google user data only to provide the calendar and planning features you choose to use, including importing and displaying your calendars and events in Dayplan, keeping them synchronized, identifying scheduling conflicts and available time, and providing calendar-aware planning or Coach results when you invoke or enable those features.

To maintain the connection, we store OAuth access and refresh tokens in encrypted form. We also store synchronized copies of the calendar and event information needed to provide these features. If you disconnect Google Calendar, we revoke the Google authorization where possible, delete the stored credential, and stop future access and synchronization. Previously imported copies may remain with your Dayplan account under the retention and deletion practices described in the "Data retention and deletion" section. You can request deletion of your account and associated data as described there.

We may disclose the minimum Google user data necessary to service providers acting on our behalf to host, secure, maintain, or deliver these user-facing features, including model providers when you invoke a calendar-aware AI feature. When you invoke such a feature, the only Google Calendar data shared with a model provider is an event's title and start/end times, transmitted under the zero-data-retention configuration described in "AI processing"; event descriptions, attendees, organizers, and conference details are never shared with model providers. We do not sell Google user data, use it for advertising or creditworthiness, or use it to develop, improve, or train generalized or foundational AI or machine-learning models.

If you connect an AI assistant and allow it to read your plan, Dayplan sends that assistant the titles and start and end times of the calendar events, including Google Calendar events, on the days it asks about. This happens only at your request, through an assistant you connected and chose to let read your plan. Event descriptions, attendees, organizers, locations and conference details are never sent to an assistant. Disconnecting the assistant, or Google Calendar, stops this.

We do not allow humans to read your Google user data unless you first give affirmative consent for specific data, access is necessary for security purposes, access is required by law, or the data has been aggregated and anonymized for internal operations. We do not otherwise transfer Google user data except to provide the user-facing features described above with your consent, for security, to comply with applicable law, or as part of a merger, acquisition, or sale of assets after obtaining your explicit prior consent. For Google user data, these restrictions control over any more general sharing language elsewhere in this Privacy Policy.

Dayplan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar at any time in Dayplan Settings or revoke Dayplan's access through your Google Account permissions.

Data retention and deletion

We keep your data while your account is active. Items you delete are removed from your active workspace; residual copies in backups are purged on a rolling basis. You can permanently delete tasks or request deletion of specific data while keeping your account. You can also request deletion of your account and associated data by emailing support@dayplan.do, and we will complete it within 30 days except where we must retain data to comply with law. Records of a connected AI assistant are deleted 30 days after the connection ends (when you or the assistant disconnect it, or it expires); its sign-in tokens are deleted a day after they expire or are revoked.

Your rights

Depending on where you live, you may have rights to access, correct, export, delete, or restrict the processing of your personal data, and to object to processing or withdraw consent.

EEA/UK (GDPR). Our legal bases are performance of our contract with you (providing the Service), your consent (e.g., connecting a calendar or the iMessage coach, or opting in to planning emails), and our legitimate interests (analytics, security, product improvement, and emailing you about Dayplan where the law allows this without prior consent). You can withdraw consent or object to marketing emails at any time by unsubscribing. You may lodge a complaint with your local supervisory authority.

California (CCPA/CPRA). We do not sell personal information. To the extent advertising technologies on our public marketing website constitute "sharing" for cross-context behavioral advertising, you may opt out via our cookie preferences or by emailing support@dayplan.do with the subject "Do Not Share My Personal Information"; data from the signed-in app is never sold or shared.

To exercise any right, email support@dayplan.do. We will verify your request via your account email.

Your choices for AI assistants

Connecting an AI assistant is optional and only happens when you approve it on a Dayplan page. You choose what each assistant may do (read your plan; also add tasks; or also change, complete and delete tasks, where deleted tasks go to your Trash) and how long the connection lasts. You can see every connected assistant and disconnect it at any time in Settings → Connected agents; access ends immediately. You can also remove Dayplan from the assistant itself.

International transfers

We are based in the United States, and your information is processed and stored in the United States and other countries where our infrastructure providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Security

We use industry-standard measures including encryption in transit (TLS), encryption of stored calendar credentials, scoped access tokens, one-way hashing of the tokens AI assistants use to connect, and organization-level data isolation. No system is perfectly secure; please use a strong, unique password.

Cookies and local storage

In the app, we use cookies and browser storage for sign-in sessions and to cache your data locally for offline use; we do not use advertising cookies inside the signed-in app.

On our public marketing website, we may use analytics cookies and advertising technologies to understand traffic and measure campaigns, subject to consent where required. You can control these through our cookie preferences and your browser settings. These technologies are never used on signed-in app pages and never have access to Your Content.

Children

The Service is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or in the app before they take effect. The "Effective date" above reflects the latest version.

Contact

Intern Labs, Inc. (United States)

Email: support@dayplan.do