Privacy Policy

Last updated: [EFFECTIVE_DATE]

DailyAtlas (“DailyAtlas”, “we”, “us”) is a personal performance app operated by [LEGAL_NAME]. This policy explains what information DailyAtlas stores, how it is used, and the choices you have. We have written it to reflect what the app actually does, not as boilerplate.

Information we store

Your data is stored in our database (Supabase Postgres) and protected by per-user Row Level Security, so each account can only ever access its own data. We store:

• Account: the email address you sign up with (via Supabase Auth).
• What you log: profile and body metrics (such as height, weight, and training preferences), training sessions, habits, tasks, fridge inventory, wardrobe items, goals, and daily check-ins.
• Google Calendar (if you connect it): OAuth tokens (stored server-side only) and the timed events we fetch for the current day. See Google Calendar data below.
• Push notifications (if you enable them):your browser’s push subscription, used to send reminders.
• Approximate location (if you allow it): your latitude and longitude, used only to fetch local weather.

How we use your information

We use your data solely to provide the app’s features: computing your readiness score, generating your daily plan, training and habit analytics, recipe suggestions, coaching tips, and the weekly review. We do not use it for advertising, and we do not sell it.

Third-party services

DailyAtlas relies on a small set of providers that process data on our behalf:

• Supabase: database, authentication, and file storage.
• Vercel: application hosting.
• Groq: AI text generation. To plan your day and generate coaching, recipes, idea evaluations, and your weekly review, we send relevant text(such as task titles, habit names, fridge item names, and calendar event titles) to Groq’s Llama models. We do not send your password or authentication tokens.
• Google: Google Calendar (read-only), only if you choose to connect it.
• Open-Meteo: weather, using only your coordinates.
• USDA FoodData Central and Open Food Facts: food and barcode search.

We do not sell your personal data to anyone.

Google Calendar data

If you connect Google Calendar, DailyAtlas uses the calendar.readonly scope to read your timed events for the rest of the current day. Those events are shown on your dashboard timeline and are used so the planner schedules your tasks around them.

Your Google tokens are stored on our server only and are never sent to your browser: they are protected by Row Level Security and are readable only by our server’s service role. We do not sell, share, or transfer your Google Calendar data to any third party, and we use it only to provide this calendar-aware planning feature. When you disconnect (Settings → Calendar), we revoke the token at Google and delete it from our database.

DailyAtlas’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your rights and choices

• Export:download all of your data as JSON from Settings (“Download my data”).
• Disconnect Google Calendar: at any time in Settings; this revokes and deletes the token.
• Delete your account: contact us at [CONTACT_EMAIL] and we will delete your account and its associated data.
• Notifications and location: both are opt-in and can be turned off in your browser or device settings.

Security

Data is protected with per-user Row Level Security, served over HTTPS, and hardened with a Content Security Policy. Secrets and third-party tokens are kept server-side only and are never exposed to the browser.

Data retention

We keep your data for as long as your account is active. When you delete your account, we delete its associated data.

Changes to this policy

If we materially change how we handle your data (in particular how we use Google user data), we will update this page and, where required, ask for your consent again before the new use takes effect.

Contact

Questions about this policy: [CONTACT_EMAIL].