Privacy Policy

01Who this policy is for

Daynup serves two kinds of people, and we handle their data in different ways.

• Businesses and their teams: the owners, colleagues and staff who use the Daynup app. For your account and how you use Daynup, we decide how your data is used. In legal terms, we're the "controller".
• Clients: people who book through a business's booking page, or whom a business adds to Daynup. The business decides what happens with its client list and bookings, and we store and process that data for it. We're its "processor" or "service provider". Section 4 explains this.

For a few things, such as keeping booking pages secure and stopping misuse of phone codes, we're responsible for client data ourselves. We say so where it applies.

02What we collect from businesses

When you use the Daynup app, we collect:

• Your account. Your name, email address and account ID from Sign in with Apple or Google, and your profile picture if your Google account shares one. If you use Apple's Hide My Email, we only see the relay address.
• Your business. Its name, what you do, its address, your booking link, time zone and currency; your services, prices, hours and days that are different; your booking rules and who can book; the message you share your link with; and your note for the AI help. If you have a team, your colleagues' names, titles, hours and services, and the details you use to invite them.
• Your setup answers. How clients book you today, what wears you down most, and about how many clients you see a week, so Daynup can start in the right place.
• Your clients and bookings. You add them, or your clients do on your booking page. See section 4.
• Contacts you pick. The name and phone number of each person you choose from your phone's contacts. See section 6.
• What you say or type to the AI. See section 5.
• Your settings. Your language and colour palette, saved to your account so every device matches. Light or dark and team colours stay on your device.
• Device and sign-in data. Your phone's time zone, language and region; your app version, device model and operating system; and the IP address you sign in from, with the country it points to. We work out the country on our own server, never your precise location, and use it to pick a starting language and to protect your account.
• Usage and diagnostics. Crash reports, performance data, which screens and features are used, and recordings of app sessions with client details hidden. See section 7.
• Your subscription. If you subscribe, your plan, its status and renewal dates. In the app, Apple handles payment, and we never see your card details.
• Messages to us. If you write to us, your email address and what you write.

03How we use it

• To run Daynup: your booking page, calendar, clients, team and the assistant.
• To keep accounts, booking pages and phone codes safe, and to prevent fraud and abuse.
• To fix bugs and see which features help, so we can make the app better.
• To answer you, and to tell you about changes to Daynup, your subscription or these policies.
• To meet legal obligations, such as keeping tax and accounting records.

We don't use personal data for advertising, we don't sell it, and we don't share it for cross-context behavioural advertising. We don't build advertising profiles, and we don't make decisions about you by automated means that have legal or similarly significant effects. The AI only suggests, and you decide.

Legal bases (EEA, UK and Switzerland). We rely on performing our contract with you (running Daynup and the features you choose), our legitimate interests (security, preventing abuse, and fixing and improving the app, weighed against your rights), legal obligations, and your consent where we ask for it, which you can withdraw at any time.

04Data we process for businesses

When someone books through a Daynup booking page, or a business adds them to its client list, we store on that business's behalf:

• their name and phone number;
• their bookings: the service, the time, who it's with, the price, and any note they leave;
• their history with the business: visits, no-shows the business marks, and the business's own private notes;
• their status with the business, for example a regular or a new request waiting for approval.

Confirming a phone number

To check that a phone number belongs to the person booking, the booking page can send a one-time code by WhatsApp or text message through Twilio. We keep a record of each attempt (the number, how the code was sent, the IP address and the browser) for 90 days, to stop abuse and keep codes arriving. We also note whether a number can receive WhatsApp messages, so the next code goes the way that works. If a client asks the page to remember their phone, it stays recognised on that business's page for 90 days. Where we use it, Cloudflare Turnstile checks that a person, not a bot, is asking for a code. We're responsible for this security data ourselves.

In the client's browser

Booking pages don't use cookies. After a booking, the page keeps the name and phone number the client used, and a remembered-phone token if they asked for one, in the browser's own storage on their device, so they don't have to type them again. Clearing the site's data in the browser removes them.

Page visits

When someone opens a booking page, we record the visit: the time, where the link came from (for example Instagram), and the IP address and browser. The business sees totals, such as visits and online bookings this week, never who visited. Bots and link previews aren't counted.

Messages to clients

Booking reminders and confirmations are sent only about bookings, only on the business's behalf, and only when the business has turned them on. Daynup never uses a business's clients to market anything of its own.

Who's responsible

The business is responsible for its client list and for having a lawful reason to keep and contact the people on it. We process it only on the business's instructions, to provide Daynup. We don't sell it, use it for our own marketing, or show it to other businesses. Businesses can ask us for a data processing agreement at [email protected].

05AI features and Google

Daynup's AI features run on Google's Gemini API, provided by Google LLC. Everything goes through our server first, so your phone never sends anything to Google directly. The AI never changes anything by itself: every change waits for your tap. Here is exactly what is sent for each feature.

Setting your hours by talking or typing

When you tap Tap and talk, the app records a short voice message, up to 45 seconds. When you're done, it goes to our server and on to Google, which turns it into text and suggested hours. If you type instead, your words go the same way, with the language you use. You see the result before anything is saved. You can always set your hours by hand, and then nothing goes to Google.

The assistant, typed or by voice message

Your message or voice message goes to Google with what the assistant needs to answer: today's date, your team's names, your services and prices, days that are already different, and the last few messages of the conversation. If you name a client, that name goes too, but your client list doesn't. A second Gemini model checks some answers before you see them.

The conversation is saved in your account on our servers, so it's the same on your iPhone and iPad. We save the words, never the audio, and only you can see it. Start over archives a conversation. Archived conversations are deleted after a year, and all of them are deleted as soon as you delete your account.

Live talk

In a live talk, your voice streams through our server to Google's Gemini Live API while it's your turn, and the spoken answer streams back. To answer questions about your days, it can look up hours and bookings, including clients' first names, up to 14 days at a time. A talk lasts up to 5 minutes. The words of each finished turn are saved in the conversation as above. The audio isn't stored.

AI help for your clients (beta)

AI help starts switched on for your clients, and you can switch it off in Your page → AI help for your clients. When it's on, a client who has confirmed their number can ask about free times, prices and their own bookings, by typing or with a voice message. We send Google their question, the last few turns of that chat, what your booking page shows (team first names and titles, services, prices, address and booking rules), your note for the AI help, and that client's own upcoming bookings. We never send other clients' details or anyone's phone number.

We don't store these conversations. To apply daily limits, we keep a count per number for 35 days, stored as a code that doesn't reveal the number. The AI help can't book, move or cancel anything.

Google's role

Google processes this data to provide the Gemini API to us, under its terms for that service, and must protect it at least as well as this policy does. [Gemini API tier: confirm the paid tier, then add "Google doesn't use this data to improve its products."]

Your choices

Using AI is always up to you. You can set your hours, make bookings and change your week by hand. You can turn off the microphone at any time in iPhone Settings → Daynup, and switch off AI help on your booking page as described above. AI can make mistakes, so check what it suggests. Nothing is saved until you confirm.

06Microphone and contacts

Daynup asks for these only when you tap something that needs them, never when the app opens. If you say no, everything else keeps working.

• Microphone. Used only while you record a voice message, or while it's your turn in a live talk. Section 5 says what happens to the audio.
• Contacts. Used when you tap Add regulars from Contacts. You pick people one by one, and only their names and phone numbers are saved to your client list. The rest of your contacts stay on your phone, and Daynup never messages anyone in them. On iPhone you can also share only some contacts with Daynup.

If we ever offer to recognise people from your contacts when they book, we'll ask you first, on a screen of its own, and update this policy before it starts.

07Analytics and diagnostics

To find bugs and see which features help, the app uses two services.

• Sentry, for crash and error reports: what went wrong, your device model, operating system, app version and account ID. Reports don't include screenshots or the contents of requests, and our server removes phone numbers, email addresses and codes before it reports an error.
• PostHog (EU cloud), for product analytics: which screens and features are used, identified only by your account ID. It also records app sessions so we can see where something went wrong. In these recordings, clients' names, faces, phone numbers and notes, all images, the contacts picker and passwords are hidden. Your business details, such as its name, address, services, hours, team names and your email address, can be seen. Our server sends PostHog timings of AI requests too, with IDs and numbers only.

We use these only to run and improve Daynup, never for ads. Daynup doesn't track you across other companies' apps or websites, so it never asks for permission to track. To opt out of analytics and session recordings, write to us.

08Who we share it with

We don't sell personal data, and we don't share it for advertising. We share it only with:

• Your team. People on your team see the calendar and clients as their role allows.
• Visitors to your booking page. Your page is public: anyone with your link can see your business name, address, services, prices, team first names and titles, and your free times.
• Apple and Google, for sign-in, and Apple for App Store purchases.
• Service providers that help us run Daynup, each with only what it needs:

Each provider may use the data only to provide its service to us, and must protect it at least as well as this policy does. We also share data when the law requires it, or to protect people's safety or our rights. If Daynup is ever merged or sold, your data would move under this policy's protections, and we'd tell you first.

09Data outside your country

Our servers run in Frankfurt, Germany, and our database is hosted in [Database region]. Some providers, such as Google, Twilio and Sentry, may handle data in the United States or other countries.

In plain words: your data may be handled outside your country, and when it leaves the EEA, the UK or Switzerland, it's protected by the standard contracts the EU and UK approve for this, or by the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified. Ask us and we'll send you a copy of the safeguards.

10How long we keep it

• Your account and business data: for as long as your account exists.
• Assistant conversations: until you start over. Archived ones are deleted after a year.
• Voice: never stored. Recordings and live audio are passed to Google and then dropped.
• AI help on booking pages: conversations aren't stored. Daily counts are kept for 35 days.
• Phone code records: 90 days. A remembered phone: 90 days.
• Page visits: the counts stay. The IP address and browser are kept while the business uses Daynup, and removed when its owner's account is deleted.
• Logs and error reports: [Log retention period]. When the AI can't understand some hours, the log keeps up to 300 characters of the words, so we can fix it.
• Backups: [Backup retention period].
• Subscription and tax records: as long as the law requires.

When you delete your account

You can delete your account in the app: Your page → Delete account.

• Right away: you're signed out everywhere, and Daynup's Sign in with Apple access is revoked. Your assistant conversations are deleted. If you own the business, your booking page closes, upcoming bookings are cancelled and open requests are declined.
• After 30 days: your name, email address, sign-in IDs, IP address and settings are removed. For owners, the business's name and address and its clients' names, phone numbers and notes are removed too, and page visits lose their IP addresses and browsers. What remains, such as past booking times, no longer identifies anyone.
• Changed your mind? Sign in again within the 30 days and your account comes back, with your business reopened. Bookings that were cancelled stay cancelled.
• On someone else's team? You leave the team. The bookings and client records you worked on stay with the business, because they're its records.

11Security

Data is encrypted in transit between the app, booking pages, our servers and our database. On your iPhone, your sign-in is kept in the Keychain. On our servers, sign-in tokens are stored only in hashed form and replaced every time they're used, and secrets such as your Apple sign-in token are encrypted. Only the people at [Company legal name] who need personal data to run Daynup can access it.

No system is perfectly secure. If something goes wrong, we'll tell you and the authorities as the law requires. If you find a security problem, please write to [email protected].

12Your rights and choices

Wherever you live, you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct it, or send it to you in a portable format;
• delete it;
• stop or limit using it for something, or withdraw your consent.

Delete your account in the app at any time. For anything else, write to [email protected] from the email address on your account. We may ask you to confirm it's you, and you can ask someone to act for you with your written permission. We answer within one month, or 45 days where US state law allows. We never treat you differently for using your rights. If we can't do what you ask, we'll explain why, and you can appeal by replying to that email.

EEA, UK and Switzerland

Our legal bases are in section 3. You can also complain to your local data protection authority. Our representative in the EU is [EU representative], and in the UK [UK representative].

US state privacy rights

If you live in California or another state with a privacy law, such as Colorado, Connecticut, Oregon, Texas or Virginia, you have the rights above: to know what we collect and how we use it, to access, correct and delete it, and to get a portable copy. We don't sell personal information, share it for cross-context behavioural advertising, use it for targeted advertising, or use sensitive personal information to infer things about you. So there's nothing to opt out of, but if your browser sends a Global Privacy Control signal, we treat it as an opt-out request anyway. If we turn down your request, you can appeal, and then contact your state's attorney general.

California notice. In the last 12 months we collected these categories of personal information: identifiers (name, email address, account ID, IP address, and clients' phone numbers); customer records and professional information (your business details); commercial information (your subscription); internet and app activity (usage, crash and diagnostic data); audio (voice messages and live talks, which aren't stored); and coarse location (the country your IP address points to). The sources, purposes, the service providers we disclose them to, and how long we keep them are described above.

Clients of a business

Please contact the business first. It decides what happens with your details, and we'll help it answer you.

13Children

Daynup accounts are for adults who run a business or work in one: you must be 18 or older to create one. Booking pages are for people aged 16 and over. Younger clients, such as a tutor's students, should have a parent or guardian book for them, using the parent's own details.

We don't knowingly collect personal data from children under 16 (under 13 in the US). If you believe a child has given us personal data, write to us and we'll delete it.

14This website

This website doesn't use cookies, analytics or advertising trackers. It remembers a few of your choices in your browser's own storage: light or dark, the currency for prices, whether sounds are on, and the kind of work you picked. These stay on your device. The "Ask Daynup" helper runs in your browser and sends nothing to us.

Everything on this site, fonts included, is served from our own address, so nothing is loaded from other companies while you read. The site is hosted by Render, which keeps standard server logs (such as IP addresses and the pages asked for) to run and protect the service.

15Changes to this policy

If we change this policy, we'll update the date at the top. For important changes, we'll tell you in the app or by email before they take effect.