Privacy Policy

Daily Rundown ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (the "Service").

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

• Name and email address (from Google OAuth or Apple Sign-In)
• Profile photo (if provided by OAuth provider)
• Subscription tier (FREE or PREMIUM)

Memory Dashboard (Premium Only):

• Personal information you choose to store (family details, routines, health info, interests)
• Voice input transcriptions (audio deleted immediately after transcription)
• Text input for memory updates

Settings and Preferences:

• Zip code for weather data
• Preferred TTS voice and playback speed
• Briefing preferences (section order, enabled features)
• Custom RSS feed URLs (Premium only)

1.2 Information We Collect Automatically

Usage Data:

• Briefing generation timestamps and frequency
• Feature usage analytics (which features you use)
• Audio playback sessions (duration, completion rate)
• Error logs and crash reports

Device Information:

• Device model, operating system, and version
• Unique device identifier (for Premium device binding)
• App version
• Network information (IP address, carrier)

1.3 Information from Third-Party Services

Calendar Data (with your explicit consent):

• Event titles, dates, times, locations, and descriptions
• Task titles and due dates
• Calendar email address (for connection validation)

Important: Calendar events are fetched on-demand when generating a briefing and are NOT stored permanently on our servers.

Weather Data:

• Current weather conditions based on your zip code (via OpenWeatherMap)
• Forecasts cached for 1 hour

News Content:

• RSS feed articles from curated sources (Daily Rundown News)
• Custom RSS feed articles (Premium only)

2. How We Use Your Information

2.1 To Provide and Improve the Service

• Generate personalized AI-powered briefings
• Synthesize audio from briefing scripts
• Fetch and display calendar events
• Provide weather forecasts
• Aggregate news content
• Process voice input and extract facts (Premium)
• Detect schedule and weather conflicts (Premium Life Coach mode)

2.2 To Personalize Your Experience

• Customize briefing content based on your Memory Dashboard (Premium)
• Recommend news articles based on your interests (Premium)
• Remember your preferences (voice, playback speed, section order)
• Prevent repetitive news topics (topic fatigue filtering)

2.3 For Analytics and Improvement

• Understand how users interact with the Service
• Identify and fix bugs
• Improve AI briefing quality through A/B testing
• Monitor service performance and costs

2.4 For Communication

• Send transactional emails (account notifications, password resets)
• Notify you of service updates or important changes
• Respond to your support requests

2.5 For Security and Compliance

• Detect and prevent fraud and abuse
• Enforce our Terms of Service
• Comply with legal obligations
• Protect user safety and security

3. How We Share Your Information

3.1 Third-Party Service Providers

We share data with trusted service providers who assist in operating the Service:

Service Provider	Purpose	Data Shared
Google Cloud (Vertex AI)	AI briefing generation	Calendar events, weather, news, Memory Dashboard (anonymized)
Google Cloud (Text-to-Speech)	Audio synthesis	Briefing scripts (text only)
Google Cloud (Speech-to-Text)	Voice transcription (Premium)	Audio recordings (deleted immediately after transcription)
Google Cloud (Storage)	Audio file hosting	Generated briefing audio files
Google Cloud (SQL)	Database hosting	All user data (encrypted at rest)
OpenWeatherMap	Weather data	Zip code only
RevenueCat	Subscription management	User ID, subscription status, purchase events

All service providers are bound by data processing agreements and are required to protect your data in accordance with this Privacy Policy.

3.2 OAuth Providers

When you sign in with Google or Apple, we receive basic profile information (name, email, photo). These providers have their own privacy policies:

• Google Privacy Policy
• Apple Privacy Policy

3.3 When Required by Law

We may disclose your information if required to do so by law or in response to:

• Valid legal requests (subpoenas, court orders)
• Government investigations
• Requests to protect user safety or prevent harm
• Enforcement of our Terms of Service

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email or in-app notification if this occurs.

3.5 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Security

4.1 Encryption

• In Transit: All API communication uses HTTPS/TLS encryption
• At Rest: Sensitive data (OAuth tokens, Memory Dashboard) encrypted using Fernet (AES-128-CBC)
• Database: Google Cloud SQL with encryption at rest enabled

4.2 Access Controls

• Row-level security ensures users can only access their own data
• JWT-based authentication with short-lived access tokens (5 minutes)
• Refresh tokens rotated regularly (7-day expiry)

4.3 Device Security (Premium)

• First device auto-registers, subsequent devices require password confirmation
• Biometric protection (Face ID/Touch ID) for Memory Dashboard access
• Device tokens stored in iOS/Android secure storage
• Maximum 5 devices per user

4.4 Data Minimization

• Calendar events fetched on-demand, never stored permanently
• Voice recordings deleted immediately after transcription
• Briefing audio auto-expires (48 hours FREE, 7 days PREMIUM)
• Audit trails auto-delete after 30 days

5. Data Retention

Data Type	Retention Period
Account Information	Until account deletion
Memory Dashboard	Until manually deleted or account closed
Briefing Audio Files	48 hours (FREE), 7 days (PREMIUM)
Calendar Events	Not stored (fetched on-demand)
Voice Recordings	Deleted immediately after transcription
Dossier Change History	30 days
Pending Dossier Updates	24 hours
Usage Logs	30 days

6. Your Rights and Choices

6.1 Access and Portability

You have the right to:

• Access all data we have about you
• Export your Memory Dashboard data
• Request a copy of your account information

6.2 Correction and Deletion

You can:

• Edit your profile information in app settings
• Update or delete Memory Dashboard sections
• Delete individual briefings
• Wipe all Memory Dashboard data with one click
• Delete your entire account (irreversible)

6.3 Revoke Permissions

• Calendar Access: Disconnect via app settings or Google/Apple account settings
• Location (Weather): Remove zip code in app settings
• Device Access: Deactivate devices in app settings (Premium)

6.4 Marketing Communications

We do not send promotional emails unless you opt in. You can unsubscribe at any time by clicking the unsubscribe link in emails.

6.5 Do Not Track

We do not respond to Do Not Track (DNT) signals as there is no industry standard for compliance.

7. GDPR Compliance (EEA Users)

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

7.1 Legal Basis for Processing

• Contract Performance: To provide the Service you signed up for
• Consent: For calendar access, voice input, and Memory Dashboard data
• Legitimate Interests: For analytics, fraud prevention, and service improvement

7.2 Your GDPR Rights

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Delete your data (right to be forgotten)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Export your data in a machine-readable format
• Right to Object: Object to data processing based on legitimate interests
• Right to Withdraw Consent: Revoke consent at any time

To exercise these rights, contact us at privacy@dailyrundown.app.

7.3 Data Transfers

Your data is stored on Google Cloud servers in the United States. We ensure adequate protection through:

• Google Cloud's GDPR compliance certifications
• Standard Contractual Clauses (SCCs)
• Strong encryption and security measures

8. California Privacy Rights (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

8.1 Categories of Personal Information Collected

• Identifiers (name, email, device ID)
• Commercial information (subscription status)
• Internet/network activity (usage logs, IP address)
• Audio information (voice recordings, immediately deleted)
• Sensitive personal information (Memory Dashboard data)

8.2 Your CCPA Rights

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information (nothing to opt out of)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To submit a CCPA request, email privacy@dailyrundown.app.

9. Children's Privacy

Daily Rundown is not intended for children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, contact us at privacy@dailyrundown.app.

10. Third-Party Links

Daily Rundown may contain links to external websites (e.g., news articles). We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Notify you via email or in-app notification
• Update the "Last Updated" date at the top
• Provide at least 30 days' notice for significant changes

Continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

12. International Users

Daily Rundown is based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. By using the Service, you consent to this transfer.