← Back to DayOS

Privacy Policy

Effective Date: February 17, 2026

1. Information We Collect

We collect information you provide directly, including: names and phone numbers of family members, text messages sent to DayOS, emails forwarded to your family's DayOS email address, calendar events shared with DayOS, and household schedule and budget information you share with us.

2. How We Use Your Information

We use your information to: provide the DayOS service (schedule management, spending tracking, reminders), identify you when you text or email DayOS, generate AI-powered responses to your questions, and improve the accuracy of our parsing and recommendations.

3. SMS Communications and Consent

When you sign up for DayOS and opt in to SMS during onboarding, you will receive a welcome SMS confirming your enrollment. Messages include direct replies to your texts, schedule notifications, and optional alerts. Message and data rates may apply. Message frequency varies.

You may opt out at any time by replying STOP to any DayOS message. For help, reply HELP or email support@dayos.io.

Your phone number is used solely to deliver the DayOS service. We do not share your phone number with third parties for marketing purposes, and we do not sell your phone number or SMS data to any third party.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. How We Protect Your Information

All data is stored in a secured PostgreSQL database with Row Level Security enforced on every table. Sensitive data — including Google Calendar tokens, email content, and SMS conversations — is encrypted at rest using industry-standard AES encryption. The encryption key is stored separately from the database. API keys and credentials are encrypted. Your information is never sold, rented, or shared with third parties for marketing or advertising purposes.

5. Third-Party Services

Operational partners include Twilio (SMS delivery), Anthropic (AI processing), Supabase (database hosting), and SendGrid (email processing). These partners follow their respective privacy standards.

6. Children's Privacy (COPPA)

DayOS does not knowingly collect personal information directly from children under 13. Parents manage all minor data and retain control over access and deletion.

7. Data Retention and Deletion

You may request a full export of your family's data or complete deletion of your account at any time. SMS conversation history is automatically deleted after 90 days. Raw email content is purged after 30 days. Account deletion results in permanent removal from all systems.

8. Your Rights

Users may access, correct, export, or delete their family's stored information through the Settings page or by contacting support.

9. Changes to This Policy

Policy updates will be communicated through SMS or dashboard notifications.

10. Contact Us

Questions should be directed to support@dayos.io.