Privacy Policy

Effective October 20, 2026

This Privacy Policy explains how Daily Rhythms ("Daily Rhythms", "we", "us") collects, uses, and protects your information when you use the app, and the rights you have over your data. We are committed to handling your data carefully and in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. The data we process

Daily Rhythms is designed to keep your information on your own device wherever possible. Depending on how you use the app, we may process:

• Profile & lifestyle details you enter during onboarding or in settings — your name, birthday, marital status, number and ages of children, work status, daily rhythm, and household size.
• Health & wellbeing preferences — fitness level, health and movement goals, and dietary restrictions. Some of this may be considered special category (sensitive) data.
• Faith information — your faith goals and scripture preferences. Information about religious beliefs is special category data and we process it only to provide the features you ask for.
• App activity — meal plans, ratings, shopping lists, pantry items, cleaning and workout progress, and daily check-offs.
• Account data (only if you create an account) — your email address and authentication details, handled by our backend provider so your rhythm can sync across devices.
• Notification data (only if you enable reminders) — your push subscription details, chosen reminder time, and timezone.

2. Where your data is stored

By default, your profile and app activity are stored locally in your browser (localStorage) on your device — not on our servers. If you choose to sign in, your profile and reminder settings are also stored securely with our cloud backend so they can sync across your devices.

3. How we use your data

• To build and personalize your daily rhythm, meals, movement, and home focus.
• To sync your data across devices when you are signed in.
• To send the optional daily reminders you have enabled.
• To keep the app secure, reliable, and working as intended.

We do not sell your personal data, and we do not use it for advertising or third-party tracking.

4. Legal bases for processing

• Consent — for special category data (health and faith information) and for push notifications. You can withdraw consent at any time.
• Performance of a contract — to provide the core features you request, such as account sync.
• Legitimate interests — to keep the app secure and functioning.

5. Cookies & local storage

Daily Rhythms uses essential browser storage needed to make the app work (for example, saving your profile and remembering your consent choice). With your permission ("Allow analytics"), we also record first-party usage events — such as which features are opened or completed — tied to your account, to improve the app. Choosing "Essential only" turns this off. We never use advertising cookies or third-party trackers, and we never sell your data.

6. Sharing & processors

We use trusted service providers to host the app, provide account authentication, and deliver push notifications. These providers process data on our behalf under appropriate safeguards and only as needed to provide their service. Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Data retention

Local data remains on your device until you delete it or clear your browser. Account, synced app data, reminders, usage events, and any recipes you submitted are kept while your account is active. When you choose "Delete my account & all data" in Settings, your account and all associated data are permanently erased from our systems immediately (backups held by our hosting provider roll off within 30 days). You may also request deletion by email; we respond within 30 days. Payment records may be retained by our payment processor as required by tax and accounting law.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data (editable anytime in Settings).
• Erase your data ("right to be forgotten").
• Export your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

You can exercise your access, export, and erasure rights directly in Settings, or by contacting us.

8a. U.S. state privacy rights

If you live in California, Wisconsin, or another U.S. state with a consumer privacy law, you have the right to know what personal information we collect, to access and correct it, to delete it, and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.

9. Children

Daily Rhythms is intended for adults. It is not directed at children, and we do not knowingly collect data from children. Any information you provide about your children (such as ages) is used only to personalize your plan and stays on your device unless you choose to sync it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, ask for your consent again.

11. Contact us

For any privacy question or to exercise your rights, contact us at kassie@northofeightdesign.com.