Privacy Policy — Daylight

The short version

Daylight has no user accounts and no back-end servers. There is nowhere for us to keep your data, so we don't.
Your to-dos, notes, affirmations and settings are stored on your device and synced through your own iCloud account.
There is no analytics, no tracking, no advertising and no third-party SDK collecting anything about you.
Your coordinates are sent to a weather service to fetch today's forecast, and nothing else is sent anywhere.
Your calendar events are read on your device and never transmitted by Daylight.
Purchases are handled entirely by Apple. We never see your payment details.

1. Who we are

Daylight is an iPhone app made and published by George Tinari, an independent solo developer. In this policy, "Daylight", "we" and "us" mean that one person. "You" means the person using the app.

This policy covers the Daylight iOS app and its widgets, and this website. It applies from the date shown above.

2. What Daylight stores, and where

Daylight has no back-end. There is no Daylight server, no database of ours, and no account system. Everything the app knows about you is held in two places, both of which belong to you:

On your device

Your days are saved in a private app database inside your iPhone's sandbox, shared with Daylight's own widgets so they can show today's items. This includes:

To-dos, including their dates, completion state, order and any repeat rule
Notes, including their formatting, links and bookmarks
Affirmations, including any you write yourself and the themes you enable
Time blocks you create on the timeline
Your preferences: your first name, temperature units, start and end of day, how many items Today shows, whether tasks roll over, and the order of your Today cards

In your iCloud

If you're signed in to iCloud, the same information syncs to your own private iCloud database using Apple's CloudKit, and your preferences sync through iCloud's key-value store. This is what keeps your iPhone and iPad showing the same day.

That data sits in your personal iCloud account, governed by Apple's privacy policy and your iCloud settings. We cannot see it, query it or retrieve it — the app talks to your iCloud on your device, using your credentials, and we are not a party to it.

One thing is deliberately not synced: your premium status. Purchases are verified against Apple directly on each device instead.

3. Device permissions

Daylight asks for two permissions and uses them for exactly two things.

Permission	Why	What leaves your device
Location While using the app	To show the weather where you are.	Your latitude and longitude, and your time zone, are sent to the weather service described below. Nothing else, and nothing identifying you.
Calendars	To show your events on Today and on the Events timeline, and to let you create, edit and delete them in the app.	Nothing. Your events are read from and written to your device's calendar database. Daylight never transmits them anywhere.

Your coordinates are used to make the weather request and are not stored by us, logged by us, or attached to any profile — there is no profile to attach them to. Daylight only looks up your city name for display, on your device.

You can withdraw either permission at any time in iOS Settings → Privacy & Security. Daylight keeps working; the weather card or the events list simply goes quiet.

4. Third parties

Daylight talks to exactly two outside services.

Open-Meteo (weather)

Today's forecast comes from Open-Meteo, a free weather API. When the weather card loads, Daylight sends a request containing your coordinates, your time zone and your temperature unit. The request carries no name, no account, no device identifier and no advertising ID. Open-Meteo's handling of requests is covered by its own terms and privacy notice.

Apple

Apple provides the App Store, in-app purchases, iCloud sync and the calendar database on your device. Your relationship with Apple for those services is governed by Apple's privacy policy.

That's the entire list. Daylight includes no analytics SDK, no crash reporter, no advertising network, no attribution framework and no social login. There is no third party receiving your usage, your content or your identity, because none is integrated.

5. Purchases

Daylight Premium is sold through Apple's In-App Purchase system. When you buy a subscription or the lifetime unlock:

Apple takes the payment. We never see your card, billing address or Apple Account details.
Your entitlement is verified on your device by Apple's StoreKit, which cryptographically signs each transaction. There is no receipt sent to a server of ours, because there is no server of ours.
The app stores a single flag on your device recording whether premium is currently active, so the correct screen shows the instant you open the app.
Restoring purchases asks Apple, not us, what you're entitled to.

Subscriptions renew until cancelled and are managed in your Apple Account settings. Refunds are handled by Apple at reportaproblem.apple.com.

Apple may share aggregate, anonymised sales and download statistics with us — units sold, countries, App Store impressions. That reporting is produced by Apple, does not identify individual customers, and we have no way to link it to anyone.

6. What Daylight does not do

No accounts. There is nothing to sign up for and no password to lose.
No analytics or telemetry. We do not know how often you open the app, what you tap, or how many to-dos you have.
No tracking. Daylight does not use the advertising identifier, does not fingerprint your device, and does not track you across apps or websites. We do not ask for App Tracking Transparency permission because we have no use for it.
No advertising. There are no ads in Daylight and no ad networks in the code.
No selling or sharing. We do not sell, rent or share personal information with anyone. There's nothing to sell.
No notifications. Daylight sends you no push notifications, ever. iOS does use a silent, contentless push behind the scenes to tell your device that your own iCloud data changed on another device — that is Apple's sync mechanism and it carries nothing to us.

This website is static. It sets no cookies, runs no analytics, embeds no fonts or scripts from other domains, and does not know who you are. Your hosting provider may keep standard server access logs, as all web servers do.

7. Keeping and deleting your data

Because your data never reaches us, deletion is entirely in your hands and takes effect immediately:

One item — delete it in the app. Shake to undo if you change your mind.
Everything on this device — delete the app from your iPhone.
Everything in iCloud — iOS Settings → your name → iCloud → Manage Account Storage → Daylight → delete data.

We hold no copy, no backup and no archive of your content, so there is nothing left for us to erase afterwards. If you email us for support, we keep that email thread — and only that — for as long as it's useful to help you, and you can ask us to delete it.

8. Security

Your content is protected by your iPhone's own encryption and app sandboxing, and by iCloud's encryption in transit and at rest. The weather request is made over HTTPS. Because there is no central store of user data, there is no central store to breach.

No system is perfect, and we can't guarantee the security of Apple's services or your device. Keeping a passcode on your iPhone and two-factor authentication on your Apple Account is the most effective protection for what's in Daylight.

9. Your rights

Depending on where you live — for example under the UK GDPR, the EU GDPR, or the California Consumer Privacy Act — you have rights to access, correct, export, delete and restrict the processing of your personal information, and to object to it.

In Daylight's case those rights are unusually simple to exercise, because you already hold the data: it is on your device and in your iCloud, you can read and change all of it in the app, and you can delete all of it yourself using the steps in section 7. We hold no copy to hand over or erase.

We have never sold or shared personal information as those terms are defined under the CCPA, and we do not use personal information for cross-context behavioural advertising. We will not discriminate against you for exercising any privacy right.

If you have a question or a complaint, write to us at the address below. Users in the UK or EEA also have the right to complain to their local data protection authority.

10. Children

Daylight is a general-audience planner and is not directed at children under 13. We do not knowingly collect personal information from children — in fact we don't knowingly collect personal information from anyone, as there's no collection mechanism at all. If you believe a child has provided information through the app, please contact us.

11. Where your data lives

Your content stays on your device and in your iCloud account, which Apple stores according to its own policies and your region. The weather request is served by Open-Meteo's infrastructure in Europe. We do not transfer your personal information internationally ourselves, because we do not receive it.

12. Changes to this policy

If Daylight ever changes in a way that affects your privacy — a new feature that talks to a new service, for example — this page will be updated and the date at the top will change. Material changes will also be noted in the app's release notes. Continuing to use Daylight after an update means you accept the revised policy.

13. Contact

Questions about this policy, or anything else about privacy in Daylight, go straight to the person who wrote the app:

George Tinari
george@usedaylight.app

This policy is written to be read, not to be survived. If any part of it is unclear, that's a fault worth telling us about.