Privacy Policy — Daylight

The short version

Daylight has no user accounts and no back-end servers. There is nowhere for us to keep your data, so we don't.
Your to-dos, notes, affirmations and settings are stored on your device and synced through your own iCloud account.
There is no analytics, no tracking, no advertising and no third-party SDK collecting anything about you.
Your coordinates are sent to Apple's weather and geocoding services to fetch today's forecast and resolve a city name for the weather card.
When you search for a place to attach to an event, that search goes to Apple Maps — the same way it does in Apple's own Calendar app.
Your calendar events are read on your device and never transmitted by Daylight.
If you add a link to a note and don't type your own title for it, your device asks that website for its page title — the one request Daylight makes to a server that isn't Apple's.
Purchases are handled entirely by Apple. We never see your payment details.

1. Who we are

Daylight is an iPhone app made and published by Creating Things to Feel Alive LLC, an independent one-person studio. In this policy, "Daylight", "we" and "us" mean that one person. "You" means the person using the app.

This policy covers the Daylight iOS app and its widgets, and this website. It applies from the date shown above.

2. What Daylight stores, and where

Daylight has no back-end. There is no Daylight server, no database of ours, and no account system. Everything the app knows about you is held in two places, both of which belong to you:

On your device

Your days are saved in a private app database inside your iPhone's sandbox, shared with Daylight's own widgets so they can show today's items. This includes:

To-dos, including their dates, completion state, order and any repeat rule
Notes, including their formatting, links and bookmarks
Affirmations, including any you write yourself and the themes you enable
Time blocks you create on the timeline
Your preferences: your first name, temperature units, start and end of day, how many items Today shows, whether tasks roll over, and the order of your Today cards

In your iCloud

If you're signed in to iCloud, the same information syncs to your own private iCloud database using Apple's CloudKit, and your preferences sync through iCloud's key-value store. This is what keeps your iPhone and iPad showing the same day.

That data sits in your personal iCloud account, governed by Apple's privacy policy and your iCloud settings. We cannot see it, query it or retrieve it — the app talks to your iCloud on your device, using your credentials, and we are not a party to it.

One thing is deliberately not synced: your premium status. Purchases are verified against Apple directly on each device instead.

3. Device permissions

Daylight asks for two permissions, and this is everything it does with them. Both are optional — the app works fully without either, with the weather card and events list simply staying quiet until you turn them on.

Permission	Why	What leaves your device
Location While using the app	Two things: to show the weather where you are, and — when you add a location to an event — to suggest places near you and to fill in your current address.	Your latitude and longitude go to Apple's weather service for the forecast, and to Apple's geocoding service to resolve a city name for the weather card — this happens automatically as you move, not only when you ask. If you open the location search on an event, what you type and your approximate location separately go to Apple Maps so it can return matching places. Nothing else, and nothing identifying you.
Calendars	To show your events on Today and on the Events timeline, and to let you create, edit and delete them in the app.	Nothing. Your events are read from and written to your device's calendar database. Daylight never transmits them anywhere.

Your coordinates are used to make the weather request and are not stored by us, logged by us, or attached to any profile — there is no profile to attach them to. To put a city name on the weather card, Daylight also sends your coordinates to Apple's geocoding service. This lookup is automatic, not something you trigger: it happens whenever the weather refreshes and you've moved far enough that the last resolved city might be wrong (roughly every 3 km). The result is cached on your device so it isn't repeated more often than that.

Event place search is separate, and happens only when you ask for it. Nothing is sent to Apple Maps until you tap the location row while creating or editing an event. Your location is used there to bias results toward where you are, so the coffee shop you mean is the one near you. If you pick a place, its name, address and coordinates are saved onto that event in your device's calendar, exactly as Apple's Calendar app does it — that's what lets Get Directions work later. You can always type a location by hand instead, which involves no search at all.

You can withdraw either permission at any time in iOS Settings → Privacy & Security. Daylight keeps working; the weather card goes quiet, place suggestions stop appearing (you can still type a location), or the events list goes quiet.

4. Third parties

Daylight talks to Apple — and, only when you add a link to a note, to the website you linked to.

Apple

Apple provides the App Store, in-app purchases, iCloud sync and the calendar database on your device. Your relationship with Apple for those services is governed by Apple's privacy policy.

Apple also provides today's forecast, through WeatherKit. When the weather card loads or refreshes, Daylight sends your coordinates to Apple's weather service to get the forecast, and to Apple's geocoding service to resolve a city name for display. Neither request carries your name, your Apple Account or an advertising identifier.

Apple also provides Maps, which powers the place search on an event's location row. When you type there, iOS sends the search text and your approximate location to Apple's Maps service and returns matching places; the same happens when you tap Current Location, which asks Apple to turn your coordinates into a street address. This is Apple's own MapKit, used the way Apple's Calendar app uses it. The request goes from your device to Apple, never through us — we don't see what you search for and we receive nothing back. Apple describes how Maps handles searches, including that they aren't tied to your Apple Account, in its privacy policy.

Websites you link to

When you add a link to a note and don't type your own title, Daylight asks your device to fetch that page's title so the link can show a friendly name instead of a raw URL. Your iPhone requests the page over HTTPS directly from that website's own server, the same way Safari would if you opened the link yourself — so that server sees the request, including your IP address, exactly as it would from any visitor. This happens once, at the moment you add the link, using Apple's LinkPresentation framework; it carries nothing about you, your other notes or the rest of the app. If you typed your own title, no request is made at all; if a lookup fails (offline, timeout, or the page has no title), the link falls back to showing the bare website name.

Beyond Apple and any site you deliberately link to, that's the entire list. Daylight includes no analytics SDK, no crash reporter, no advertising network, no attribution framework and no social login. There is no third party receiving your usage or your identity, because none is integrated.

5. Purchases

Daylight Premium is sold through Apple's In-App Purchase system. When you buy a subscription or the lifetime unlock:

Apple takes the payment. We never see your card, billing address or Apple Account details.
Your entitlement is verified on your device by Apple's StoreKit, which cryptographically signs each transaction. There is no receipt sent to a server of ours, because there is no server of ours.
The app stores a single flag on your device recording whether premium is currently active, so the correct screen shows the instant you open the app.
Restoring purchases asks Apple, not us, what you're entitled to.

Subscriptions renew until canceled and are managed in your Apple Account settings. Refunds are handled by Apple at reportaproblem.apple.com.

Apple may share aggregate, anonymised sales and download statistics with us — units sold, countries, App Store impressions. That reporting is produced by Apple, does not identify individual customers, and we have no way to link it to anyone.

6. What Daylight does not do

No accounts. There is nothing to sign up for and no password to lose.
No analytics or telemetry. We do not know how often you open the app, what you tap, or how many to-dos you have.
No tracking. Daylight does not use the advertising identifier, does not fingerprint your device, and does not track you across apps or websites. We do not ask for App Tracking Transparency permission because we have no use for it.
No advertising. There are no ads in Daylight and no ad networks in the code.
No selling or sharing. We do not sell, rent or share personal information with anyone. There's nothing to sell.
No notifications. Daylight sends you no push notifications, ever. iOS does use a silent, contentless push behind the scenes to tell your device that your own iCloud data changed on another device — that is Apple's sync mechanism and it carries nothing to us.

This website is static. It sets no cookies, runs no analytics, embeds no fonts or scripts from other domains, and does not know who you are. Your hosting provider may keep standard server access logs, as all web servers do.

7. Keeping and deleting your data

Because your data never reaches us, deletion is entirely in your hands and takes effect immediately:

One item — delete it in the app. Shake to undo if you change your mind.
Everything on this device — delete the app from your iPhone.
Everything in iCloud — iOS Settings → your name → iCloud → Manage Account Storage → Daylight → delete data.

We hold no copy, no backup and no archive of your content, so there is nothing left for us to erase afterward. If you email us for support, we keep that email thread — and only that — for as long as it's useful to help you, and you can ask us to delete it.

8. Security

Your content is protected by your iPhone's own encryption and app sandboxing, and by iCloud's encryption in transit and at rest. The weather request is made over HTTPS, map searches travel over Apple's own encrypted connection, and a link-title request travels over HTTPS wherever the linked website supports it. Because there is no central store of user data, there is no central store to breach.

No system is perfect, and we can't guarantee the security of Apple's services or your device. Keeping a passcode on your iPhone and two-factor authentication on your Apple Account is the most effective protection for what's in Daylight.

9. Your rights

Depending on where you live — for example under the UK GDPR, the EU GDPR, or the California Consumer Privacy Act — you have rights to access, correct, export, delete and restrict the processing of your personal information, and to object to it.

In Daylight's case those rights are unusually simple to exercise, because you already hold the data: it is on your device and in your iCloud, you can read and change all of it in the app, and you can delete all of it yourself using the steps in section 7. We hold no copy to hand over or erase.

We have never sold or shared personal information as those terms are defined under the CCPA, and we do not use personal information for cross-context behavioral advertising. We will not discriminate against you for exercising any privacy right.

If you have a question or a complaint, write to us at the address below. Users in the UK or EEA also have the right to complain to their local data protection authority.

10. Children

Daylight is a general-audience planner and is not directed at children under 13. We do not knowingly collect personal information from children — in fact we don't knowingly collect personal information from anyone, as there's no collection mechanism at all. If you believe a child has provided information through the app, please contact us.

11. Where your data lives

Your content stays on your device and in your iCloud account, which Apple stores according to its own policies and your region. The weather, geocoding, and place-search requests are all served by Apple's own infrastructure. A link-title request instead goes straight to the website you linked to, wherever that site's own server is hosted — we do not transfer your personal information internationally ourselves, because we do not receive it.

12. Changes to this policy

If Daylight ever changes in a way that affects your privacy — a new feature that talks to a new service, for example — this page will be updated and the date at the top will change. Material changes will also be noted in the app's release notes. Continuing to use Daylight after an update means you accept the revised policy.

13. Contact

Questions about this policy, or anything else about privacy in Daylight, go straight to the person who wrote the app:

Creating Things to Feel Alive LLC
george@usedaylight.app

This policy is written to be read, not to be survived. If any part of it is unclear, that's a fault worth telling us about.