Daily Five — Privacy Policy

Who we are

Daily Five is built and operated by FroBro Web Technologies. When this policy says "we," that's who it means.

What we collect

You give us:

• Your name and email — at sign-up, for your account and (if you set one up) your witness's weekly email. We never use your email for marketing.
• Your password — only if you sign up with email. It's hashed by our authentication provider; we never see it. If you use Apple or Google sign-in, we receive your email and (optionally) name from them, for authentication only.
• Your identity statement — the short sentence you write during onboarding.
• Your habits — names, anchors, what-counts definitions, and hard-day minimums. Plus when you complete them, and any reason you give for a missed day.
• Your witness — if you add one: their name, email, and the day you've chosen for their weekly summary.

Your device provides automatically:

• Your timezone (home and current) — to define your "day" and time notifications correctly. This is timezone only — not GPS or location.
• Notification permission state — to know whether to schedule reminders.
• App version and platform — sent with crash reports, for diagnostics only.

We do not collect location, contacts, camera/microphone/photos, advertising identifiers, or any cross-app tracking data. We use no third-party analytics. We do not sell or share your data with anyone for marketing, ever.

How we use it

To run the app: authenticate you, store and sync your habits and progress, send your witness's weekly email if you've set one up, and diagnose crashes. That's the whole list. Not advertising. Not marketing. Not sold.

Who we share it with

Only the service providers that make the app work:

• Supabase — hosts our database and handles authentication and server functions (US East region).
• Resend — delivers the weekly witness email, if you've added a witness.
• Sentry — captures crash and error reports. We do not attach your identity to these reports.
• Apple / Google — for sign-in and app distribution.

No marketing partners. No data brokers. No analytics companies.

Your witness

If you add a witness, they receive one email per week containing your name, a count of days you completed all five habits, and your strongest and weakest habit that week. Nothing more — no daily detail, no identity statement, no miss reasons, no timestamps. They have no account and no access to your data.

You name the witness and provide their email, so you are responsible for having their permission to share your weekly summary with them. You can remove a witness any time in Settings → Witness; their emails stop immediately.

Where it's stored and how it's protected

Your data lives in a Postgres database hosted by Supabase in the US East region, mirrored locally on your device. It's encrypted in transit (TLS) and at rest. Row-Level Security ensures only you can access your own data. Passwords are hashed by our auth provider. Crash data is held by Sentry under their retention defaults.

How long we keep it

While your account is active, plus a 30-day grace period after you delete it (so you can recover). After 30 days, your data is permanently deleted. Crash data is retained per Sentry's standard retention (typically 30–90 days).

Deleting your account

You can delete your account any time in Settings → Delete account. Your data is marked for deletion immediately; you have 30 days to sign back in and recover it; after that it's permanently and irreversibly deleted. If you've removed the app and can't reach the in-app option, email [email protected] and we'll process the deletion.

Children

Daily Five is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has given us data, email us and we'll remove it.

Your rights

You can view and edit your data in the app, and delete your account as described above. Data export is planned for a future release. For any request, email [email protected].

Changes to this policy

If we make material changes, we'll update this page and, where appropriate, notify you in the app or by email. Continued use after a change means you accept it.