Privacy Policy

Last updated: October 29, 2026

Testing Status

MyDayPilot is in limited TestFlight testing. This policy describes the current test build and requires review before public release.

Account and Recovery

You can use your planner offline without an email address. Support Circle and online backup or recovery require a verified email address. Supabase stores your sign-in identity and confirmed email address. The app uses the same verified identity for these features. Supported devices store sign-in recovery information in secure device storage.

Planning Data

Your device stores reminders, Top 3 items, Must Not Forget items, completion history, imported items and preferences. Turning backup Off stops new automatic planner backups. Older versions may have saved completion records and daily snapshots in your account; those records remain subject to the app’s history and deletion controls.

Calendar, Reminders, and Contacts

Access is requested when you choose to import or select contacts. If you enable Calendar or Reminders importing, the app checks that source once per day when opened or brought to the foreground. Imported content you choose to include in your planner may be included in saved planning data.

Optional Backup and Restore

If you enable backup, encrypted planner copies are saved to your chosen destination: private iCloud storage or MyDayPilot Cloud. Where email-based recovery is enabled, MyDayPilot also securely stores encrypted recovery information needed to unlock those copies after email verification, including for iCloud backups. This is service-managed encryption, not encryption that only you can unlock. You do not need to save or enter a separate recovery code. iCloud restoration also requires the same Apple Account. Backup status shows the last successfully verified copy; automatic backups run while the app is active and connected, not on a guaranteed background schedule.

Support Circle

Cloudflare stores your Support Circle contacts and private links, submitted suggestions, and notification delivery information. These are associated with your verified MyDayPilot identity and authorized app installations. People with a private Support Circle link can submit suggestions. Share links only with people you trust. Support Circle does not require enabling planner backup.

Subscriptions

Subscriptions are not enabled in the current TestFlight build. When enabled, Apple handles payment and RevenueCat processes subscription status and purchase information using your MyDayPilot account identifier. MyDayPilot does not receive your payment card details.

Sharing and Exports

PDF reports are created on your device. You choose where to share them. Anyone receiving a report can keep a copy outside MyDayPilot.

Deleting Data

Start Fresh clears your planner and settings, removes the associated Support Circle and app-managed backups, and lets you choose whether to keep completion history. For a never-connected offline planner, it clears only that local planner. Delete All Data removes the app-managed planner, history, Support Circle and backups within the reviewed account scope, clears local sign-in information, and signs you out. Your email sign-in identity remains available. Exported or shared copies are outside the app’s control. Limited deletion records and encrypted administrative recovery archives may remain; they must not be used to restore data you deleted. Deleting app data does not cancel an Apple subscription. Contact us for sign-in account deletion.

Contact

Questions or deletion requests: huanlupescu@gmail.com.