Privacy Policy — DoEveryday

      The short version: We collect only what we need to run DoEveryday. We don't sell your data, don't show you ads, and don't share your information with third parties except to operate the service.
    

1 Information we collect

When you use DoEveryday, we collect:

Account info — your name and email address when you sign up
Habit data — habits you create, check-ins you record, and streaks
Payment info — handled entirely by Stripe. We never see or store your card details
Email preferences — your reminder settings if you opt in
Push notification tokens — only if you grant permission
Challenge data — if you join community challenges, your display name and progress appear on leaderboards visible to other participants

2 How we use your information

We use your data solely to operate and improve DoEveryday:

Sync your habits and check-ins across devices
Send reminders you've requested (email or push)
Process subscription payments via Stripe
Show challenge leaderboards to participants
Respond to support requests
Improve app performance and fix bugs

We do not sell your data. We do not use your data for advertising.

3 Community & public data

If you join a community challenge, your display name and check-in count are visible to other challenge participants on the leaderboard. No other personal information is shared.

You can leave a challenge at any time to remove yourself from the leaderboard.

4 Data storage & security

Your data is stored securely on Supabase, hosted on AWS infrastructure in the US. All data is encrypted at rest and in transit using industry-standard protocols.

5 Third-party services

DoEveryday uses the following services to operate:

Supabase — database & auth Stripe — payments Resend — email delivery Vercel — web hosting Google / Apple — OAuth sign-in

Each service has its own privacy policy and is bound by GDPR/CCPA-compliant data processing agreements.

6 Chrome extension

The DoEveryday Chrome extension handles data the same way as the web app, with these extension-specific details:

Local storage — your session token and an offline check-in cache are saved in chrome.storage.local so the extension works between browser restarts and when offline. This data stays on your device.
Network access — the extension only talks to *.supabase.co (to sync your habits and check-ins) and accounts.google.com / appleid.apple.com (only during sign-in).
No tracking — the extension does not inject scripts into other websites, does not read page content, and does not track your browsing. It only runs on its own pages: the new tab override and the toolbar popup.
Permissions — storage (session + offline cache), tabs (open the web app with your session preserved), identity (Google / Apple OAuth sign-in), alarms (periodic refresh of the toolbar badge). Each permission is used only for its stated purpose.
Instant sync — doeveryday.app can send badge-update messages to the extension via externally_connectable so your toolbar badge updates immediately after a check-in on the web.

7 Data retention

We retain your data for as long as your account is active. When you delete your account, all your personal data — habits, check-ins, email subscriptions, and payment records — is permanently deleted immediately.

8 Your rights

You have full control over your data:

Export — download your habit data as CSV in Settings
Delete account — permanently delete your account and all data in Settings
Opt out of emails — unsubscribe at any time in Settings or via the link in any email
Opt out of push notifications — revoke permission in your browser or OS settings

If you're in the EU, you also have rights under GDPR including access, rectification, erasure, and portability. Contact us to exercise these rights.

9 Cookies

DoEveryday uses only essential session cookies required for authentication. We do not use tracking, analytics, or advertising cookies.

10 Children's privacy

DoEveryday is not intended for children under 13. We do not knowingly collect data from children under 13. If we become aware that we have, we will delete it promptly.

11 Changes to this policy

We may update this policy occasionally. If there are material changes, we'll notify you by email at least 30 days before they take effect.

12 Contact

Questions about this policy or your data? Email us at hello@doeveryday.app — we respond within 2 business days.