Privacy Policy | DawnTracker

Who is responsible

DawnTracker is responsible for the personal data described here. Contact us about privacy or your data at support@dawntracker.com.

What we process and why

Data	Purpose	Legal basis (GDPR)
Account: email address, password (stored only as a secure hash), optional display name	Sign-in, account security, account emails such as confirmations and password resets	Performance of our agreement with you
Planner content: contexts, tasks, notes, events, completions, and settings	Storing and syncing your planner across your devices	Performance of our agreement with you
Subscription: Stripe customer ID or Google Play purchase token and order ID, plan, status, renewal date, and billing email	Providing Premium, receipts, and bookkeeping	Performance of our agreement; legal obligations under accounting law
Technical data: IP address, browser or device type, request times, error logs	Delivering the service, keeping it secure, and preventing abuse	Our legitimate interest in a secure, working service
Support emails you send us	Answering your questions and handling refunds	Performance of our agreement; legitimate interest

We do not use your data for advertising, profiling, or automated decisions, and we do not read your planner content unless you ask us to while helping with a support request. Payment card details are entered on Stripe's or Google Play's pages and never reach DawnTracker.

The web demo stores its sample data only in your browser. Nothing from the demo is sent to our servers.

Service providers

We use a small number of providers who process data on our behalf, under data processing agreements:

Provider	What they do	Location
Supabase	Database, sign-in, and backend functions. Your account and planner data are stored here.	EU (Ireland)
Resend	Delivers account emails (sign-up confirmation, password reset, email change). Receives your email address and the message content.	EU
Cloudflare	Hosts this website and app downloads, protects against attacks, and stores encrypted database backups. Sees IP addresses and request details to deliver pages.	Global network
Stripe	Payments, subscriptions, receipts, and fraud prevention. Stripe is also an independent controller for payment data it must keep by law. See Stripe's privacy policy.	EU and USA
Google (Google Play)	Payments and subscriptions when you buy Premium in the Android app from Google Play. We receive the purchase token, order ID, and subscription status, plus your DawnTracker account ID that the app attaches to the purchase. Google is an independent controller for your Google account and payment data. See Google's privacy policy.	EU and USA

Two optional features contact third-party services directly from your device:

Public holidays: when you import public holidays, the app requests them from Nager.Date (date.nager.at). The request includes the country you choose and, like any web request, your IP address.
Extra characters on the web: the fonts are bundled with the app, but if you use characters they do not cover, such as emoji, the web app's rendering engine may download a matching font from Google Fonts (fonts.gstatic.com), which sees your IP address.

When data leaves the EU/EEA, for example to Stripe, Google, or Cloudflare in the USA, it is protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep data

Account and planner data: until you delete your account.
When you delete your account in Settings, your account and planner data are deleted immediately and your Stripe customer record is deleted, which also cancels any subscription. A Google Play subscription is cancelled so it does not renew.
Encrypted database backups: kept for up to 30 days, then deleted automatically.
Payment and invoice records: kept as long as accounting law requires, currently up to 7 years.
Server and security logs at our providers: kept for a short period, usually days to weeks.
Support emails: until the issue is resolved, then deleted within 12 months.

Delete your account

You can delete your DawnTracker account and its data in either of two ways:

In the app: open Settings, choose Delete account, and confirm. This works in the web app at dawntracker.com and in every DawnTracker app.
By email: if you cannot sign in or no longer have the app, email support@dawntracker.com from the email address on your account and ask us to delete it. We confirm by email and delete the account within one month, usually much sooner.

Deleting your account removes your email address, display name, account ID, and all planner content (contexts, tasks, notes, events, completions, and settings). Any Stripe subscription is cancelled and the Stripe customer record deleted, and any Google Play subscription is cancelled so it does not renew.

Some data is kept for a limited time: encrypted backups are deleted automatically within 30 days, and payment and invoice records are kept as long as accounting law requires, currently up to 7 years.

Delete some of your data

You can delete individual data from DawnTracker without deleting your account:

In the app: delete any task, event, or context with its Delete option. The item, including its notes, reminders, and completions, is removed from our servers the next time the app syncs. Tasks in a deleted context move to another context.
By email: to delete other data, such as your display name or support emails, email support@dawntracker.com from the email address on your account and tell us what to delete. We confirm by email and delete it within one month, usually much sooner.

Deleted data stays in encrypted backups for up to 30 days. Payment and invoice records are kept as long as accounting law requires, currently up to 7 years.

Storage on your device

We do not use cookies for tracking. The app stores the following in your browser's local storage, or in the app's storage on your device, because it is strictly necessary for the app to work. No consent banner is needed for this.

Name	Purpose	Kept
`SUPABASE_PERSIST_SESSION_KEY`	Keeps you signed in. Not stored when Keep me logged in is off.	Until you sign out
`flutter.auth_remember_me`, `flutter.auth_remembered_email`	Your Keep me logged in choice and the email to pre-fill on the sign-in form	Until you clear it
`flutter.offline_app_snapshot::`, `flutter.offline_pending_mutations::`	Offline copy of your planner and changes waiting to sync	Until you delete your account or clear storage
`flutter.device_alerts_enabled_v1`, `flutter.delivered_reminder_ids_v1`	Reminder settings for this device, and which reminders were already shown	Until you clear it
`flutter.demo.*`	Sample data and settings for the web demo only	Until you clear it

Stripe's checkout and subscription pages are hosted on stripe.com and set their own cookies, which are needed for secure payments and fraud prevention.

Your rights

Under the GDPR you have the right to:

access the personal data we hold about you and get a copy of it;
correct inaccurate data (you can change your email in Settings);
have your data deleted (Settings, Delete account, or email us);
receive your data in a portable format;
object to or restrict processing based on legitimate interest;
complain to your data protection authority. In Sweden this is the Swedish Authority for Privacy Protection (IMY).

Email support@dawntracker.com from your account email to use these rights. We reply within one month.

Security

All traffic is encrypted with HTTPS. Each account can only access its own data, enforced by database access rules. Backups are encrypted before they are stored. Passwords are stored only as secure hashes.

Children

DawnTracker is not directed at children under 13, and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will update the date above and let account holders know by email or in the app.

Your planner, not a data product.