Privacy
policy.

01

Who runs this

Daily Tracker (daily.imjay.in) is a personal productivity tool operated independently by Jayesh Patil, based in Nashik, Maharashtra, India. For the purposes of the General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act 2023 (DPDP Act), we are the data controller for the information described below.

02

What we collect

From Google sign-in. When you sign in with your Google account, Google sends us:

• Your name
• Your email address
• A unique Google account identifier (the sub claim)
• The URL of your Google profile picture

We use only the openid, email, and profile OAuth scopes. We cannot read your Gmail, Google Drive, Calendar, contacts, or anything else in your Google account. If Google ever asks us to broaden these scopes, we won't.

From your use of the app. Everything you type into Daily Tracker is stored:

• The text of each task
• The date each task is for
• Whether each task is pending or completed
• Timestamps of when tasks are created, edited, and finished

Automatically. Our server logs receive standard web traffic information including your IP address, browser user agent, and request timestamps. These logs are retained for at most 30 days and are used only for security and debugging.

We use exactly one cookie — a session cookie that keeps you signed in. There are no third-party cookies, no analytics tags, no advertising identifiers, no fingerprinting.

03

How we use it

We use the information above only to:

• Authenticate you and keep you signed in
• Show you the tasks you've created
• Operate, maintain and improve the service
• Diagnose and fix bugs
• Investigate and prevent abuse or security incidents

That's the complete list. We don't profile you, don't train AI on your tasks, and don't use your information for any other purpose.

04

Who we share it with

Nobody. We do not sell your data. We do not share it with advertisers. We do not use third-party analytics. We have no marketing partners.

The only third party involved in your data flow is Google, who handles authentication when you sign in. Google's handling of your information is covered by the Google Privacy Policy.

If we are ever required by valid legal process to disclose information, we will comply with the minimum scope required and notify you unless prohibited from doing so.

05

Where your data is stored

Your data is stored on our hosting provider's infrastructure. Communication between your browser and our server is encrypted using TLS (HTTPS). Tasks, account records, and session tokens are stored in a MySQL database; all queries use prepared statements, and access is restricted to the application itself.

06

How long we keep it

• Tasks — kept until you delete them.
• Account records — kept until you ask us to delete your account.
• Server logs — kept for at most 30 days, then automatically rotated.
• Session cookies — expire 30 days after your last sign-in.

07

Your rights

You have the right to:

• Access your data — most of it is visible inside the app itself.
• Export your data — use the "Copy DAT" / "Copy DS" buttons in the app, or email us for a complete machine-readable export.
• Correct your data — edit any task in the app at any time.
• Delete your data — delete individual tasks in the app, or email hello@imjay.in to delete your entire account, after which all associated data is wiped within 30 days.
• Withdraw consent — sign out and request account deletion at any time.
• Lodge a complaint — if you are in India, you may approach the Data Protection Board under the DPDP Act 2023; if you are in the EU/EEA, your local supervisory authority.

You can also revoke Daily Tracker's access to your Google account at any time from Google's third-party access page.

08

Children

Daily Tracker is not directed at, or intended for, children under 13 (or under 16 in the European Union). We do not knowingly collect data from anyone in this age group. If you believe a child has used our service, please contact us and we will delete their data.

09

Security

We protect your data using:

• HTTPS (TLS) for every request
• HttpOnly, SameSite=Lax session cookies
• CSRF tokens on every state-changing request
• Prepared SQL statements (no string interpolation)
• Per-user isolation enforced at the database query level — users cannot see or modify each other's tasks
• Session ID regeneration on sign-in to prevent fixation attacks

No system is perfectly secure. If you discover a security issue, please email hello@imjay.in — we'll respond promptly and credit you if you'd like.

10

Changes to this policy

If we change this policy in any material way, we will update the "Last updated" date above and, if you have an account, send a notification to your account email at least 14 days before the changes take effect. Your continued use of Daily Tracker after the effective date constitutes acceptance of the revised policy.

11

Contact

For any privacy question, request, or concern:

• Email: hello@imjay.in
• Operator: Jayesh Patil
• Location: Nashik, Maharashtra, India