01
Scope and overview
This policy explains how Across the Day handles information when you use the iPhone app, the web or Windows app at app.acrossthedayapp.com, the public website, synchronization features, and support services. The authoritative version is always posted at acrossthedayapp.com/privacy.
Across the Day is designed to help you organize your life without turning your personal information into a product. We do not sell personal information, and we do not use your content for third-party advertising or cross-app tracking.
02
Information we handle
Account information. If you use web or Windows synchronization, we handle the email address and account identifier used for your account. Authentication is provided by Supabase. We do not receive or store your readable password.
Your content. Depending on the features you use, this may include notes, tasks, reminders, categories, completion status, dates, priorities, saved reminder locations, rich-text content, attachments, photos, documents, custom backgrounds, and related settings.
Support communications. When you use our private contact form, we handle the name, reply email address, topic, and message you submit so we can respond.
Technical information. We and our service providers may process limited technical information needed to operate, secure, diagnose, and improve the service, such as app version, device or browser type, IP address, request records, crash details, and performance information.
03
iPhone app and device permissions
The iPhone app may request access to photos, the camera, notifications, location, Face ID, or files when you choose a feature that needs them. You can review or revoke these permissions in iPhone Settings, although a feature may stop working if its required permission is disabled.
Photo, camera, and file access are used only when you choose to add or capture content. Notification access is used to deliver reminders and alerts you choose to receive. When you enable a location reminder, location access is used to detect the location condition and deliver that reminder.
Ordinary notes, tasks, reminders, categories, and supported attachments may synchronize through Apple iCloud or CloudKit when that feature is enabled, and may also synchronize with the web and Windows app through the Across the Day account service. Secure Photos are excluded from every synchronization path.
04
Secure Photos on iPhone
Secure Photos are different from ordinary note attachments. Photos placed in Secure Photos are encrypted on your iPhone and unlocked with Face ID or your device passcode. They are not saved to your camera roll, synced to another device, uploaded to Supabase, or included in Across the Day, iCloud, or Windows backups.
Because Secure Photos remain only on that iPhone, deleting them, deleting the app, losing the device, or losing access to the device can permanently remove them. Keep another secure copy of anything you cannot replace.
05
Web and Windows app
The web and Windows app uses your Supabase account to save and synchronize supported content across signed-in devices. Supabase provides authentication, database services, and private storage for supported attachments. Cloudflare provides hosting, content delivery, network security, and related technical services.
Custom backgrounds and some preferences may remain only in the browser or on the device unless the app tells you they will synchronize. Offline data may be cached locally so the app can continue to work when the network is unavailable.
06
Cookies and local storage
The website and web or Windows app may use essential cookies, browser storage, and local caches to keep you signed in, protect your session, remember preferences, support offline use, and improve reliability. These technologies are not used for third-party advertising or cross-site behavioral tracking.
You can clear cookies or site data through your browser or operating system. Doing so may sign you out, remove locally stored preferences or offline data, and require the app to download synced content again.
07
How we use information
We use information to authenticate your account; provide, save, synchronize, and restore the features you request; process attachments; deliver reminders; support offline use; prevent abuse; diagnose problems; respond to support and privacy requests; protect the service and its users; and comply with applicable law.
We do not use the content of your notes, tasks, reminders, attachments, or Secure Photos to build advertising profiles or sell targeted advertising.
08
Service providers and disclosure
We use service providers that process information on our behalf, including Supabase for account authentication, databases, and private file storage; Cloudflare for hosting, delivery, and security; and Apple services for device permissions, notifications, and optional iCloud or CloudKit synchronization.
We may also disclose information when you direct us to do so, when reasonably necessary to comply with law or valid legal process, or to protect rights, safety, security, and the integrity of the service. We do not sell personal information or share it for cross-context behavioral advertising.
09
Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the service. Connections use encryption in transit. Supabase account controls and database access rules are used to restrict synced records and private files to authorized users. Secure Photos use on-device encryption and device authentication.
No system can guarantee absolute security. Protect your device, account password, and access to your email account, and contact us promptly if you believe your account has been compromised.
10
Retention and deletion
Local information remains on your device until you delete it, clear the app’s data, or remove the app. Synced account information and content are generally retained while your account is active and as needed to provide synchronization, recovery, security, support, and legal compliance.
You can delete individual items inside the app. A deletion may synchronize to other connected devices. Deleted records, security logs, and backup copies may remain for a limited period before they are overwritten or removed. Deleting the iPhone, web, or Windows app from a device does not by itself delete cloud content or your account.
To request account access, correction, a copy of your information, or deletion of your account and associated cloud content, use our private contact form and select “Privacy request.” We may need to verify your identity before completing a request. Secure Photos must be deleted on the iPhone where they are stored.
11
Your choices and rights
You can manage device permissions in system settings, control cookies and local data in your browser, edit or delete content in the app, sign out of connected devices, and choose whether to use optional synchronization features.
Depending on where you live, you may also have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. Submit a request through the private contact form so we can review the rights that apply to you.
12
Children’s privacy
Across the Day is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, use our private contact form so we can address it.
13
International processing
Across the Day and its service providers may process information in the United States and other countries where they operate. Those locations may have data-protection laws that differ from the laws where you live. We use the safeguards required for the services we provide.
14
Changes to this policy
We may update this policy as the apps and services evolve. The revised policy will be posted at this same official URL with a new effective date. Material changes will be communicated when required.
Contact
Questions about privacy?
Send us a message through our private contact form and select “Privacy request.” Please do not include passwords, payment-card numbers, identification documents, or other sensitive content in your message.
Contact Privacy Support