Privacy policy

In short

The app stores what you put into it — only so that it works for you on all your devices.

Besides that, it counts how the app is used: numbers only, without the contents of your entries. You can turn this off (see “Usage statistics” below).

We do not sell data, show ads, or pass your entries to outsiders.

What data the app has

The name and number of your Telegram account (or another sign-in method) — to recognise you when you sign in.

Your entries: shifts and income, tasks, events, shopping, habits, dates, people and notes about them, finances, and the “Mood” section — mood, sleep, emotions, diary, medication. “Mood” entries are sensitive information about your wellbeing; whether to record them is entirely up to you.

Your settings: appearance, language, order of sections.

Your sign-ins: how you signed in (Telegram or Google), the device type (for example, iPhone or Windows) and when the sign-in was last used (to the hour), plus your phone’s time zone. This is needed to show the “Devices” list in “Account”, to close a forgotten sign-in and to send reminders on time. A sign-in ends by itself after a week without use and in any case after 60 days — your entries are not lost: they stay on the device and on the server, and the app simply asks you to sign in again (inside Telegram it signs you in again by itself); “Sign out” also ends it on the server.

Your IP address and technical connection details are seen by Cloudflare — the server the app runs on. The app itself uses the IP address only to limit the number of requests per minute (protection against overload and attacks) and does not keep it in its database.

Where everything is stored

On your device — always. Without signing in, the data never leaves it.

Only you can sign in to your account. On the website the app accepts a Telegram sign-in only if you started it yourself on this device, and it does not accept a sign-in link sent by someone else. If the device already has entries, the app asks “Sign in as …?” first. Entries made without signing in go to your account after you sign in. Another account’s entries are not moved by themselves — the app asks what to do with them: move them to your account, keep them only on this device, or remove them from it. Inside Telegram the sign-in happens by itself — into the account of whoever opened the app; if the Telegram account was switched, the previous person’s entries are removed from the device (whatever they changed is first saved to their own account).

If you are signed in — also on the server (Cloudflare), so that your entries are on all your devices. The connection to the server is encrypted.

Entries on the server are stored without end-to-end encryption (except “Mood”, if you turned on its encryption — see below). This means the service owner can technically open the database — but only to keep the app running: to update the database, fix a failure or restore entries from a backup. Reading your entries is not needed for that, and the app has no screen or command for browsing anyone’s entries.

Who sees your entries

Only you. Friends see only what you opened to them: shifts, events or tasks — separately for each friend; shared tasks and shared shopping lists — only those you invited them to.

From the “Mood” section a friend sees just one number — your latest mood of the past week on a scale of 1 to 5 — and the day you marked it (“today”, “yesterday”, “3 days ago”). And only if you turned on “Sharing my mood” for that friend. The diary, emotions, sleep, medication, mood notes and income are not shown to friends.

A participant sees a shared task or event in full, with its note: everything written in it is seen by everyone you invited.

When you sign out, friends, the copies of their calendars, their photos and the tasks and lists shared with them are removed from the device. Your own entries you keep on the device or remove — as you choose.

“Mood” encryption

Optional: Settings → Privacy → “Encrypt “Mood””. It is off by default; you can turn it on after signing in.

When it is on, “Mood” entries — mood, diary, sleep, emotions, appetite, “What happened?”, your own journals and their names, your own activities and their groups — are encrypted on your device before they are sent. The server keeps them unreadable: neither the service owner nor anyone else can read them.

What the server still sees: that an entry exists and its time, and that you marked your mood on that day (without the value) — so the bot does not ask “How was your day?” twice. If you share your mood with at least one friend, only the mood number of the past week stays open — so the server can show it to the friends you allowed.

Medication stays open — the list, the schedule and the intake marks: the bot uses them for reminders and for the “Taken” button. With encryption on, the bot’s evening “How was your day?” comes without the faces: you mark your mood in the app, because a reply through Telegram would reach the server as plain text. A mark made in the chat before encryption was turned on is encrypted by the app at the next sync.

The key is made from a recovery code — 12 words the app shows once. The code itself is never stored: not on the server and not with us. On a new device or after erasing data the diary opens only after entering this code. If you lose both the code and every device where the diary is open, the entries are gone for good: nobody can bring them back.

The wellbeing report is built on your device, so it works with encryption too. An exported copy of your data contains entries as plain text — keep it safe. You can turn encryption off at any time: entries will be stored on the server as plain text again.

Passcode

The passcode itself is never stored — only its fingerprint. It is kept on the device and, once you sign in, on the server too: so the code works on all your devices and does not disappear if the data on the phone is erased. It protects from prying eyes and is not encryption.

A forgotten passcode in the account is reset with a button in the chat with the Telegram bot (for an account without Telegram — 24 hours after the request). Without signing in, a forgotten code is reset together with the copy of the data on the device.

Unlocking with your face or fingerprint inside Telegram is checked by the phone itself: DayHeart receives neither a face image nor a fingerprint.

Bank statements and monobank

A statement file is read on your device and is not sent anywhere. Only the date, amount, description and category go into “Finance” — as your ordinary entries.

If you connected monobank yourself with your personal key: the key is stored on the server encrypted, is never returned to the app, and is used only to fetch the statement when you ask for it. The key only allows reading the statement; the app never makes payments or transfers. Disconnecting monobank in the app erases the key from the server; you can also revoke the key on the bank’s side.

Reminders and feedback

Reminders are sent by the Telegram bot; you can hide their text in the settings.

A “Feedback” message with its picture and the app version number goes to the DayHeart support team in Telegram; the reply may come to the bot chat.

After “Contact support” (or the /support command) the bot passes your messages, photos and files to the DayHeart support team — together with your Telegram name and username — until you tap “Finish” or there are no new messages for 30 minutes.

If the app could not open a screen, it offers to send a crash report. The report is sent only when you press the button and only when you are signed in; it contains the version number, the section, the error text, the device type and the number of unsent changes, and none of your entries.

Usage statistics (“Help improve DayHeart”)

On by default; turn it off in Settings → Privacy → “Help improve DayHeart”. It works only when you are signed in.

What is counted — numbers per day only: which sections, pages and windows you opened; how many new entries of each kind you made (for example, “tasks: 3”, “shifts: 2”; for “Mood” also the kind of entry, such as “mood check-in”); how many windows where you had started filling something in were closed without saving; on which days and how many times you opened the app; how fast it works — how long the launch took until the first screen and the slowest redraw of each section, in milliseconds; the approximate number of entries on the device (rounded) and whether it is a phone or a computer.

What is not counted or sent: the text and titles of entries, notes, amounts, mood and other “Mood” values, dates and numbers of entries, friends. Sections you turned off are not counted at all.

Why: to understand which sections are useful, where people give up halfway and how often they come back; aggregated totals (numbers only, never the content of entries) may be used in reviews and studies about the app. These numbers also show what to improve and what is slow on phones.

How it is sent: once a day, together with the regular sync — the numbers for past days, one row per day. On the server they are kept together with the account number (to count how many people come back) and are deleted together with the account. They are not passed to outsiders; reviews and studies use only overall totals across all people.

How to opt out: turn off “Help improve DayHeart”. The app stops counting at once and erases the numbers not yet sent from the device, and the server stops accepting them. Numbers already sent are deleted together with the account.

Your rights

Export a copy of all data: Settings → Account → “Export a copy”.

Delete everything: Settings → Account → “Delete the account and all data”. Entries are erased from the server and this device at once and cannot be restored. If DayHeart was open on another device, its copy stays there: the next time it opens, the app asks whether to erase it or put the entries back into the account, and sends nothing back by itself.

Questions — via “Feedback” in the app.

Changes

If the policy changes, the new version appears on this page, and the app will tell you about important changes at launch.