Privacy

What's collected

• Username and password. Your password is stored as a one-way hash. Nobody, including the person running this app, can see the original.
• Email. Required at signup, used only to send you a verification code and, if you request it, a password reset code. It's shown to you (not other users) in Settings.
• What you post. Your Daily round's words, transcript, and timing stats, if you choose to send them to a board. When you post, you choose the audience: Public, one of your groups, or both. A post is visible to whoever can see that board (any signed-in user for Public, or a group's approved members for a group board).
• Your voice, briefly. Daily mode records audio for the round so it can generate a transcript. That recording is uploaded once to Groq, a third-party AI provider, purely to transcribe it to text, then discarded. This app never stores the audio itself, only the resulting text, same as before this existed. If transcription fails or isn't available, the round still works, just without a transcript.
• Personal stats. While you're signed in, your streak, activity, and session history (including transcripts from Standard, Speed, and Infinite practice rounds, not just what you post to a board) sync to your account so your progress follows you across devices. This is private to you; nobody else can see it.
• Upvotes and reports. Who upvoted or reported what, so the app can enforce one vote per person and moderate the board. A Public post is only removed automatically once it has built up substantial engagement (100 or more combined reports and upvotes) and reports outnumber upvotes at that point, so a handful of reports alone can't take a post down. Group-only posts aren't auto-moderated this way; a group owner can remove those manually instead. No one reads reports by hand, it's just counts.
• Group membership. Who's in which group, so the app can show member lists and let group owners manage their group.
• Anonymous usage stats. Which mode you played, how long a round ran, and a random id your browser generates and stores locally, not your account, not your IP, not anything identifying. This lets the app's owner see rough trends, like which mode gets played most, never who is playing. Logged for signed-in and anonymous play alike.

What's not collected

• No ads, no ad trackers, no third-party analytics (no Google Analytics, no Meta Pixel, nothing like that). The only usage tracking is the anonymous, in-house stats described above.
• No third-party logins (Google, Apple, etc). Just a username and password.
• Your IP address is used only transiently, in memory, to rate-limit abuse (someone hammering the login form, for example). It isn't stored in the database or logged long-term.
• Standard, Speed, and Infinite are playable without an account. No personal record (no streak, no history) is created until you sign up.

Who else sees it

Resend delivers the verification and reset emails on this app's behalf. They receive the email address and code being sent, nothing else. Groq transcribes Daily mode's voice recordings to text, then discards the audio; this app never stores the recording itself. The app and its database run on Railway. None of this data is sold, shared for advertising, or given to anyone else.

Sharing a Daily post publicly

Tapping the 🔗 icon on your own board post copies a public link to that one post (its words, transcript, and time), plus a preview image built from that same data for link previews. Anyone with that link can view it without an account, no sign-in required. The link uses a random, unguessable code rather than the post's normal ID, so it can't be found by browsing or guessing. Only you can generate this link for your own posts. This doesn't change your privacy exposure much either way: a post you send to Public is already visible to any signed-in user there.

Control over your data

You can delete any Daily post you've sent to a board yourself, or delete your account entirely (Settings, then Delete Account), at any time. Both are self-serve and take effect immediately.

Contact

Questions about your data, or want something deleted that isn't covered above? Email [email protected].