Legal

Privacy Policy

Last updated: 5 August 2026

DayPilot ("we", "us") is a calendar and planning product operated by DekuWorks. This policy explains what we collect, why we collect it, and the choices you have. It covers the website at daypilot.co, the DayPilot iOS app, and related APIs.

What we collect

  • Account data — email address, display name, and authentication identifiers when you sign up with email/password or Sign in with Google / Apple.
  • Calendar data — event titles, times, locations, descriptions, and calendar metadata you sync or create in DayPilot (for example via Google Calendar OAuth or Apple EventKit ingest from iOS).
  • App usage — basic product analytics and diagnostics (for example crash reports) to keep the service reliable. We do not sell this data.
  • Support — messages you send to us (for example hello@daypilot.co).

How we use your data

  • Provide your account, sync, and unified calendar views.
  • Power optional features such as booking links, tasks, and Pilot Brief summaries grounded in your schedule.
  • Authenticate you and keep your session secure.
  • Respond to support requests and improve product reliability.

We do not sell your personal data. We do not use your calendar contents for advertising.

Services we rely on

  • Supabase — authentication and cloud database hosting for account and app data.
  • Google — Sign in with Google (optional) and Google Calendar sync when you connect a Google account. Google receives only what is needed for OAuth and the calendar scopes you approve.
  • Apple — Sign in with Apple (optional). Apple Calendar sync uses on-device EventKit on iOS, which uploads a cloud copy to DayPilot so web can show those events. DayPilot does not use your Apple ID password for calendar access on the live product path.
  • Hosting and infrastructure providers that process data solely to run DayPilot (for example our API and static website hosting).

Those providers process data under their own terms and privacy policies. You can disconnect Google or Apple calendar connections at any time in the app.

Retention and security

We retain account and synced data while your account is active, and for a limited period afterwards if needed for backups, security, or legal obligations. We use industry-standard transport security (HTTPS) and access controls. No method of transmission or storage is perfectly secure; please use a strong password and protect your account sign-in methods.

Your choices

  • Update or delete calendar events you created in DayPilot.
  • Disconnect Google, Outlook, or Apple Calendar sync in the app.
  • Delete your account in the app under Settings → Delete account (also available at daypilot.co/settings). Deletion removes your DayPilot profile and associated data; it is not a temporary deactivation. You can also email hello@daypilot.co to request a copy of your data.
  • For Sign in with Apple, you can also manage the app under Apple ID settings on your device.

Children

DayPilot is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided data, contact us and we will delete it.

International users

DayPilot may be hosted in the United States or other regions. If you access the service from the UK, EEA, or elsewhere, your data may be processed outside your country. By using DayPilot you acknowledge that transfer. Where required by law, we take steps to protect transfers appropriately.

Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy: hello@daypilot.co.

DekuWorks · DayPilot · www.daypilot.co