Privacy Policy
Last updated: April 5, 2026
1. Information We Collect
Information you provide
- Email address— used for authentication (magic link sign-in) and shift delivery.
- Display name— optional; used to personalize your experience.
- Timezone— detected automatically so we can deliver shifts at the right time for you.
- Shift content— if you create personal shifts or series, that content is stored in your account.
Information collected automatically
- Basic analytics data (page views, feature usage) to improve the Service.
- Email delivery events (sent, delivered, opened) via our email delivery provider.
2. How We Use Your Information
- To authenticate you and provide access to your account
- To deliver shift series to your inbox on your chosen schedule
- To personalize delivery timing based on your timezone
- To improve and maintain the Service
- To communicate about Service changes or issues
3. Data Storage & Security
Your data is stored in a Supabase-hosted PostgreSQL database with row-level security policies. Authentication is handled through Supabase Auth using magic-link email verification — we never store passwords.
Data is encrypted in transit (TLS) and at rest. We follow industry-standard security practices to protect your information.
4. Third-Party Services
We use the following third-party services to operate:
- Supabase— database hosting and authentication
- Resend— transactional email delivery
- Vercel— application hosting
Each provider has its own privacy policy. We only share the minimum data necessary for each service to function (e.g. your email address with Resend for shift delivery).
5. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your shift content
- Opt out of non-essential emails
7. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service.
9. Contact
For privacy-related questions, contact us at privacy@yourdailyshift.com.