Privacy Policy

Last updated: October 25, 2026

This is a standard plain-language template written for a small, invite-only app. It is not legal advice. Questions? Email [email protected].

This Privacy Policy explains what information Dayhook collects, why, who can see it, how long it is kept and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (BC PIPA).

1. Who we are

Dayhook is operated by Igneo.ca, based in Vancouver, British Columbia, Canada ("we", "us"). Igneo.ca is responsible for the personal information Dayhook handles. You can reach the person accountable for privacy at [email protected].

2. What this policy covers

This policy covers the Dayhook app at dayhook.ca (including when it is installed on your home screen) and the emails Dayhook sends.

3. What we collect

Account

• Your email address, used to sign in with an emailed link or code. Dayhook does not use passwords.
• When your account was created or invited and when you last signed in.
• Sign-in session details our sign-in provider records for security, such as IP address and device or browser type.

Profile

• Display name (required), and optionally your first name and last name.
• Optional private details: date of birth, location (free text), daily reminder time and time zone. Date of birth is optional and is only used to show your age to you.

Your activity

• Challenges you create or join: name, description, schedule, goal and unit, optional baseline and money-saved figures, optional friendly stakes text, and start and end dates.
• Check-ins (Done, Partial, Missed or Skip, and any amount), Passes used, notes, Nudges you send and receive, invite links or codes you create, email invitations you send, and the group activity feed built from these.

On your device only

• Your browser stores your sign-in session and settings such as theme, accent colour and reminder time. Dayhook does not use advertising or tracking cookies.

Technical information

• Our hosting provider keeps standard server logs (such as IP address and pages requested) and provides cookie-free visit counts.
• Our email provider keeps a record of each email it delivers for us (recipient address, subject and delivery status) for a limited time.

4. Why we use it

• To create and run your account and sign you in.
• To show your progress and share it with the people in your challenges.
• To send sign-in, invitation and account emails.
• To keep Dayhook secure, prevent misuse, and fix problems.

We do not sell your information, show ads, or use your information to train AI models. We only use it for the purposes above, or as required by law. By creating an account and using Dayhook, you consent to these uses. You can withdraw consent at any time by deleting your account (see section 8).

5. Who can see what

• Members of your challenges see your display name, first and last name, and your activity in the challenges you share with them (check-ins, Passes, notes, Nudges).
• Only you see your date of birth, location, reminder time and time zone.
• Igneo.ca can access data when needed to run, support or fix the service, or when required by law.

6. Service providers and where data is stored

We use a small number of trusted providers to run Dayhook. They process information only on our behalf and under their own security and privacy commitments:

• Supabase – database and sign-in (stored in the United States).
• Cloudflare – website hosting, security and cookie-free visit counts (global network).
• Resend – delivery of Dayhook emails (United States).

Because some information is stored or processed outside Canada, it may be accessible to courts, law enforcement and national security authorities of those countries under their laws.

7. How long we keep it

We keep your information while your account is open. When your account is deleted, we delete your profile and your account details, along with the activity tied to them (challenges you share with others stay with the remaining members), except where we need to keep something to meet a legal obligation. Provider logs and any backup copies expire on their own schedule, usually within 90 days.

8. Your choices and rights

• See and correct: you can view and edit your profile at any time in Profile. Optional fields can be left blank or cleared.
• Get a copy: email [email protected] to ask for a copy of the personal information we hold about you.
• Delete: you can delete your account yourself at any time from Profile > Delete account, or ask us to do it at [email protected]. Deleting from Profile happens right away: your check-ins, notes, Nudges and Passes are deleted, challenges only you were in are deleted, and challenges you share are handed to the member who joined first.
• Withdraw consent: stop using Dayhook and delete your account.
• Complain: if you are not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

We answer requests within 30 days and may need to confirm your identity first.

9. Security

Dayhook uses HTTPS everywhere, access rules on every database table so people only see what they should, invite-only accounts and password-free sign-in. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify the people affected and the Privacy Commissioner as the law requires.

10. Minimum age

Dayhook is for people aged 16 and over. We do not knowingly collect information from anyone younger. If you believe someone under 16 has an account, email [email protected] and we will delete it.

11. Invitations

Dayhook is invite-only. Members can share invite links or codes, and invite new people by email to Dayhook or to a challenge. When someone invites you by email, we use your email address only to send that invitation, to set up your account and to add you to that challenge when you first sign in. The invitation email shows the name of the person who invited you.

For each email invitation we keep the address, who sent it, the challenge, when it was sent and whether it was accepted. We use this to apply daily invite limits and prevent misuse. The person who sent an invitation can see the addresses they invited and whether they joined, and the Dayhook admin can see all email invitations. If you delete your account, invitations sent to your email address are deleted and your name is removed from invitations you sent.

12. Changes to this policy

We may update this policy as Dayhook changes. We will change the "Last updated" date above and, for important changes, let members know in the app or by email before they take effect.

13. Contact

Questions, requests or concerns: [email protected]. Igneo.ca, Vancouver, British Columbia, Canada.