Privacy Policy

1. Introduction

Action Diary (“we,” “our,” or “us”) operates the Action Diary web application (“the App”). This Privacy Policy explains how we collect, use, store, and protect your information.

By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Data You Provide

• Daily entries: Priorities, todo items, star scores, checklist completion status, notes, and evening reflections you enter in the App
• Focus sessions: Session timing, blockers recorded, and session outcomes
• Spot checks: Self-reported activity data during spot check moments
• User settings: Theme preferences, notification settings, and customization choices

2.2 Automatically Collected Data

• Anonymous identifier: A unique ID generated and stored locally in your browser to link your data across sessions
• Analytics events: Feature usage patterns, screen visits, and interaction data collected for product improvement
• Device information: Browser type, operating system, and screen resolution (for compatibility purposes)

2.3 What We Do NOT Collect

• Your name, email address, or phone number (unless you choose to create an account in the future)
• Location data
• Contacts or social media connections
• Payment information (not currently collected)

3. How We Use Your Data

• To provide and maintain the App's core functionality
• To sync your data across devices via our anonymous cloud storage system
• To calculate your daily scores, streaks, and progress metrics
• To improve the App experience through anonymized aggregate analytics
• To debug technical issues

4. Data Storage & Security

4.1 Cloud Storage

Your data is stored server-side in a PostgreSQL database hosted on a dedicated instance. All data is linked to an anonymous identifier — not to a name, email, or other personally identifiable information.

4.2 Local Storage

The App also stores a copy of your data in your browser's localStorage for offline access and faster loading. This local copy is accessible only to the App and is not shared with third parties.

4.3 Security Measures

• Data in transit is protected via HTTPS/TLS encryption
• The backend server runs behind a firewall with restricted network access
• Database access is limited to authorized personnel only
• We do not store payment information or sensitive personal identifiers

5. Cookies & Tracking

The App uses:

• Essential cookies/localStorage: Required for the App to function (anonymous ID, session state, user preferences). These cannot be disabled.
• Analytics tracking: We may use third-party analytics tools (e.g., PostHog) to understand usage patterns. You can opt out of analytics tracking in App settings.

We do not use advertising cookies or sell your browsing data to third parties.

6. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share anonymized, aggregated data for research reports and industry insights that cannot be traced back to individual users.

We may engage trusted service providers (hosting, analytics) who are contractually obligated to protect your data and use it only for the specified purpose.

7. Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA/CPRA, or other applicable privacy laws:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (“right to be forgotten”)
• Export: Download your data in a portable format (coming soon)
• Opt-out: Disable analytics tracking in App settings
• Portability: Transfer your data to another service

To exercise these rights, contact us at the email address listed below. Note: deleting your data also removes your anonymous cloud history permanently.

8. Anonymous Identifier & Data Loss

Your data is linked to an anonymous ID stored in your browser. If you clear your browser data (cookies, localStorage), you will lose access to your cloud-stored data because the anonymous ID cannot be recovered. Creating an account (when available) will prevent this by linking your data to a recoverable credential.

9. Children's Privacy

The App is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided personal information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we'll update the “Last updated” date at the top of this page. Material changes will be communicated via the App.

11. Contact

For privacy-related inquiries, data requests, or concerns, contact us at:

Email: privacy@actiondiary.app