Privacy Policy
This policy explains what data the MyDay app and its service collect, what each item is used for, where it is stored, which providers process it, how long it is kept, and how to export your data or delete your account.
1. Data we collect and why
- Account (Sign in with Apple identifier): the user identifier Apple provides (never your Apple ID password), used to identify your account and restore your data on a new phone. In guest mode, what you ask for and your conversations are sent to our servers for processing in the same way, identified by a device identifier; sign in with Apple to get them back on other devices.
- Name and profile photo: when you sign in with Apple, we ask Apple for your name (Apple shares it only the first time you authorize the app, and you can edit it or choose not to share it there); we do not ask for your email address. You can change or clear your name in the app at any time. Your profile photo is the one picture you pick from your photo library (no photo library permission is needed). The app crops it to 512×512 and re-encodes it on your phone before uploading, so the location and other details stored with the photo are not included; our server re-encodes it again and strips EXIF and other metadata. Used only to show you in the app (the menu and the Me page), and never sent to the language model service or any other third party. Stored with your account on the server for your region. Clearing your name or tapping Use default photo under My profile (in the top-right menu, tap your photo and name, then tap the card at the top) removes it from the server, and the photo file is deleted right away; both are deleted when you delete your account.
- Places (Home and Work): places you choose under My profile → Places: pick a spot on the map, search for an address, use where you are now, or tap the area this iPhone has recognized (see “Location” below). The map and address search are provided by iPhone Maps (Apple). Our server stores the name you give, the address, the coordinates (5 decimal places, about 1 m) and the country or region code; places you ask me to remember from a place card are stored the same way. Used to know where you mean when you say “leave from home” or “remind me when I get to work”, to work out when to leave, and to set arrival and departure reminders. Stored with your account on the server for your region. You can change or clear them in the app at any time, and a cleared place is no longer used; after a change or clear, the earlier address and coordinates stay in the change history on our server and are deleted when you delete your account.
- Conversation text and results: what you type and the items, checklists and answers organized from it, used to plan, answer and remind you.
- Voice transcripts: speech is turned into text by iPhone speech recognition (fully on device where supported). We receive only the text and never upload the audio recording. Recording on Apple Watch is the exception: the recording is sent to our own server, turned into text by speech recognition running on that server, and returned to the watch; it reaches the assistant only after you review the text and tap Send. The recording is processed only for that transcription, is not stored, and is not shared with any third party. Unsent drafts and recordings stay on the watch, and a recording is cleared from the watch after it is sent.
- Schedule and reminders: times, places, reminder and leave times, used to keep your schedule and remind you.
- Calendar: if you allow it and turn on calendar busy times, busy slots for the next 14 days (start, end, title) are sent only to check for conflicts; the full calendar is not stored.
- Reminders: if you allow it, checklists are synced to the iPhone Reminders app on your device.
- Location: used when what you ask for involves going out, a route or the weather. In addition, when you open the app, it notes on this iPhone which areas you are usually in at night and on weekday daytimes (only grid squares of about 150 m and dates, not times or routes, kept for the last 30 days) so it can recognize your home and work and let you set them in one tap. This stays only on this iPhone: it is never uploaded and is left out of iCloud backups. You can turn it off or clear it under Settings → Data & privacy, and it is also cleared when you turn off location access or delete your account. If you had already allowed location before this update, counting starts only after you turn this on yourself. When a recognized area is shown, iPhone Maps (Apple) looks up its name; the place is saved to your account as a saved place only when you confirm it. Coordinates accurate to about 100 m, plus your city and district, are sent to our server and kept with that request, to work out routes and when to leave, and to check the weather. If you ask me to check something for you later (the weather or traffic, for example), at that time I include the location most recently sent with one of your requests (only if it is less than 24 hours old, and no longer from the next time you ask for something after turning location access off), and when a result depends on it I say which place I checked.
- Arrival and departure reminders: when you ask to be reminded on arriving at or leaving a place, the reminder is set as an iPhone location-based notification, and your iPhone itself decides when you arrive at or leave the area (within about 200 m). It only needs location access While Using the App with Precise Location on; the app never asks for Always access and does not record your location in the background. Our server stores only the place you confirmed (name, address, coordinates, country or region code), the reminder text and whether it was set up, and never receives any record of you arriving or leaving. Each time you ask for something, the app also sends whether location access is allowed and how many reminders are already set on this phone (not your location), to check whether a new one can be set. These reminders are not yet available for places in mainland China; a time-based reminder can be used instead. They are kept with the plan they belong to and deleted when you delete your account.
- Photo and screenshot recognition: text in imported screenshots is recognized on your iPhone; only the recognized text is sent, never the image.
- Notes: what you write down and how it is organized, used to store, search and, if you allow it, answer questions and bring them back on related plans.
- Files you add: PDFs, spreadsheets (Excel, CSV), plain text and the text in photos that you add from the top-right menu (tap your name, then Files) (photos are read on your iPhone and only the recognized text is uploaded, never the photo itself). The original and the text read from it are stored on the server and used, on our own server, to search, read and calculate (totals, averages) when you ask about a file or ask me to check what you need to bring. You can set any file to “Hide from assistant”, after which the assistant no longer reads it.
- Note titles in reminders: the body of a leave-by reminder includes the title of one note you wrote, delivered to your device through Apple Push Notification service (APNs) and possibly shown on your lock screen, where other people may see it. It is used to remind you of your own note before you leave. This is on by default and takes effect without any setup on your part. Only the title is included, never the body of the note, and notes you marked private, or about health, money, religion and similar sensitive topics, are never brought back. You can turn it off at any time under top-right menu → Settings → Data & privacy.
- Push token: used to send notifications and Live Activity updates.
- Usage and performance data: what you do with reminders and items (done, later, not needed), and how long each answer took or whether it failed, linked to your account. Used to improve the service and fix problems, never for advertising.
- Service logs: app logs record only the request method, path (without search terms or other parameters), status, duration and errors, never your conversation content. The server's entry point keeps no access logs; its error log may include an IP address when an error occurs and is deleted after at most 14 days. To prevent abuse, our server limits how often requests can come from each IP address; the IP address is only counted in the server's memory and is never written to the database or the app logs.
2. Where data is stored
What you ask for, your conversations, schedule and notes, as well as your name, profile photo and Places, are stored on our servers: users in mainland China use servers in mainland China; other regions use the international server in Japan. In guest mode, what you ask for and your conversations are sent to our servers for processing in the same way, identified by a device identifier; sign in with Apple to get them back on other devices. The region is picked automatically at first and can be changed under top-right menu → Settings → Server region; data is not shared between the two servers.
3. Third-party providers
- Third-party large language model service: OpenAI GPT models, accessed through a third-party API provider. Only the text needed for that request is sent: your conversation text and recent turns, schedule context, and, if you allow it, what the app remembers about you (including the names, addresses and coordinates of your Places and other saved places) and related notes, titles of calendar slots that conflict with a new plan, and, when your location was included (or when I check something for you later and include the location you most recently sent), your city or district with coordinates accurate to about 100 m. Recordings, photos, your name and profile photo, and your account identifier are never sent.
- Weather and place-name lookup: Open-Meteo; only the place name or coordinates being looked up are sent (these may be a location you sent or one of your Places), never your account identifier.
- Web lookup: when you ask about something that can only be answered by checking online (whether an office is open on Saturday, when a shop closes), a short search query is passed to the language model service above, which searches the web and returns what it found with source links. Replies in the conversation show the source. The query is written by the model from what you said and normally contains only keywords for the thing being looked up; for questions like "near my home" it may include the neighbourhood or street name of one of your Places. Before a query is sent, the app checks it and blocks: your registered name, phone numbers and email addresses, long ID or card numbers, and the house number, building name and postal code of your saved Places (unless you said them yourself in that message). The model is also instructed not to put such details in a query. Forms the check cannot recognise (part of a name, an address you have not saved as a Place) rely on that instruction alone, so we cannot guarantee they never appear. Your account identifier is never sent.
- Your files: files themselves are never sent to any third party, nor to a model service’s file storage or code execution features. When you ask about a file, only the few passages found or the calculated result for that request are passed to the language model service above as part of the conversation, to answer you.
- Apple: Sign in with Apple (including the name Apple provides the first time you authorize), the Apple Push Notification service (APNs), and iPhone Maps to search the addresses you enter for your Places.
4. No advertising tracking
We do not show advertising, do not track you across apps or websites, and do not sell your data.
5. Retention
- Content is kept until you delete it.
- Your name, profile photo and Places are kept until you change or clear them or delete your account. When you change your photo or switch back to the default, the old photo file is deleted right away. When you change or clear a Place, the earlier address and coordinates stay in the change history and are deleted with your account.
- Deleted notes stay in Recently Deleted for 30 days and are then permanently deleted automatically.
- Files you add are kept until you delete them. Deleted files stay in Trash for 30 days and are then permanently deleted automatically (or right away from the top-right menu: tap your name, then Files, then Trash); permanent deletion removes the original and the text read from it. What I already told you in earlier conversations stays in your conversation history until you delete your account.
- If you long-press a reply and tap "That's not right," the processing records for that exchange (including your tap) are kept for 180 days. They include everything the assistant was given at the time (your schedule, notes, memories, text read from files you added, location, and so on) and what it did at each step. They are used only to find what went wrong and improve the assistant, never shared with third parties, and deleted with your account.
- Service logs are rotated by size, keeping at most about 50 MB per service; older records are deleted automatically. Entry-point error logs are kept for at most 14 days.
- Before service updates the database is temporarily backed up; these backups are deleted automatically after 7 days.
- When you delete your account, your data on our servers is deleted immediately and cannot be restored; copies in the temporary pre-update backups are removed with those backups within 7 days.
6. Export and account deletion
Export under top-right menu → Settings → Data & privacy (Settings → Data & privacy) → Export all data (JSON). The file includes your name, Places and arrival and departure reminders, but not the profile photo image itself. For files you added, it includes the text read from them but not the originals (get originals back from the top-right menu (tap your name, then Files)).
Under top-right menu → Settings → Data & privacy → Export notes (Markdown) you can export all your notes as a Markdown zip file. It includes the notes you marked private (private means the assistant does not read or quote them; it does not limit your own export). The file is downloaded to your phone first, and saving or sharing it is up to you; the app deletes this temporary file once sharing is finished.
To delete your account, in the app go to top-right menu → Settings → Account → Delete account and all data (Settings → Account → Delete account and all data). Normally the data on your phone and on our servers (including your name, profile photo and Places) is deleted and cannot be restored. For an account that uses Sign in with Apple, you may be asked to confirm once with Apple first so that the sign-in authorization can be revoked. If you have signed in on both the mainland China and the international server and this phone still holds the sign-in for both, the data on both is deleted. If the server can't be reached, you can choose Delete only what's on this phone: the data on the server is not deleted this time, and you can delete it after signing in again.
Permissions can be turned off at any time under top-right menu → Settings → Permissions or in iPhone Settings.
7. Contact
Email 1317174992@qq.com.