Privacy Policy
Effective date: 6 November 2026
Duesday keeps your deadlines on your phone. This policy explains the small amount of information that does leave it, and why.
Who we are
Duesday is published by Muhammad Umair. We decide how the information described here is used. Contact: hello@techitech.io.
What stays on your phone
Duesday has no account. The items you track, their attachments, your reminders and your settings are stored on your phone, encrypted, and are not sent to us. The only exception is the one photo or text you choose to scan with AI, described below.
What we collect
If you use the Plus plan: a random anonymous ID
When you scan with AI or watch a rewarded ad, Duesday creates a random anonymous ID on our servers (hosted by Supabase). It has no name and no email. We keep that ID, your daily scan credits, a log of each scan's status, time and model name, and the ad reward records tied to it, so that credits can be counted and an ad reward can be confirmed as real. It holds none of your items. It stays until you erase it with Settings > Privacy > Delete all data.
If you scan something with AI
The single photo or screenshot you choose to scan is sent over HTTPS to our scanning service, which passes it to Anthropic (the Claude API) to read the item and its dates. Duesday asks your permission before the first scan and you can turn AI scanning off in Settings > Privacy. We do not store the image. Anthropic processes it under its API terms, which do not use API inputs to train its models. Retention by the provider: According to its published API data-retention terms (checked on 6 November 2026), Anthropic deletes API inputs and outputs from its systems within 30 days of receipt or generation, except where the law requires longer retention, where a separate agreement says otherwise (Duesday has no such agreement), or where its safety systems flag a request for a policy violation, in which case it may keep that content for up to 2 years. Card, account and ID numbers are masked to the last 4 characters in the results, and nothing is saved until you tap Save. We keep only the status, timing and model name of each scan, never its content.
If you use the Plus plan
Google AdMob receives device and ad interaction data to show ads. It receives the advertising ID only if you agree to personalized ads (and, on iPhone, allow tracking). Free users send nothing to AdMob. Ad consent is collected with Google's consent form where it is required.
If you turn on "Share anonymous usage" (off by default, on every plan)
- Product analytics (PostHog): feature and screen events such as "item added". Never item titles, amounts, dates, notes or attachments. No session recording.
- Crash and performance reports (Sentry): crash details, device model and OS version, with titles, notes and amounts removed.
If you join the waitlist or write to us
We send email through Resend. Resend receives your email address and the content of the message. Every newsletter email has a one-click unsubscribe link. Waitlist addresses are kept until you unsubscribe or ask us to delete them. Messages you send to hello@techitech.io are kept as long as needed to help you.
On this website
The website holds no user data and sets no tracking cookies. It is hosted by Vercel, which keeps standard server logs (such as IP address and page requested) to deliver and secure the site. The delete account page uses Cloudflare Turnstile to block bots; Cloudflare receives the technical signals needed for that check. If we add website analytics, we will ask for your consent first.
Who can see your data at Duesday
Duesday has no accounts, so there is no profile for support to look up. For the anonymous scan ID, the team can see counts such as scan usage. They cannot see your items, deadlines or attachments: they never leave your phone, so there is nothing for us to see.
How we use it
To run the app, deliver reminders, count scan credits, send emails you asked for, show ads on the Plus plan, understand which features are used, keep the service secure and fix crashes. We never sell your data, and we do not use it for advertising.
Who receives it
Only the service providers needed to run Duesday. Each acts on our behalf and is limited to the data below.
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Anonymous ID and scan credits for Plus (AI scans, rewarded ads) | A random anonymous ID, scan credits, scan status and timing, ad reward records |
| Anthropic | Reading scans (AI model provider) | The one image you chose to scan, for processing |
| Google AdMob | Ads on Plus only | Device and ad interaction data; advertising ID with your consent |
| PostHog | Product analytics (only if you turn it on) | Feature and screen events, no content |
| Sentry | Crash reports (only if you turn them on) | Scrubbed errors, device model, OS version |
| Resend | Email delivery | Email address and message content |
| Vercel, Cloudflare | Hosting this website; bot check on the delete account page | Standard web request data |
We may also disclose information if the law requires it. A plain-English version of this is on the security page.
How long we keep it
- The anonymous scan ID, scan credits and scan log: until you erase them with Settings > Privacy > Delete all data, which removes them from our servers right away.
- Server logs: 7 days. Crash reports: 30 days. Analytics events: 12 months.
- AI scan images: not kept.
Your choices
- Export your deadlines as a JSON file: Settings > Privacy > Export (attachments are not included).
- Turn AI scanning off: Settings > Privacy > AI scanning.
- Erase everything on your phone: Settings > Privacy > Delete all data.
- Erase the anonymous scan ID from our servers: Settings > Privacy > Delete all data (see the delete account page).
- Change ad choices: Settings > Privacy. On iPhone you can also change tracking in Settings > Privacy & Security > Tracking.
- Unsubscribe from the newsletter with the link in any such email.
Depending on where you live, you may have the right to access, correct, delete or export your information, to object to or restrict some processing, to withdraw consent, and to complain to your data protection authority. To use any of these, email hello@techitech.io. We cannot match a request to an anonymous scan ID from outside the app, so use Delete all data in the app for that. Where the law requires a legal basis, we rely on performing our contract with you (the features you use), our legitimate interests (security, fixing crashes, understanding which features are used) and your consent (personalized ads and marketing email where required).
Children
Duesday is built for adults aged 18 and over and is not directed to children. If you believe a child has given us information, email us and we will delete it.
Security
Your data is encrypted on your phone and every connection uses HTTPS. Details are on the security page.
International transfers
Our providers process data in the regions they operate. Where each keeps data: Supabase (database, scan credits and the scanning service) in the United States (US East); PostHog analytics in the United States; Sentry crash reports in the United States; this website is hosted by Vercel; ads are served by Google AdMob. If you are in a region that restricts transfers of personal information, your scan and anonymous scan ID are processed outside it when you use AI scanning or Plus.
Changes to this policy
If we change this policy in a way that matters, we will update the effective date above and tell you in the app or by email before the change applies.
Contact
Questions or requests: hello@techitech.io.