How Duesday protects your data
Your deadlines say a lot about you: what you buy, what you subscribe to and when your passport expires. This page explains in plain English what happens to that information, where it goes (mostly nowhere) and how to get rid of it.
On your phone
- Everything you track is stored on your phone and encrypted. The encryption keys are kept in your phone's secure hardware (the Secure Enclave on iPhone, and the hardware-backed Keystore on Android).
- There's no account, and your items never leave your device. The only exception is the single image or text you choose to send for an AI scan.
- Reminders are scheduled on your phone, so they work with no connection at all.
- Passport and license photos stay on your phone.
- Card and ID numbers are masked in the app.
In transit
- Every connection Duesday makes uses HTTPS (TLS).
- The app only talks to the services listed below and never sends your items anywhere else.
On our servers
- We don't store your items. The only thing kept on our servers is the random anonymous ID that Plus creates when you scan or watch a rewarded ad: no name, no email, your daily scan credits, a log of each scan's status, time and model name, and ad reward records.
- We never sell your data, and we don't use it for advertising.
AI scans
- A scan only happens when you start one: a photo or a screenshot. The first time, Duesday tells you where the picture goes and asks for your permission. You can turn it off in Settings > Privacy > AI scanning.
- That one image is sent over HTTPS to our scanning service, which passes it to Anthropic, an AI model provider, to read the item and its dates.
- Duesday processes the image and then discards it. We don't store it.
- The picture may show card or ID numbers. We tell the AI not to return them, and our server masks any that slip through to the last 4 digits.
- Nothing is saved until you've checked the results and tapped Save. Fields the scan is less sure about are flagged.
What each service receives
| Service | What it's for | What it receives | What it never receives |
|---|---|---|---|
| AI model provider (Anthropic) | Reading scans | The single image you chose to scan, for processing only. Duesday doesn't store it | Your other items, your email address, your account |
| Supabase | Counting scan credits on Plus (AI scans, rewarded ads) | A random anonymous ID, scan credits, scan status and timing, ad reward records | Your items, attachments, name or email address |
| Google AdMob | Ads on the Plus plan only | Device and ad interaction data, plus the advertising ID only if you consent to personalized ads | What you track. Free users send nothing to AdMob |
| PostHog | Product analytics, only if you turn on "Share anonymous usage" in Settings (off by default) | Feature and screen events, such as "item added" or "reminder resolved" | Item titles, amounts, dates, notes or attachments |
| Sentry | Crash reports, only if you turn on "Share anonymous usage" (off by default) | Crash and error details, device model and OS version | What you track |
| Resend | Sending emails (the waitlist only) | Your email address and the email content | Anything if you haven't joined the waitlist. Your items, never |
Who at Duesday can see your data
- Duesday has no accounts, so there is no profile for support to look up. For the anonymous scan ID, the team can see counts such as scan usage.
- Your items, deadlines and attachments never leave your phone, so there is nothing for us to see.
How long we keep data
| Data | How long we keep it |
|---|---|
| Anonymous scan ID, scan credits and scan log (Plus) | Until you erase them with Delete all data, which removes them from our servers right away |
| Server logs | 7 days |
| Crash reports, only if you turn on "Share anonymous usage" (off by default) | 30 days |
| Analytics events | 12 months |
| AI scan images | Not kept. They are processed and discarded right away |
Your controls
- Export your deadlines: Settings > Privacy > Export gives you all your items in one JSON file. Attachments are not included in the export.
- Delete everything: Settings > Privacy > Delete all data wipes Duesday from your phone and erases the anonymous scan ID from our servers. See also duesday.techitech.io/delete-account.
- AI scanning: it asks before the first scan, and you can turn it off in Settings > Privacy > AI scanning.
- Ads: Plus is opt-in. Personalized ads are shown only if you agree, and you can change your mind in Settings > Privacy.
- Emails: every newsletter email has a one-click unsubscribe link.
Found a security issue?
Email hello@techitech.io. We read every report.
Last reviewed: 6 November 2026