Privacy Policy

The data controller responsible for your personal data is:

SaveMyDay Studio
Berlin, Germany
Email: privacy@savemyday-app.com

For GDPR-related enquiries or to exercise your rights, contact us at the email above.

Account data: When you create an account, we collect your email address and a securely hashed password. We do not store your password in plain text. If you sign in with Google or Apple instead, we receive your email address and display name from that provider and no password is created.

Preferences: The preferences you set during onboarding (social mode, energy level, distance, vibes) are stored locally on your device and used to personalise your recommendations.

Location data: We request your device's approximate location to retrieve local weather conditions via the Open-Meteo API. Your exact location coordinates are sent to Open-Meteo solely to fetch weather data and are not stored by us.

Saved places and plans: Places you save and plans you create are stored in your account and synced to our servers. You may export or delete this data at any time.

Feedback and support: When you send us feedback or a support message from the app, we receive your message, the screen you sent it from, your app version, your device platform and its operating system version. If you attach a screenshot, that image is uploaded with the message. Bug reports may also include technical details of the last error the app recorded. You can send feedback without signing in, in which case the message carries no account identifier at all.

Usage data: We collect anonymised data about how you use the app (e.g. which cards you view) via PostHog analytics (EU servers) to improve the service. This data is used in aggregate and cannot identify you individually.

We use your data to:

• Provide and operate the Save My Day service
• Personalise AI-generated recommendations based on your stated preferences
• Send you service-related communications (e.g. important updates)
• Improve the app based on anonymised usage patterns
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

To generate recommendations, we send the following data to Anthropic (the provider of the Claude AI model):

• The card concept you tapped (e.g. "Calm cafes nearby")
• Current weather conditions
• Your stated preferences (vibes, energy, distance, social mode)

We do not send your name, email address, or any directly identifying information to Anthropic. Per Anthropic's API terms, data sent via the API is not used for model training. Anthropic's use of this data is governed by their privacy policy and data processing agreement.

AI-generated illustrations: Certain decorative illustrations in the app (such as the hero card background) are generated using artificial intelligence. These illustrations are pre-generated and stored on our servers. No personal data is sent or used during their generation. They are artistic illustrations that do not depict real locations or real people.

Analytics: We use PostHog (EU servers, eu.posthog.com) for anonymised product analytics. PostHog does not receive your name or email.

Infrastructure: Your account data is stored securely by Supabase (EU-based infrastructure where possible). Supabase is SOC 2 Type II compliant.

Weather: Location coordinates are sent to Open-Meteo to retrieve weather data. Open-Meteo is a free, open-source weather API that does not store or share your location data.

We process your personal data under the following legal bases:

• Contract performance (Article 6(1)(b)): Processing your account data and preferences is necessary to provide the service you signed up for.

• Legitimate interests (Article 6(1)(f)): We may process anonymised usage data to improve the service, where this does not override your rights.

• Legal obligation (Article 6(1)(c)): We may process data where required by law (e.g. tax and accounting records).

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g. financial records may be retained for up to 10 years as required by German tax law).

Feedback and support messages are retained so we can act on the problems they report, and any screenshot you attached is retained with them. Upon account deletion these messages are anonymised (user ID removed) within 30 days.

Anonymised usage data may be retained indefinitely as it cannot be used to identify you.

As a data subject in the European Union, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.

• Right to rectification: You may request correction of inaccurate data.

• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. You can also delete your account directly in the app.

• Right to restriction: You may request that we restrict processing of your data in certain circumstances.

• Right to data portability: You may request your data in a structured, machine-readable format. This includes your saved places, plans and preferences.

• Right to object: You may object to processing based on legitimate interests.

• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

Data export: You may export your personal data at any time from the app's Profile screen. The export includes your saved places, plans and preferences in a machine-readable JSON format.

Account deletion: When you delete your account, you will be offered the option to download your data before deletion proceeds. Once deletion is confirmed, your personal data is removed immediately, and in any case within 30 days. Step by step instructions, including what to do if you can no longer open the app, are on the Delete Your Account page of this site (/delete-account).

To exercise any of these rights, contact us at privacy@savemyday-app.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (in Germany: the Berliner Beauftragte für Datenschutz und Informationsfreiheit).

We take the security of your data seriously. We implement the following measures:

• Passwords are hashed using industry-standard algorithms and never stored in plain text
• Data in transit is encrypted using TLS
• Auth tokens are stored in your device's secure enclave (iOS Keychain / Android Keystore)
• Access to our infrastructure is restricted to authorised personnel

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we commit to notifying you promptly in the event of a data breach that affects your personal data.

Your data may be processed in countries outside the European Economic Area (EEA), including the United States (where Anthropic and Supabase may process data). Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Save My Day is not intended for children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at privacy@savemyday-app.com and we will delete the account promptly.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the app or email at least 14 days before the changes take effect. Your continued use of the app after that date constitutes acceptance of the updated policy.

For any privacy-related questions or to exercise your rights:

Email: privacy@savemyday-app.com

SaveMyDay Studio
Berlin, Germany