Privacy Policy

Trueday's core planning runs entirely on your iPhone or iPad and works with no account at all. Nothing leaves the device unless you turn something on: signing in, cloud sync, dictation, or a device permission. Trueday contains no third-party analytics or advertising SDKs, and we do not sell personal information.

If you use Trueday without an account, your tasks, events, locations, goals and profile stay on your device and we collect nothing. If you create an account, we process your email address, display name, user identifier and authentication details so that you can sign in and sync. If you join a shared workspace, the tasks, comments and assignments in that workspace are visible to its other members.

Every permission below is optional, is requested only when you first use the feature that needs it, and can be withdrawn at any time in iOS Settings → Privacy & Security. These are the exact purposes the app declares:

• Location (while using the app) — calculates travel times between tasks and suggests location-based scheduling.
• Location (background) — used only for arrival reminders at places you have saved. It is not used for tracking, profiling, or advertising, and no location history is retained on our servers.
• Calendar (full access) — reads your existing events so Trueday does not schedule over real commitments.
• Calendar (write access) — writes your Trueday plan back into your calendar. Pro only.
• Reminders — imports your existing reminders and converts them into scheduled tasks.
• Notifications — sends task reminders and tells you when your schedule changes.
• Face ID — unlocks App Lock. Biometrics are handled entirely by iOS; Trueday never receives your face or fingerprint data.
• Microphone — active only while you hold or tap to speak to the assistant. Audio is not recorded to a file, not stored, and not synced.
• Speech recognition — converts your spoken request into text so you can review it before any action runs. Recognition runs on your device where your device and language support it; where they do not, iOS sends the audio to Apple for transcription.
• Health (read) — reads sleep analysis, workouts and step count only, to adjust today's energy curve on your device. See the health data page below.
• Health (write) — Trueday declares this string but never requests write access: it adds nothing to your Health app and changes nothing in it.

By default your data lives in a SwiftData database on your device, protected by iOS Data Protection, with authentication tokens held in the iOS Keychain. Cloud sync is optional, requires an account, and is a Pro feature. When it is on, your tasks, events, locations, profile, goals and scheduling data sync through our hosted Postgres database over TLS, with row-level security that restricts every row to the account that owns it. Trueday does not use iCloud or CloudKit.

We keep this list short on purpose. These are the only third parties that can receive your data, and what each one receives:

• Supabase — hosts the Postgres database and authentication behind optional cloud sync. Receives your synced planning data and account record.
• Apple — handles all purchases through StoreKit, and provides device services including Calendar, Reminders, Maps and speech recognition. Trueday never sees your payment card details.
• Apple Maps — receives coordinates to calculate travel time estimates when you use location features.
• MET Norway — receives coarse coordinates, truncated to four decimal places, to return a forecast used in scheduling. Requests carry an identifying User-Agent. Weather data from MET Norway, adapted by Trueday, licensed under CC BY 4.0 (creativecommons.org/licenses/by/4.0/).
• Resend — delivers transactional and newsletter email if you opt in. Receives your email address.
• Google Analytics and Intercom — used on this website only, after you consent. They are not present in the iOS app.

Core planning works with no account at all. If you choose to create one, you can sign in with Apple, with Google, or with an email address and password (with complexity requirements, password reset and one-time codes). Sign in with Apple can return a private relay address rather than your real one, and Trueday works normally if it does. We receive only the identifier and email the provider passes on; we never receive your password for Apple or Google.

If you opt in to the Trueday newsletter on this website, we store your email address and the record of your consent, and we keep a delivery log so we can tell whether a message reached you. We send marketing email only on that consent basis, never because you created an account. Every message carries an unsubscribe link, and unsubscribing takes effect immediately.

This distinction matters and is easy to blur, so we state it plainly. The Trueday iOS app contains no third-party analytics or advertising SDKs at all. This website does use Google Analytics and Intercom, and only after you accept them in the cookie banner. Nothing on this website is connected to the data inside your app.

To operate the app and your account, to sync your data when you ask us to, to process privacy requests, to keep the service reliable and secure, and to meet legal obligations. We do not sell personal information, and we do not use your data for cross-app or cross-site advertising. We do not use your planning data to train machine-learning models; the on-device suggestion models learn only from your own history, on your own device.

Data on your device sits in an encrypted store under iOS Data Protection, with tokens in the Keychain. Traffic is encrypted with TLS in transit. Synced rows are isolated per user by database row-level security. Task titles and personal content are redacted from application logs. Report a suspected vulnerability to security@truedayapp.com.

You can delete your account from inside the app at Settings → Account & Subscription → Delete Account, or through the data rights page on this website. If you are using Trueday without an account, there is no account to delete and the same screen offers Erase Local Data instead, which clears everything Trueday holds on the device. Deleting your account removes your synced planning data and your account record from our database. Newsletter records are kept separately and are removed when you unsubscribe. If an account goes unused for 24 months, we email your registered address and erase the account and its planning data 30 days later unless you sign in during that window. A deletion request you make yourself is completed within 30 days of us verifying it. Where a backup copy of the database exists, it is never restored into live systems for operational purposes, it expires on our provider's rolling schedule within 30 days, and if a restore ever happens your deletion is re-applied to the restored data.

Depending on where you live, you may have rights to access, export, correct, delete, or object to the processing of your personal data, and to withdraw consent at any time. Trueday exports your full data set to JSON, CSV or PDF from inside the app on every plan, including the free one. You can exercise the rest through the data rights page. We respond to a rights request within 30 days of verifying it. Where a request is unusually complex we may extend that by up to two further months, and we will tell you that it is being extended, and why, inside the original 30 days.

Trueday 1.5 can read a small amount of health data, with your explicit permission, to make the day it plans match how you actually slept and moved. It reads sleep analysis, workouts and step count only; it is read-only, used in memory on your device, and never written to Trueday's cloud sync, never logged, and never shared or sold. The feature is off until you turn it on, free users get three days before it becomes a Pro feature, and Trueday is not a medical device. Because the rules around health data are strict, it has its own page — linked below — setting out exactly what is read and what happens to it.

Trueday is rated 12+ on the App Store and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact support@truedayapp.com and we will delete it.

We may update this policy. When we make a material change we will update the date at the top of this page and post the revised policy here. If the change affects how we handle data you have already given us, we will say so rather than relying on the date alone.