Daykit App privacy policy

Who provides Daykit App

This policy covers the public Daykit App for iOS and Android, provided by Mylyna Designs Inc. (mylyna). Other Mylyna products have their own policies. Contact admin@mylyna.ca with privacy questions.

Your records

Where available, the permanent Pro demo stores its practice originals, outputs and drafts separately from your normal Library. Resetting the demo retains one previous version for Undo; the confirmed Erase Daykit data action removes demo storage. Demo access does not create store ownership or change age and privacy restrictions.

Daykit stores the content you add on your device: notes, lists, documents, images, recordings, saved media, transcripts, study and game progress, water-log drink amounts and chosen water goals, household and financial records, travel details, saved places and preferences. It also stores local information needed to organise and resume your work.

Mylyna does not operate a Daykit account, automatic content-upload or cloud-sync service. This release contains no advertising SDK or Mylyna behavioural analytics service. Optional providers can keep their own request and service logs as described below. Copies you choose to export, or that your operating system backs up, have their own privacy implications.

Age & safety controls

The native Privacy & age controls offer Under 13, 13–17 and 18 or older. Daykit stores the selected age group locally; it does not ask for or upload an exact date of birth. Until a group is selected, Daykit-owned online and external actions stay off. Under-18 profiles always keep those actions off. A guardian cannot enable them for a child or teen.

An adult profile starts with online and external actions off. Enabling them requires a separate privacy choice in the native controls. Turning them off stops further Daykit-owned external operations; a request that has already reached another service cannot be recalled.

The controls store a salted guardian-PIN hash, age group, privacy choices, revision and failed-attempt information separately from ordinary app records. The PIN itself is not stored in readable form. PIN setup and recovery require the device's own authentication. Changes to a known profile require the guardian PIN; moving a minor profile to an adult profile additionally requires device authentication and confirmation that the actual user is at least 18. Recovery does not authorise a child or teen to go online and switches online and external actions off.

These are local access controls. A PIN, device passcode or biometric check does not verify adulthood, establish a person's real age or provide legally verified parental consent. If protected settings cannot be read or a required check fails, external actions stay off.

What local-only mode means

Local notes, lists, saved files, timers, supported tools and local games remain available. Daykit-owned provider requests, remote media, direct downloads, feeds, model downloads, discovery, outgoing shares and external browser, maps and mail actions are blocked for unchosen and under-18 profiles, and for adult profiles that have not enabled them. Previously saved forecasts can be shown as dated cached results without refreshing.

This restriction applies to Daykit's actions, not the whole device. A keyboard, Siri, a file or photo picker, cloud storage, system backup or another operating-system service may use its own connection under its own settings. Daykit limits restricted imports to supported local sources; a system picker may contact a provider before returning a selection. Save files on the device first and review your system settings. Daykit does not promise to disable the operating system's networking or cloud services.

Camera, recording and speech

Requested scanning uses the camera, and requested voice recording uses the microphone, after system permission. You can decline or revoke permissions in system settings and use other tools.

Supported transcription requests on-device recognition of a selected local recording; Daykit does not send the recording to a cloud transcription API. Speech features depend on the profile, device, already installed assets, operating system and language. Some speech functions are unavailable in local-only profiles because system services or asset preparation may require a connection. Daykit does not silently substitute cloud transcription. Saved transcripts and imported caption text remain local records.

Daykit does not start in-app speech-model or voice downloads in this release. Supported transcription and read-aloud functions use already installed on-device assets for opted-in adults. If you manually download a language or voice through operating-system settings outside Daykit, the platform or speech provider controls that download under its own policies. Siri, Shortcuts and Android assistant services are supplied by their platform operators under their own policies; invoking a system assistant can involve that operator independently of Daykit.

Online requests an adult can enable

When an opted-in adult requests an online feature, its provider receives the network request. This can include the source IP address, requested URL and parameters, request time and technical connection information. Daykit does not add your notes, library or a Daykit account identifier to weather or currency requests.

• Weather: city search uses a bundled GeoNames directory. A requested forecast sends the selected city centre's coordinates to MET Norway; Daykit does not read GPS for this lookup. MET's API terms say it logs source IP addresses and requested coordinates in its own data centre in Oslo, Norway. Its current privacy statement says IP addresses for meteorological websites without login are stored for up to 90 days. The coordinate-log retention period is not specified in the API terms. Logged information is used for service protection, troubleshooting, traffic management and service statistics. Daykit caches the forecast and displays its source and time. See MET API terms and MET privacy.
• Currency: reference-rate requests contact Frankfurter with selected currencies. Its source providers can receive and log the request. See Frankfurter sources and terms.
• Feeds, permitted direct downloads and remote media: the selected publisher or host receives the requested address and connection information. Its own terms and retention practices apply. A public link does not itself grant download rights.
• External links and maps: opening an enabled external action passes the selected URL, address or search text to the chosen app or service. That recipient controls subsequent processing.

Online sources may be unavailable or change their practices. A local data-clear action does not erase provider logs. You can stop future Daykit requests by turning online and external actions off in the native controls.

Sharing, notifications and backups

Custom nearby discovery, file or record transfers, chat, WebRTC connections and two-device games are disabled for every profile in this public release. Local Together records and local or pass-and-play features do not automatically leave your device.

An opted-in adult can explicitly export selected content or use a supported operating-system share action. Daykit does not automatically share the personal library. An export can include private information and may be unencrypted. The selected app, recipient or cloud-drive destination can retain or transmit it under its own policy. Deleting your local copy does not delete those copies. Media originals may need a separate export from a Library backup.

Optional reminders use system notifications after permission. Reminder text can appear on the lock screen according to your settings. The app store, operating system and system backups are governed by their own policies. Daykit does not provide an automatic cloud copy or recovery service for deleted or lost records.

Storage, deletion and protected settings

Ordinary records in your current library remain until you delete them, clear their app storage or remove the app. Recently Deleted allows recovery where supported. Permanent deletion removes the item from the current library, not external originals, exports, backups, another service's records or the separate Android recovery copies described below. Keep a suitable backup before uninstalling or replacing the app.

Android storage recovery copies

When moving Android's saved data to an updated storage format, Daykit can first preserve copies of its previous browser storage and records prepared for the move. These copies can contain private notes, attachments and other earlier data, including items since edited or deleted from the current library. They remain after a successful move or after you choose to continue with the current library. They are kept in app-private storage outside ordinary Android app backups and are not automatically uploaded. Review their status under Settings → Storage → Saved-data recovery. Keeping a copy does not guarantee that lost or unreadable records can be recovered.

Use the confirmed Erase Daykit data action to remove the current library and these recovery copies. Age & safety protection, the guardian-PIN hash and a nonpersonal storage-format marker stay in place. Inactive old browser storage is cleaned up at the next startup, before it is opened. If cleanup fails, Daykit shows an error and lets you retry Erase; do not assume that all copies were removed after an error. Deleting an individual item does not erase these retained recovery copies.

Ordinary Library backup, restore, settings reset and data-clear actions do not replace or erase Age & safety protection. On iOS, Age & safety data, including the PIN hash and a minor profile, can remain in a non-synchronising, device-only Keychain item after uninstalling. Reinstall checks keep retained guardian protection, switch online and external actions off and require an adult profile to be reviewed before they can be enabled again. On Android, protected state is kept in the app's private storage outside ordinary app backups; operating-system app-data removal or uninstall can remove it. If no valid state is available, Daykit starts restricted. Use the native controls to review retained settings; a normal record reset is not an age-control reset.

There is no separate Mylyna Daykit account to delete. Device permissions can be revoked in system settings. Mylyna does not sell your Daykit records or use them for cross-app advertising tracking.

Free version and optional Pro purchase

Daykit has a free version. Where offered, Daykit Pro offers optional monthly or annual auto-renewable access, or a lifetime one-time purchase, through Apple's App Store on iOS or Google Play on Android. The store shows the available local price and purchase terms before you confirm. Existing records and outputs remain available to edit and export with the free features, subject to the same age and privacy restrictions.

Looking up store prices, buying, managing a subscription or restoring requires an adult profile with both online and external actions enabled. Buying and restoring also require native device authentication. These checks do not verify adulthood or replace the store's own purchase confirmation. Ownership never changes the age group, guardian PIN or online permissions. A local check of previously verified ownership does not itself start a new purchase.

Apple or Google handles your store account and payment. Daykit does not ask for your payment-card or bank details and has no separate Daykit purchase account. Store services and, on Android, Google's billing library can process purchase activity, device and app information, connection information and service diagnostics under their own policies. Requesting a price or restoring can contact the store even if you do not complete a purchase. This is separate from Mylyna operating a content-upload or analytics service. See App Store privacy and Google privacy.

Daykit checks store-signed purchase information locally to decide whether Pro is owned. On iOS, it reads Apple's signed transaction cache and does not save its own receipt copy or purchase-account identifier. On Android, it keeps the store's signed purchase record and local integrity and verification information in app-private storage outside ordinary app backups. These records can include product, order and purchase-token identifiers, purchase time, purchase and acknowledgement status, and verification times. Android keeps this local purchase proof when you use Erase Daykit data, separately from ordinary records and recovery copies, so clearing your library does not itself discard paid access. Android uninstall or operating-system app-data removal removes this app-managed local proof; restoring can require the same store account and a connection. Lifetime purchase verification remains local. Android subscriptions use Google's Play Billing service directly. After a successful current-purchases query, Daykit verifies the store-signed purchase and acknowledgement, then keeps an integrity-protected local observation. No separate Daykit subscription server is used, and no purchase token is sent to Daykit hosting. Google handles the store account, checkout, purchase status and acknowledgement under its own policies. The client does not expose the exact subscription expiry or base-plan identifier, so Daykit shows those details through Google Play instead of inferring them. Ownership is not included in Library backups or granted by importing a preference.

Restoring uses the same store account and can require a connection and store authentication. Refunds and revoked purchases can remove Pro access when the store provides updated information. An offline device cannot immediately discover a remote refund. A previously verified lifetime purchase keeps local Pro available offline; Android recommends a store refresh after 30 days or a clock change, without expiring lifetime ownership merely because the device is offline. Subscription access is time-limited. iOS uses Apple's verified current entitlement and subscription state. Android retains a verified Play subscription observation for at most 24 hours on the same device boot. This is a freshness window, not a guaranteed paid-period expiry. A restart, stale observation, clock change or integrity failure requires Restore purchases to check Google Play again. A successful store query with no active subscription removes cached access. Refunds, expiry and payment changes may take time to reach an offline cache. Cancelling renewal normally keeps access until the paid period ends. A new verification can learn refunds or other changes earlier than that offline limit. If the record cannot be verified, some Pro actions may need to wait for a successful restore. Existing records and generated outputs are not deleted when ownership is unavailable or ends. Store purchase records are governed by the store's retention practices; clearing Daykit data does not erase them.

Support

If you choose to contact admin@mylyna.ca, Mylyna receives your email address, message and selected attachments. These are used for your request and may be retained as needed for support, security and business records. Do not send private records, a PIN or a device passcode. In-app external contact actions remain unavailable to restricted profiles; a guardian can contact support separately.

Policy changes

We update this page when Daykit's practices change. This policy covers Daykit App only; other Mylyna products have separate policies. Contact admin@mylyna.ca for a privacy question or request.

About this policy website

This public policy page is hosted on GitHub Pages. Visiting it sends an ordinary web request, including your IP address and browser information, to GitHub under GitHub's privacy statement. This page has no analytics scripts, advertising, forms or external font requests.