Privacy Policy

Last updated: January 2025

At Show Up Daily, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our habit tracking application.

Legal Notice: This policy is designed to comply with GDPR, CCPA, and other privacy laws. For jurisdiction-specific legal requirements, we recommend consulting with legal counsel.

Information We Collect

Personal Information

When you create an account, we may collect:

  • Email address for authentication and communication
  • Account preferences and settings
  • User-generated content (habit data, notes, custom labels)

Usage Data

We automatically collect certain information when you use our app:

  • Habit tracking data (timers, streaks, progress, timestamps)
  • Device information (browser type, operating system, device identifiers)
  • Usage patterns and app interactions (features used, session duration)
  • Technical data for app performance and error tracking
  • IP address and approximate geographic location

Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

  • Essential Cookies: Required for app functionality and authentication (cannot be disabled)
  • Performance Cookies: Help us understand app usage and improve performance
  • Functional Cookies: Remember your preferences and settings
  • Analytics Cookies: Provide anonymized usage statistics

How We Use Your Information

We use the information we collect to:

  • Provide and maintain our habit tracking service
  • Sync your data across devices
  • Send important updates about your account or the service
  • Improve app performance and user experience
  • Respond to your support requests and communications
  • Ensure the security and integrity of our service
  • Comply with legal obligations and protect our rights
  • Develop new features and conduct research (with anonymized data)

Data Retention

We retain your information for different periods depending on the type of data:

  • Account Data: Until account deletion or 3 years of inactivity
  • Habit Tracking Data: Until account deletion or upon user request
  • Analytics Data: Anonymized and retained for up to 2 years
  • Support Communications: 3 years from last interaction
  • Security Logs: 1 year for fraud prevention and security
  • Legal Compliance Data: As required by applicable law

After the retention period, we securely delete or anonymize your data according to our data destruction procedures.

Information Sharing and Third-Party Services

We do not sell, trade, or rent your personal information to third parties.

Service Providers

We work with trusted third-party service providers who assist in app functionality:

All service providers are bound by strict confidentiality agreements and data processing agreements.

Legal Sharing

We may share information only in the following circumstances:

  • With your explicit consent
  • To comply with legal obligations or valid legal processes
  • To protect our rights, privacy, safety, or property
  • In connection with a business transfer or acquisition (with notice)

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) for transfers outside the EEA
  • Adequacy decisions recognized by the European Commission
  • Binding Corporate Rules where applicable
  • Your explicit consent for specific transfers when required

All international transfers comply with applicable data protection laws and include appropriate technical and organizational measures.

Data Security

We implement comprehensive security measures to protect your information:

  • End-to-end encryption of data in transit using TLS 1.3
  • AES-256 encryption for data at rest
  • Regular security assessments and penetration testing
  • Limited access to personal data on a need-to-know basis
  • Multi-factor authentication for administrative access
  • Regular security training for team members
  • Incident response procedures and monitoring systems

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We continuously work to improve our security practices.

Data Breach Response

In the event of a data breach that may affect your personal information:

  • We will notify affected users within 72 hours of becoming aware of the breach
  • Notifications will include details about the breach and steps being taken
  • We will report to relevant supervisory authorities as required by law
  • We will provide regular updates on our investigation and remediation efforts
  • We will offer appropriate support and guidance to affected users

Our incident response team is trained to respond quickly to potential security incidents and minimize any impact on your data.

Your Rights

General Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal information
  • Export your data in a portable format (JSON/CSV)
  • Withdraw consent for data processing
  • Object to certain types of data processing
  • Restrict processing of your personal data

GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR:

  • Right to data portability in machine-readable format
  • Right to lodge a complaint with your local supervisory authority
  • Right to withdraw consent without affecting past processing
  • Right to object to automated decision-making and profiling

CCPA Rights (California Users)

If you are a California resident, you have rights under CCPA:

  • Right to know what personal information is collected and used
  • Right to delete personal information (with certain exceptions)
  • Right to opt-out of sale of personal information (we do not sell data)
  • Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at legal@showupdaily.app. We will respond to your request within 30 days.

Cookie Management

You can manage your cookie preferences through:

  • Browser Settings: Most browsers allow you to refuse or delete cookies
  • App Settings: Disable non-essential cookies in your account preferences
  • Opt-Out Tools: Use industry opt-out tools for analytics cookies

Note: Disabling essential cookies may affect app functionality. We will inform you if certain features require specific cookies to work properly.

Local Storage

Show Up Daily can function without an account using local browser storage. Data stored locally remains on your device and is not transmitted to our servers unless you create an account and choose to sync your data.

You can clear local storage through your browser settings or by using the "Clear Data" option in the app settings.

Children's Privacy

Show Up Daily is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at legal@showupdaily.app.

If we discover we have collected personal information from a child under 13, we will delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

  • Posting the new policy on this page with an updated "Last updated" date
  • Sending an email notification for material changes (if you have an account)
  • Displaying a prominent notice in the app for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Data Protection Officer

For privacy-related inquiries, data protection concerns, or to exercise your rights, you can contact our Data Protection Officer:

Email: dpo@showupdaily.app

Response Time: Within 5 business days for initial response

Contact Us

For questions about this Privacy Policy or our privacy practices, please contact us:

General Privacy Questions:

privacy@showupdaily.app

Legal and Compliance:

legal@showupdaily.app

Data Protection Officer:

dpo@showupdaily.app