Privacy policy.

When you sign up, we collect:

• Your email address (for sign-in via magic link and product emails)
• Your name (for personalization in the app and emails)
• Your responses to the onboarding diagnostic (used to tune your experience)

While you use Daily PM, we collect:

• The written answers and multiple-choice selections you submit
• The grades and feedback our AI returns on your answers
• Your streak, lesson cadence, and subscription status
• Standard server logs (IP address, user agent, timestamps) for security and abuse prevention

We do not use third-party analytics scripts (Google Analytics, Facebook Pixel, etc.) and we do not track you across other websites.

Your data is used to:

• Authenticate you and keep you signed in
• Send the daily lesson, welcome, trial-ending, and subscription confirmation emails
• Grade your written answers using the Anthropic Claude API (the prompt and your text are sent to Anthropic; results are returned and stored on our database)
• Show your progress (streak, score history, skill radar) inside the app
• Process payments via Stripe (we never see your full card number)

We use these vendors to run Daily PM. Each processes data only as needed and is contractually bound to protect it:

• Supabase — authentication and database hosting
• Vercel — web hosting and edge functions
• Stripe — payment processing (PCI-DSS compliant; we never store card data)
• Anthropic — AI grading of your written answers
• Resend — email delivery
• Pollinations — illustration generation for lesson hero images

We use a small number of essential cookies to keep you signed in (set by Supabase Auth) and to remember your light/dark mode preference. We do not use advertising cookies.

You can:

• Export your data at any time (email hello@dailypm.app)
• Delete your account and all associated data (same email contact)
• Opt out of marketing emails (transactional emails like sign-in links are required for the service)
• Request a copy of the personal data we hold (PIPEDA / GDPR compliant)

We respond to deletion and access requests within 30 days.

Active accounts: data is retained while you are subscribed and for 90 days after cancellation. Deleted accounts: data is purged within 30 days of deletion request, except where we are legally required to retain it (e.g. payment records for tax compliance).

All traffic is encrypted in transit via HTTPS. Data at rest is encrypted by our database providers (Supabase, Vercel). Authentication uses one-time magic links; we do not store passwords. Access to production data is limited to the founding team.

Daily PM is not directed at children under 16. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it.

We are based in Canada. Some of our service providers (Supabase, Stripe, Resend, Anthropic) process data in the United States and other regions. If you access Daily PM from outside Canada, your data will be transferred to and processed in Canada and these provider regions, with appropriate safeguards (Standard Contractual Clauses or equivalent) where applicable.

We may update this policy. Material changes will be communicated via email to active users. Continued use of the service after changes take effect constitutes acceptance.

For privacy questions or requests: hello@dailypm.app