Daywell Privacy Policy

Effective October 20, 2026

The short version

Who we are

Daywell is a personal health diary made by Ramin Partovi, an individual developer based in the United States (“Daywell”, “we”, “us”). This policy covers the Daywell apps for iPhone and Android and the web app at app.daywell.site. If you have a question or a request about your data, email rpartovi123@gmail.com.

What we collect

Your account

Your email address, your first name if you give it, and your password (stored only as a secure hash by our sign-in provider; we never see it). If you sign in with Google or Apple, they share your email address and, if you allow it, your name. With Apple you can choose to hide your email; we then get a private relay address instead.

Your diary

Everything you enter, which can include health information:

Weather and approximate location

To link your entries with the weather, Daywell asks for your location once a day while you use it. We round it to about 1 km before using it, then save that rounded position with the day’s weather (temperature, humidity, pressure, rain). We don’t track where you go. If you don’t allow location, Daywell simply skips the weather.

Assistant questions

When you ask the Assistant a question, we send what’s described in The Assistant and AI below. We don’t store your questions or the answers on our servers; the current conversation stays on your device. To enforce the weekly question limit, we keep a record of when you asked (not what you asked).

Technical information

Like any online service, our hosting providers receive your IP address and basic request details when the app connects to them, and keep short-term logs for security and reliability. For the Assistant, our server logs whether each request succeeded, how long it took and how much AI capacity it used. It never logs your messages, your diary or who you are.

What we don’t collect

No advertising IDs, no analytics or tracking tools, no contacts, photos or files, and no data from Apple Health, Google Health Connect or wearables.

How we use it

We don’t use your data for advertising, sell it, or use it to train AI models. The doctor report (PDF) is made on your device and goes only where you choose to save or share it.

The Assistant and AI

The Assistant is optional, and it asks your permission on each device before it shares anything. You can withdraw that permission any time in Manage → Your data. Once you’ve allowed it, when you ask it something, Daywell sends your question, the last few messages of the conversation, a summary of your last 90 days of diary entries (including your notes and the weather) and your setup answers (your first name, goals and suspected foods) to our server, which passes them to Anthropic, the company that makes the Claude AI models. Anthropic first checks that the question is about your health diary, then writes the answer. Your email address and account ID are not included.

Anthropic processes this data for us under its commercial terms: it does not use it to train its models and keeps it only for a limited time for safety and legal reasons. The Assistant’s answers are generated by AI and can be wrong. They are not medical advice.

Who we share it with

We share data only with the service providers that run Daywell, only what each one needs, and only to provide the service to you:

Provider What it does What it receives
Supabase Accounts, sign-in and the database that syncs your diary (stored in the United States) Your account and your whole diary
Vercel Hosts the web app and the Assistant’s server (United States) Assistant requests as they pass through, and IP addresses
Anthropic AI that answers Assistant questions Your question, recent messages, a 90-day diary summary and your first name, only when you ask
Open-Meteo Weather data Your rounded location and IP address, without anything about you
Have I Been Pwned Checks new passwords against known data breaches The first 5 characters of a scrambled (hashed) form of the password, never the password itself
Google or Apple Sign-in, if you choose it That you are signing in to Daywell

We may also disclose information if the law requires it, to protect someone’s safety, or as part of a transfer of Daywell to a new owner, who would have to keep this policy’s promises. We never sell your data or share it for advertising.

Where it’s stored and how it’s protected

Your diary is stored on your device and in our database in the United States. Data is encrypted in transit (HTTPS) and at rest, and each account can only read its own rows. When you sign out, Daywell deletes the copy of your diary on that device (your account keeps it). No system is perfectly secure, but we’ll tell you without undue delay if a breach affects your data.

How long we keep it

Your choices and rights

Wherever you live, you can:

US consumer health data

Some US states, including Washington and Nevada, give extra rights over “consumer health data”. Everything in your diary may count as consumer health data. We collect it only to provide the diary you ask for, share it only with the providers listed above to do that, and never sell it. You can ask to see what we have, which providers received it, and to delete it, as described above. If we turn down a request, you can appeal by replying to our answer; if you’re still not satisfied, you can contact your state Attorney General.

European Economic Area, UK and Switzerland

We process your data to provide the service you signed up for, with your explicit consent for health information (which you give by entering it, and can withdraw by deleting it or your account), and for our legitimate interest in keeping Daywell secure. You have the right to access, correct, delete, restrict or object to processing of your data, and to receive it in a portable format. Your data is processed in the United States; our providers protect transfers with the European Commission’s Standard Contractual Clauses or equivalent safeguards. You can also complain to your local data protection authority.

Children

Daywell isn’t meant for children under 13, or under 16 where local law sets a higher age to consent to data processing. We don’t knowingly collect their data; if you think a child has given us data, email us and we’ll delete it.

Not medical advice

Daywell helps you notice patterns, but it isn’t a medical device and doesn’t diagnose or treat anything. Talk to a doctor about your health, and call your local emergency number in an emergency.

Changes to this policy

If we change this policy, we’ll update the date at the top. If a change affects how we use data you’ve already given us, we’ll tell you in the app before it takes effect.

Contact

Ramin Partovi, Daywell
rpartovi123@gmail.com