Daywhisper is a Windows desktop planner made by Axiant (Anthony Chaaya), Lebanon ("we", "us"). This policy explains what Daywhisper does with your data. The short version: your planner lives on your own PC, and the only data that leaves it is data you choose to send through an optional feature.
Contact for anything in this policy: [email protected]
1. Who we are
Operator: Anthony Chaaya, trading as Axiant, Lebanon. Website: https://daywhisper.axianthq.com Email: [email protected]
2. Data that stays on your computer
Daywhisper stores your tasks, events, phases, steps, habits, journal entries, study plans, client and project records, focus history, categories and preferences in a local SQLite database under your Windows user profile. The app:
- does not upload planner records to us or anyone else automatically;
- does not include analytics, crash reporting or advertising tracking SDKs;
- does not sync to any cloud service or mobile device.
Automatic local backups are made roughly every six hours while the app runs. Fourteen automatic copies are kept and rotated; a protected copy made before any restore is not rotated automatically. Backups and the database are not encrypted by Daywhisper. Anyone with access to your Windows account or your backup files can read them. Use Windows device protection and keep exported backups somewhere safe.
Uninstalling the direct desktop edition leaves your data in place. Removing the Microsoft Store edition may delete the packaged app's storage. Export a backup before uninstalling or switching editions.
3. Optional features that send data
Each feature below is off until you use it. Core planning never requires an account or an internet connection.
3.1 Feedback form
When you submit feedback, we receive the message you typed and, if you enter one, a reply email address. Planner records, attachments and logs are not attached. Messages travel through our Cloudflare Worker, which applies rate limiting and may process your IP address for that purpose, and are delivered to our mailbox by our email provider (Resend). We keep feedback emails for up to 24 months so we can follow up, then delete them. Do not include sensitive information in feedback.
3.2 Account (email sign-in)
To buy or restore purchases or use AI planning you sign in with an email address. We send a one-time code to that address through our email provider. We store your email address, a hashed session token (valid 30 days), and the entitlements linked to the account. The session is stored on your PC using Windows data protection, separately from planner data, and is excluded from planner exports. Account records are kept while the account is active and for 24 months after the last sign-in or purchase, whichever is later, unless tax or accounting law requires longer retention of purchase records.
3.3 Purchases through Paddle
Paddle.com Market Ltd (UK) and Paddle.com Inc. (US) act as our Merchant of Record. Checkout opens in your browser on Paddle's pages. Paddle collects your payment details, billing address and tax information directly; Daywhisper never sees your card number. Paddle's privacy policy applies to that data: https://www.paddle.com/legal/privacy. Paddle sends us your email address, the product purchased, transaction and subscription identifiers, status changes (payment, refund, dispute, cancellation) and the country used for tax. We keep these to grant and restore your purchases and to meet accounting obligations.
3.4 AI planning
AI planning is optional and asks for your consent the first time. When you use it, only the text you type into the AI form, the current date and your time zone are sent through our Cloudflare Worker to OpenRouter and the model provider selected there. Your other tasks, journal entries and files are not included. Provider routing is configured to exclude providers that allow prompt data collection, but we cannot control provider logging beyond their published policies (https://openrouter.ai/privacy). We store a count of your AI actions and remaining credits per account, and temporarily keep the generated result (up to 24 hours) so a failed request can be retried without charging you twice. Prompts are not intentionally logged by our code. Review every suggestion before adding it to your planner.
3.5 Sponsored placement
The free edition may show one small, clearly labelled sponsor card on the Home page (never during Focus). No planner data or tracking identifier is sent to the sponsor. Clicking it opens the sponsor's website in your browser, where their privacy policy applies. No sponsor is configured at the time of writing.
4. Legal bases and purposes
We process the data above only to provide the feature you asked for, to keep your purchases restorable, to prevent abuse of our services, and to comply with tax and accounting law. For visitors from the EU/EEA and UK: the bases are performance of a contract (purchases, account, AI credits), your consent (feedback, AI planning), and legitimate interests (rate limiting and abuse prevention).
5. Service providers
| Provider | Role | Location |
|---|---|---|
| Paddle | Merchant of Record, payments, invoices, tax | UK / US |
| Cloudflare | Hosting of website and API (Workers, D1, Pages) | Global edge network |
| Resend | Transactional email (sign-in codes, feedback delivery) | US |
| OpenRouter and its model providers | AI planning requests | US and others |
| GitHub | Hosting of source code and direct installer downloads | US |
| Microsoft | Microsoft Store distribution and updates | Global |
Data may therefore be processed outside your country, including in the US. These providers operate under their own privacy policies and standard contractual terms.
6. Retention summary
| Data | Kept for |
|---|---|
| Planner data and local backups | On your PC, under your control |
| Feedback messages | Up to 24 months |
| Account email, entitlements, AI usage | Active account + 24 months |
| Purchase and tax records | As required by law (typically up to 10 years) |
| Generated AI results | Up to 24 hours |
| Rate-limit and IP records | Up to 30 days |
7. Your rights
You can ask us to access, correct, export or delete the account and feedback data we hold about you by emailing [email protected] from the address on the account. We answer within 30 days. Purchase records needed for tax law are retained even after deletion. Planner data on your PC is yours; delete or export it from Settings at any time.
Depending on where you live you may also have the right to object to processing, to restrict it, to withdraw consent (which does not affect processing already done), and to complain to your local data protection authority.
8. Children
Daywhisper is not directed at children under 16. We do not knowingly collect personal data from anyone under 16 through our online services. If you believe a child has created an account, contact us and we will delete it.
9. Security
Online services use HTTPS, short-lived sign-in codes, hashed session tokens and server-side entitlement checks. No system is perfectly secure; keep your Windows account protected and your email account secure, since email is how you sign in.
10. Changes
We will post any changes on this page and update the date above. Material changes to how optional services use your data will be announced inside the app before they take effect.
Questions & contact
For help, email [email protected] or visit Support.