Privacy policy

For the Dayzo app and the website dayzoapp.com. It describes which data is processed, for what purpose and who receives it.

In short

Dayzo needs no account and no sign-up. Tasks, notes, sub-steps, photos, areas and settings are stored exclusively on your device. There is no Safkom GmbH server holding content from the app, no sync between devices, no advertising and no analytics or tracking libraries in the app.

Data leaves your device in two cases only: when you buy Dayzo Pro or restore a purchase, and when you contact us yourself.

1. Controller

  • Company Safkom GmbH
  • Address Oberdorfstrasse 11, 5722 Gränichen, Switzerland
  • Managing director Aleksandar Cordarov
  • Company ID (UID) CHE-283.267.062
  • Email support@dayzoapp.com

The Swiss Federal Act on Data Protection (FADP) applies. Where the General Data Protection Regulation (GDPR) is applicable, its principles and rights apply in addition.

2. Data in the app

2.1 Content you enter yourself

Everything you enter in Dayzo stays on your device. It is transmitted neither to us nor to third parties.

Data Purpose Where it is stored
Tasks with title, date, priority, notes, sub-steps, waiting note and follow-up period Showing and managing your tasks Local app storage on the device
Areas with name, colour and order Filtering and structuring your tasks Local app storage on the device
Settings (reminder times, appearance, default follow-up period, chosen app icon) Behaviour and look of the app Local app storage on the device
Photos you attach to a task Showing the image with the task Protected app file directory on the device
Unlock status of Dayzo Pro So the app knows offline that Pro is active Local app storage on the device

Attached photos are resized and compressed before being stored. If you delete the task or the photo, the image file on the device is deleted with it.

2.2 Notifications

The morning reminder, the evening check and the follow-up reminders are triggered by your device's operating system. Dayzo schedules them locally in advance, and the content of each message is created on the device. There is no push service operated by Safkom GmbH, no push token is requested and no tasks are transmitted to a server. You can withdraw the notification permission in your system settings at any time; the app remains usable without it.

2.3 Calendar

When you add a task to your calendar (a Dayzo Pro feature), the app requests access to your device calendar and creates an event there with the title, the date and, if present, your notes. Changing the task updates the event; removing the entry deletes it. The event is created in the calendar your device provides as writable. If you sync that calendar with a service such as iCloud or Google Calendar, the event data will reach that service, where the provider's own privacy terms apply. Without calendar access Dayzo remains fully usable.

2.4 Camera and photos

For photo attachments (a Dayzo Pro feature) the app requests access to the camera or your photo library. The picture you take or select is copied into the app's protected directory and stays there. It is not uploaded. The permissions can be withdrawn in your system settings at any time.

2.5 Buying Dayzo Pro

Dayzo Pro is a one-time purchase through your device's app store. Payment is handled by Apple or Google; we receive no payment data and no card numbers.

To manage and verify the purchase we use RevenueCat (RevenueCat, Inc., 633 Taraval St, San Francisco, CA 94116, USA). When you buy, when you restore and when the unlock status is checked, the following is processed:

  • an anonymous user identifier assigned by RevenueCat – we pass the service neither your name nor your email address nor any other content from the app;
  • the app store receipt together with details of the purchased product and the time of purchase;
  • technical details transmitted by the SDK, such as device and operating system version, app version, country and store.

The purpose is handling the purchase, restoring earlier purchases and unlocking the Pro features. The legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR, where applicable). Processing also takes place in the USA. RevenueCat's privacy policy is available at revenuecat.com/privacy.

If you never open the paywall and buy nothing, the service is contacted only to check an existing unlock status. On systems where the purchase flow is not yet set up – currently Android – the SDK is not started at all.

Processing by the store operators is governed by their own terms: Apple and Google.

2.6 Tasks via shortcut

Dayzo can accept a task through a link of the form dayzo://add?text=…, for instance from a Siri shortcut. The text passed in is processed locally only and saved as a task. Speech recognition itself is handled by the operating system, under the terms of Apple or Google respectively.

2.7 No analytics, no advertising

Dayzo contains no advertising, analytics or tracking libraries, builds no usage profile and sends no crash reports to us. No automated decision-making takes place.

3. Data on this website

This is a static website without sign-in, forms or comments. It sets no cookies, loads no third-party fonts or scripts and uses no analytics services.

It is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and its European entities). When a page is requested, the hosting provider processes technically necessary connection data such as IP address, time, requested address, amount of data transferred, referring page and browser and system details. This data serves the delivery of the page and the security of the service. We do not combine it with other data and do not use it to build usage profiles. The legal basis is our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR, where applicable).

4. Contacting us

If you contact us by email or phone, we process the details you provide – for an email that means sender address, subject and content – solely to handle your request. We keep the correspondence for as long as needed to deal with it and to meet statutory retention obligations, then delete it.

5. Recipients and transfers abroad

We do not pass on content from the app because we never receive it. Transfers occur only as described: to RevenueCat and the store operators in connection with purchases, and to the hosting provider when this website is loaded. Data may reach countries outside Switzerland and the EEA, in particular the USA. Such transfers are based on the applicable safeguards, for example the EU Commission's standard contractual clauses or recognised adequacy decisions.

6. Retention and deletion

  • Content in the app: until you delete it. Removing the app from your device deletes all locally stored content including attached photos. We cannot export or restore anything, because we hold no copy.
  • Purchase-related data: for as long as required to manage the purchase, to allow restoring it and to meet statutory obligations.
  • Website log data: according to the hosting provider's retention periods, typically a few days to weeks.

7. Your rights

You have the right to information about the data concerning you, and to rectification, deletion, restriction of processing, objection and data portability, provided the legal requirements are met. For content in the app you can exercise these rights directly on your device, because only you have access to it.

For enquiries write to support@dayzoapp.com. You also have the right to lodge a complaint with a supervisory authority – in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EEA the data protection authority responsible for you.

8. Security

This website is delivered exclusively over HTTPS. In the app your content sits in the protected storage area the operating system provides for Dayzo and is not accessible to other apps. Absolute protection against loss of a device or unauthorised access to it is technically impossible, so a device lock and current system updates are advisable.

9. Changes

This policy will be updated when the app, the website or the legal requirements change. The version published here is the applicable one.

Last updated: August 2026