Who is responsible
Daily Planner is made and published by Ben Morin, an individual based in France. He is the data controller for the personal data described on this page; “we” means him.
- Data controller
- Ben Morin, an individual based in France
- Address
- 200 rue de la Croix Nivert, 75015 Paris, France
- Registration
- EI (entrepreneur individuel) · SIRET 833 409 154 00022
- [email protected]
There is no data protection officer: write to the contact above with any question about your data.
What stays on your device
Your plans, tasks, notes, journal, Horizon, statistics and settings are saved in your browser, on your device. They are never sent to us — not even with feedback.
Backups and exports are files you download and keep yourself. If you clear your browser’s data for this site, your planner goes with it, so keep a backup. Cookies and storage lists everything your browser keeps for the planner.
Anonymous usage counts
To learn which parts of Daily Planner are used, the planner and its welcome page add one to a daily count when someone does one of the things below. A count holds only the name of the moment, the app version and the day. There is no identifier, no cookie and no IP address in it, and nothing you write is included. Like everything sent to our server, counts are limited per connection to stop abuse: see Visits and your IP address.
A few moments, such as opening the planner, are counted at most once per day, week or month on a device, so we can tell roughly how many devices use the planner without identifying any of them. Your browser notes when it last counted each one; that note never leaves your device.
In the planner, when someone:
On the welcome page, when someone:
Turn on JavaScript to see both lists here. The planner’s Privacy notice shows them too.
You can switch the counts off at any time: in the planner, open Settings → Privacy (or Help → Privacy) and turn off “Send anonymous usage counts”; on the welcome page, open “What this page counts” at the bottom and turn them off there. They are one site, so either switch covers both, in this browser. The waitlist, feedback and questions keep working.
Visits and your IP address
Our host, Cloudflare, measures visits to the site’s pages for us with Cloudflare Web Analytics: a small Cloudflare script on each page reports which page was viewed, the site you came from, the kind of browser and device, the country, and how fast the page loaded. It uses no cookies and keeps nothing in your browser, doesn’t fingerprint your device and doesn’t follow you across sites. Cloudflare runs it on our behalf, as our host, and we see only totals.
It needs no consent: it only measures this site’s audience, without cookies, anonymously and in totals, within the CNIL’s rules for audience measurement. The switch for the anonymous counts doesn’t cover it; a content blocker in your browser does.
Like any website, Cloudflare receives your IP address when your browser connects, to deliver the pages and protect the site from abuse. To stop abuse, our server also limits how often one connection can send it something: a form, a count or a sign-in. For that alone, it keeps a scrambled (hashed) form of your IP address, never the address itself, apart from the counts and from what you send. The scrambling key changes every day and the old one is deleted, so once the day changes it can’t be linked back to your address. The scrambled form itself is deleted within 24 hours.
If your browser blocks something on one of our pages under the site’s security policy (for example a script added by another service), it may tell our server what kind of thing was blocked and on which page. We keep only daily counts of those reports, with nothing about you, for about 90 days.
Waitlist
The planner’s sync guide lets you join a waitlist for account sync, and you agree to be emailed about it. We store the email address you enter, the devices you tick, your optional note, your browser language, the app version, the date, and the fact that you came from the sync guide.
It is used for one thing: a single email, sent when account sync is ready. Each address is deleted automatically as soon as that email has gone out. Until then you can leave at any time with Leave the waitlist in the sync guide, on the device where you joined, or by asking us.
Feedback and reviews
When you send feedback from the planner, we store your rating, the kind of note (idea, problem, praise or other), your message, the app version, the kind of device (for example “Mac · browser”) and the date — and your email address only if you add one, so we can reply.
If you tick “You can quote this on the Daily Planner website”, your rating, your message and the name you chose to give (optional) are also kept as a review that may be published there. Your email address is never shown. Ask, and we remove the review.
We keep feedback to improve the planner and to reply, and delete it on request.
Questions
A question asked on the Contact page stores your email address, your name and your question, with your browser language, the app version, where you sent it from (the website or the planner) and the date.
We use it only to answer you, never to send you anything else, so there is no box to tick. We receive an email notification with your question, and keep it to reply and follow up. Ask, and we delete it.
Personal sync: Google Drive and Dropbox
Optional and free. Personal sync keeps your planner the same on your devices through your own Google Drive or your own Dropbox, whichever you choose in the planner’s settings. Your browser writes and reads one file there, directly: your planner never passes through our servers or stays on them, and we never see your account or your other files.
What is in your cloud
One copy of your planner: your days, Horizon, journal and settings. It is sealed on your device before it leaves, with a passphrase you choose: encrypted with AES-256-GCM, under a key made from your passphrase (PBKDF2 with SHA-256 and 600,000 rounds). Google or Dropbox then hold a file they can’t read; they can see its size and when it changes. Only you know the passphrase. It never leaves your device, it is never sent to us, and we can’t recover it. Each of your devices keeps only a key made from it (in your browser’s storage; see Cookies and storage), so you type it once per device; disconnecting the last cloud on a device removes it there.
A Google Drive copy made by an earlier version of the planner was not sealed. It keeps working as it is until you seal it: the planner offers that once, and a sealed copy is never written in plain again.
Google Drive
When you choose Connect Google Drive, Google asks you to let Daily Planner use its own hidden app folder in your Drive; the file is kept there, out of sight. The access Google grants lasts an hour: your browser keeps it until then, so the planner opened again within the hour syncs without asking, and afterwards a tap on Reconnect asks Google again. Your browser also keeps the address of your Google account, read from Google Drive once you connect, so that Google’s window can choose that account by itself when you reconnect. Both stay on your device: they are never sent to us, never go into a backup or the synced copy, and disconnecting removes them. Google’s sign-in and the file are covered by Google’s privacy policy. To stop, disconnect in Settings; you can also remove Daily Planner’s access in your Google Account and delete its hidden data in Google Drive (Settings → Manage apps).
Dropbox
When you choose Connect Dropbox, the planner takes you to Dropbox’s own page, where you allow it to use one folder of its own in the Apps folder of your Dropbox (it can’t see anything else), then back. You can see that folder and the file in it. So that sync runs without signing in each time, your browser keeps the access Dropbox gives until you disconnect. Dropbox’s sign-in and the file are covered by Dropbox’s privacy policy. To stop, disconnect in Settings, which also gives the access back to Dropbox; you can remove it in Dropbox too (Settings → Connected apps) and delete the planner’s folder there.
Nothing reaches Dropbox until you choose Connect Dropbox. Nothing reaches Google until you choose Google Drive in the planner’s settings or reach for its Connect button: the planner then loads Google’s sign-in, so that Google’s window can open from your tap.
Emails
The site sends emails through Resend, our email provider, and only for one reason to you: the one waitlist email. We also get an email ourselves when a question arrives. When we reply to you, we write from our own mailbox. We send no newsletters and no marketing.
Service providers and transfers
| Provider | What it does for us | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts the site, its server code and its database; delivers the pages, protects the site and measures visits to its pages (Cloudflare Web Analytics, without cookies, in totals). | A US company. The database runs on Cloudflare’s network; pages are served from the Cloudflare data centre nearest to you. |
| Resend Plus Five Five, Inc. | Sends our emails. | United States. |
| Only if you connect Google Drive: keeps your sealed sync file in your own Drive, under your agreement with Google. | Google’s infrastructure. We receive nothing. | |
| Dropbox Dropbox, Inc. | Only if you connect Dropbox: keeps your sealed sync file in your own Dropbox, under your agreement with Dropbox. | Dropbox’s infrastructure. We receive nothing. |
Cloudflare and Resend are based in the United States. Transfers to them are covered by the EU–U.S. Data Privacy Framework and by the European Commission’s standard contractual clauses in their data processing agreements.
We don’t sell your data or share it with anyone else, unless the law requires it.
Why we use data, and for how long
| What | Why we may use it | How long |
|---|---|---|
| Usage counts | Our legitimate interest in knowing which parts of the planner are used. They identify no one, and you can switch them off. | Daily totals, kept to compare versions over time. |
| Visits to the site’s pages | Our legitimate interest in knowing how many people visit the site’s pages and how fast they load. No cookie, nothing kept in your browser, no tracking across sites: we see totals only. | Totals only: nothing that identifies you is kept. |
| Abuse protection | Our legitimate interest in keeping the forms, the usage counts and the sign-in working and safe from abuse, such as too many requests from one connection. | A hashed form of your IP address, which can’t be linked back to it once the day changes, deleted within 24 hours. |
| Security reports | Our legitimate interest in knowing when the site’s security policy blocks something on its pages, so we can fix it. Daily totals per kind of content and page identify no one. | Daily totals, deleted after about 90 days. |
| Waitlist | Your consent, given when you join. | Until the one email is sent, then deleted automatically — or sooner if you leave. |
| Feedback | Our legitimate interest in improving the planner, and in replying when you add your email. | Kept to improve the planner and reply; deleted on request. |
| Reviews you let us quote | Your consent, which you can withdraw at any time. | Until you ask us to remove it. |
| Questions | Our legitimate interest in answering what you asked. | Kept to reply and follow up; deleted on request. |
Your rights
Under the GDPR you can ask us to:
- show you the personal data we hold about you, and give you a copy in a format you can reuse;
- correct it, or delete it;
- limit how we use it, or object to it — including the usage counts, which you can also switch off yourself;
- stop using it where you gave your consent (the waitlist, a quoted review), at any time.
To use any of these rights, email [email protected]. We answer within one month, and may ask you to confirm the email address the data is linked to. Your planner itself is only on your device, so only you can see or delete it there.
If you think we have not handled your data properly, you can complain to the CNIL, the French data protection authority (cnil.fr), or to the authority of the country where you live.
Changes to this policy
When Daily Planner changes what it collects, we update this page first and change the date at the top. The legal notice says who publishes Daily Planner, and the terms cover using it.