Privacy Policy

DayPilot Privacy Policy

Effective date: January 1, 2026
Last updated: 2026-10-24

Hangzhou Meita Technology Co., Ltd. operates DayPilot, also named 时光小筑 in Chinese. This policy describes how we collect, use, store, share and protect personal information across the unified app's Mainland China (CN) and International (GLOBAL) services and supported distribution channels.

Please read this policy before using the app. Contact us at contact@meita.app if you have questions. The company's name and registered address are given below.

Ad-free release

Starting with the ad-free release 1.0.68, Android, iOS and the subsequently updated HarmonyOS NEXT clients no longer include advertising SDKs, display app-open or list ads, or provide ad-personalization preferences. Basic analytics, first-party diagnostics and business functions retain their own consent and service-region controls. Advertising SDK disclosures for version 1.0.67 and earlier describe historical clients only; server ad switches are disabled, but older binaries may still contain SDKs, and disabling ads does not unload them.

1. Service regions and your account

CN and GLOBAL maintain separate accounts, business data, attachments and memberships. CN business servers are in mainland China; GLOBAL business servers are currently in the United States. CN attachments use Alibaba Cloud OSS; GLOBAL attachments use Cloudflare R2. Third-party login, email, AI, content safety, transcription and SDK processing may occur elsewhere, including mainland China. International service does not mean that every processor operates exclusively in the United States.

Language and service region are separate settings. On iOS you can choose a service on the login page after signing out. Domestic Android distribution and Harmony use CN; Google Play distribution uses GLOBAL. Switching does not transfer your account, content or membership. Sign in again when returning to a service. Purchases, restoration, renewals and refunds remain associated with the original service and account. Transactions with unproven ownership remain pending rather than being reassigned to the current account.

GLOBAL does not enable domestic advertising or Umeng analytics. The unified iOS app still includes SDKs used by CN. A region switch cannot guarantee the complete unloading of SDKs already initialized in CN. The disclosures in this policy cover the whole app, including CN functionality and historical versions where identified.

See the Personal Information Collection List and Third-Party Sharing List for additional details.

2. Information we process

Information you provide

• Accounts: GLOBAL email registration/login processes your email, verification codes, password credentials and verification/security results. Login passwords are not stored in plain text. Phone login processes your phone number and SMS code. Supported Harmony one-tap login processes phone and carrier authentication results. Apple, Google, WeChat, QQ, Douyin or Gitee login processes the identifiers and profile information returned within your authorization. Only the methods shown for your platform and service are available. We assign an account ID within its service region.
• Your content: event titles, dates, recurrence rules, reminders and notes; Countdown titles, types, original dates, repeat start dates, recurrence rules, reminders and notes; Habit goals and check-ins; Focus settings, durations and records; Notes, tags and categories; To-do titles, quadrants, schedule categories, deadlines and completion state; journals and preferences. We use this information to provide the functions you request and synchronize within the same service.
• Purchases: plan, price, order and transaction identifiers, payment channel, signed transaction records, account binding and fulfillment status. iOS digital memberships use Apple in-app purchase. Supported domestic Android/Harmony channels may offer one-time Alipay or WeChat payments. Payment providers handle payment passwords and payment account/card details. The app does not store merchant private keys or grant membership solely from a client SDK's result.
• AI Chat: your prompts, questions and conversation context; replies, proposed actions and execution results; necessary information from your own account's events, habits, Focus, Notes, To-dos, journals, tags, categories and summaries. Member image messages are re-encoded on the server to remove location/device metadata. Necessary prompts, images and context may be sent to DeepSeek and, when enabled, Alibaba Cloud content safety. We do not publish your private content to other users. Ordinary planning functions do not automatically send their content to AI providers.
• Attachments and voice: files, images, audio and necessary metadata such as name, size, MIME type, duration and format. When you request transcription, the selected audio or a temporary download link, task status, transcript and errors may be processed by Tencent Cloud speech recognition.
• App Lock: local lock settings and operating-system biometric verification results. We do not store raw fingerprints or facial templates on our servers.
• Support: the messages, contact details and attachments you choose to provide.

Read-only device calendars

Device calendar display is off by default on supported Android/iOS versions. Only after you enable it and grant access does the app read selected calendar names, sources, colors, event titles, start/end times, all-day status, locations and notes. These are displayed locally and are not uploaded or used for AI, advertising, analytics or logs. The app does not modify calendars, add event reminders or save event copies on disk. Disabling display, revoking access or signing out clears event memory. Device display preferences are not synchronized across accounts. Android requests read access only; iOS 17 and later require full calendar access to read events, although this feature remains read-only.

Device, network and diagnostic information

After privacy consent, processing may include app/OS versions, device model, platform, distribution channel, language, time zone, network state, IP address, request time, usage events and diagnostic details. Core requests use an app device identity. Platform or third-party capabilities may use IDFV, Android ID/OAID or Harmony OAID/ODID/AAID, subject to their actual integration, permissions and settings. Analytics SDKs may process approximate location, application-list visibility, carrier and Wi-Fi information when their functions actually use it.

Current client runtime logs are sent directly to our servers, subject to switches, levels, sampling and environment controls. They contain diagnostic fields, error summaries, app/build/platform information and, when authenticated, the account ID identified by the server. The request device identity is used for rate limiting and is not retained with these logs. The server filters tokens, passwords, phone numbers and emails again. We seek to avoid Note bodies, full AI conversations, audio or attachment contents in diagnostic logs. Historical clients used Alibaba Cloud SLS; clients predating Bugly removal used Bugly. Current clients no longer integrate those client SDKs. Native platform crash reports and local diagnostic records remain relevant.

iOS privacy and service regions

The ad-free app does not request App Tracking Transparency authorization or collect IDFA. Mainland China basic Umeng analytics starts only after valid service privacy consent; GLOBAL does not enable it. Switching service or withdrawing consent applies public analytics controls without promising that an already initialized analytics SDK can be completely unloaded.

Historical versions before 1.0.67 could request ATT; version 1.0.67 configured ads as non-personalized and disabled IDFA collection. These historical ad SDK behaviors do not apply to the ad-free binary.

Domestic analytics and Harmony capabilities

On supported domestic Android distributions, Umeng Mobile Analytics/Common initializes only after explicit privacy consent. Its actual processing may include model/manufacturer/OS, Android ID/OAID, IP, network/Wi-Fi/carrier information, app version/channel and usage events; installed application information may be processed for anomaly detection or fraud prevention when actually used by the SDK. This information can be transmitted to Umeng. Refusing consent prevents formal initialization and statistical reporting.

The ad-free release has no domestic ad SDK, ad scenes or personalization preferences. Older versions could include advertising partners that processed device/ad identifiers, network and ad interaction data, approximate location and application-list/storage permission information; those historical disclosures appear in the SDK list below. Harmony identifiers and cross-app association permissions remain subject to actual analytics, login or payment SDK use and system settings; unavailable identifiers may be empty or zero. These capabilities are not required for core planning functions.

Website download attribution

Download/marketing pages may use a first-party sg_visit_id cookie (default 30 days), visit/download times, page scene, campaign/source/material/placement/search/QR identifiers, explicitly supplied media click IDs, selected download target/channel and redirect result. Browser/device environment is derived from User-Agent. Marketing events store an IP digest produced with a server-secret HMAC rotated daily, rather than raw IP. This supports campaign measurement, redirect troubleshooting and fraud/stability checks; it is not used for personal profiling, personalized pricing or decisions significantly affecting your rights. Clear browser cookies to reset the identifier.

3. Purposes and permissions

We process the information above to authenticate and protect accounts, store and synchronize your content, deliver reminders, provide requested AI/transcription/support, fulfill purchases, diagnose failures and, after the relevant consent, measure usage. We do not use private device-calendar content for these online purposes.

Network access is needed for online functions. Notifications/exact alarms and system wake-up/background capabilities support your scheduled reminders or Focus audio. Microphone, camera, photos/files, biometrics and calendar access are requested for the corresponding functions. You can decline optional permissions or change them in system settings. Reminder-related wake-ups after reboot, app update or at scheduled times restore/trigger your unexpired reminders; they do not automatically open the app, launch other apps or serve unrelated advertising/engagement purposes. Disabling notifications, alarms or background access may reduce reminder reliability.

We do not use contacts, SMS contents, call histories, precise location or non-resettable hardware identifiers as core business account identifiers. Sensitive information such as identity/card numbers is not requested by core functions unless you choose to provide it. Third-party analytics capabilities and historical advertising SDKs are disclosed separately.

4. Storage, retention and security

Business data and accounts stay with their selected service. Switching regions or language does not copy them into the other service. Third-party features can involve processing in another country or region; consult the named processors below before sending information to these functions.

We retain information for the period necessary for the service and applicable legal obligations. Default retention includes:

• first-party client runtime logs: no more than 14 days;
• raw website download/marketing events: no more than 180 days; browser identifier cookie: 30 days;
• AI Chat images: 180 days after upload; selected but unsent images: 24 hours. Rejected images are deleted immediately, retaining moderation results and a non-reversible digest for safety audit. Expired images are replaced by an expiration notice in the conversation;
• account deletion: handled under applicable legal requirements; transaction or other legally required records may remain where required. Deletion does not cancel a store subscription.

We use HTTPS/TLS, access controls and security monitoring to protect information. No security measure makes processing entirely risk-free.

5. Sharing

We do not sell, rent or trade your personal information. We share necessary information with the providers used for the requested login, verification, email, storage, payment, AI, safety, transcription, diagnostics or consented analytics functions, and where legally required. Third-party providers process information under their own policies. The Third-Party Sharing List identifies providers and triggers, including Cloudflare R2 for GLOBAL, Alibaba Cloud OSS for CN, Apple/Google login, Apple purchases, DeepSeek, Alibaba Cloud safety/email and Tencent Cloud transcription.

The following domestic Android SDK disclosures also apply where those SDKs are used. Historical-only entries are explicitly marked.

Historical advertising SDKs — version 1.0.67 and earlier

Starting with the ad-free release 1.0.68, Android, iOS and the subsequently updated HarmonyOS NEXT clients no longer include advertising SDKs, display app-open or list ads, or provide ad-personalization preferences. Basic analytics, first-party diagnostics and business functions retain their own consent and service-region controls. Advertising SDK disclosures for version 1.0.67 and earlier describe historical clients only; server ad switches are disabled, but older binaries may still contain SDKs, and disabling ads does not unload them.

6. Your choices and rights

You can access, correct or delete your information and request account deletion. In the app, open Me → Privacy & Security → Account & Security → Delete Account. Use Support & Feedback or contact@meita.app if you need help, including an access/export/deletion request. Specify CN or GLOBAL and the affected account; do not send passwords or verification codes. Requests concern the account in that service rather than both regions automatically.

You can disable optional features/permissions or withdraw privacy consent through the app's available privacy controls. Withdrawal does not undo processing already performed. Some online functions require the information described above. Manage/cancel Apple subscriptions in App Store account settings separately from signing out, uninstalling or deleting your app account.

7. Updates and contact

We may update this policy and provide notice through the app or other reasonable means. Updated policies take effect upon publication, with consent sought where required.

• Email: contact@meita.app
• Company: Hangzhou Meita Technology Co., Ltd.
• Registered address: 浙江省杭州市滨江区西兴街道54号17475室