Privacy Policy

1Who is responsible

Michael Welzel
Email: info@kreativorgan.de

DayLoft is a personal project in development. This policy covers the DayLoft app on Mac, iPad and iPhone and this website.

2Your emails

• DayLoft connects straight from your device to your provider’s mail server (for example Gmail, iCloud or Fastmail), always encrypted. Emails are read, sent, moved and deleted there as you trigger it in the app.
• So that DayLoft is fast and works offline, the app keeps emails and attachments in a cache on your device. This cache is not synced through iCloud and is stored nowhere else, apart from your own device backups.
• Drafts are also saved in the Drafts folder of your mailbox, so you can find them on other devices and in other mail apps.
• DayLoft doesn’t load remote images in emails (often meant to track whether you read them) until you allow them for an email or a sender. If you load them, the sender’s servers see your IP address.
• When you unsubscribe from a newsletter, DayLoft, after you confirm, either sends an unsubscribe request to the address the sender gave (without cookies), sends an unsubscribe email from your account, or opens the sender’s unsubscribe page in your browser.

3Sign-in details

Passwords and sign-ins (such as signing in with Google) are kept only in your devices’ keychain. So that you don’t have to sign in again on every device, they are transferred through iCloud Keychain, which Apple encrypts end to end. A sign-in through “Sign in with Fastmail” stays on the device where you made it.

4Sync through your iCloud

Whatever you create in DayLoft itself, the app syncs between your devices through your private iCloud storage (Apple CloudKit): the list of your accounts with their settings (addresses, server names, signature, account name, but not passwords), your decisions about senders, categories, folders, flags, notes on senders and conversations, renamed subject lines and drafts, and in the calendar your notes and marks on events, day headings, tasks, journal and habits. This data lives in your iCloud account. The developer of DayLoft has no access to it.

5Calendars, contacts and photos

• Calendars: DayLoft reads and writes your device’s calendars through Apple’s system interface. If you connect a Google calendar directly in DayLoft, the app talks to Google from your device (see section 6).
• Contacts: Only with your permission and only on the device, to suggest recipients while you write and to recognize senders. Contacts are never transferred anywhere.
• Photos: If you pick a photo for a day, DayLoft stores only a reference to it. The photo itself stays in your photo library.

6Google accounts (Gmail and Google Calendar)

When you connect a Google account, DayLoft receives, with your consent, access to your Gmail messages (over IMAP and SMTP) and your Google Calendar (through the Google Calendar API). The app uses this access solely to show you your emails and events and to carry out the actions you trigger: reading, sending, archiving and deleting, creating and changing events. The data flows directly between your device and Google, and DayLoft stores it only in the cache on your device. It is not sold, not used for advertising, not used to train AI models and not passed on, except to the AI option “DayLoft Cloud” if you switch it on (section 7).

DayLoft’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke this access at any time in DayLoft (by signing out of the account) or in your Google Account under Third-party apps with account access.

7AI features

On your device (default)

DayLoft creates summaries, reply drafts and the appointments it finds in emails with the Apple Intelligence language model that runs on your device (Apple Foundation Models). Translations use Apple’s on-device translation, and so does language detection. No text leaves your device in the process. For translations, the system may download language packs from Apple. DayLoft keeps the results in the cache on your device.

Apple Private Cloud Compute (only when available and chosen)

If you choose “Apple Private Cloud” in Settings, the texts for summaries and reply drafts are sent to Apple’s server model. Apple processes them there only for that request, doesn’t store them and, by its own account, cannot see them. Apple’s Privacy Policy applies.

DayLoft Cloud with Mistral AI (only with your consent)

If you choose “DayLoft Cloud” in Settings and agree, the following applies:

• For summaries, the text of newly arrived emails is transferred (without quoted older messages, at most about 4,000 characters). Older emails are never summarized this way.
• For reply drafts, only when you click, the email you’re replying to is transferred, together with your bullet points or the draft you want revised.
• The texts go through a DayLoft function on Google Cloud in Frankfurt (Firebase Cloud Functions) to Mistral AI in France, which creates the summary or the draft. DayLoft doesn’t store the texts and logs no email content. Mistral AI’s privacy policy also applies.
• So that only the genuine app can use this feature, Firebase App Check confirms through Apple (App Attest) that the request comes from DayLoft. A counter in Google Firestore limits the number of requests per day. It contains no email content.

You can switch this option off again in Settings at any time.

Your device thinks along. Nobody reads along.

8Notifications

DayLoft creates notifications about new emails on your device. There is no DayLoft server that sends push messages.

9What DayLoft doesn’t do

• no advertising, no tracking, no analytics or statistics services
• no selling and no sharing of your data
• no server of its own that holds your emails, calendars or sign-in details

Short list. Good list.

10This website

This site is served through Firebase Hosting (Google). To deliver it, Google processes technically necessary data such as your IP address. The site sets no cookies and embeds no third-party content.

Not even the chocolate chip kind. Sadly.

11Your rights

Under the General Data Protection Regulation (GDPR) you have the right of access, rectification, erasure, restriction of processing, data portability and objection. Since DayLoft doesn’t keep your data on servers of its own, almost all of it is with you: you delete it by signing out of an account in DayLoft or by removing the app, and you manage the data in your iCloud in your iCloud settings. For questions, write to the address above. You can also lodge a complaint with a data protection supervisory authority.

12Changes

If the way DayLoft handles data changes, this policy will be updated. The version published here applies.

This English version is a translation of the German privacy policy. Where the two differ, the German version applies.