Privacy

Last updated 12 October 2026

Daystead is made and sold by Xpo8 Limited, a company registered in Hong Kong ("we", "us"). Contact: [email protected].

Short version: the Daystead app keeps everything on your own device and collects nothing. We have no servers holding your data and no way to see it. This website only keeps the email addresses of people who sign up for the beta or launch list.

The Daystead app (iPhone, iPad, Mac and Android)

• No account, no data collection. The app has no sign-in, no analytics, no advertising and no tracking. We can't see anything you do in it.
• What you add stays on your device: tasks, projects, habits, goals, focus sessions, notes, deliveries and cycle history. When sync between your Apple devices arrives, it will go through your own private iCloud account, which we can't read, and your health and cycle information will stay on the device it was added on. Backups you export are files you control.
• Automatic backups: once a week the app saves a backup file on your device (the last five are kept, in the Files app under Daystead → Backups). They stay on the device and are left out of your iCloud device backup. You can turn this off in Settings → Backup.
• Face ID lock: if you turn on the lock, your device checks your face, fingerprint or passcode. Daystead only learns whether it succeeded, never any biometric data.
• Crash reports: Apple's MetricKit gives the app reports about crashes and slowdowns on your device. Daystead keeps the last ten on the device and sends nothing. If you choose Settings → Help → Send a problem report, you see the report and send it yourself; it has technical details (app version, device model, where the app crashed) and nothing you've added. If you've agreed to share analytics with app developers in your device settings, Apple may also send us anonymous crash reports.
• Calendar and reminders are read from your device, only after you allow it, to show them on your Today screen. Ticking a reminder off marks it done in your Reminders. Nothing is copied or uploaded.
• Health data (sleep, heart rate, heart rate variability, steps, weight and workouts) is read from Apple Health or Health Connect, only after you allow it, to show your charts. It is never uploaded, never synced to iCloud, never sold or shared, never used for advertising, and never used for anything except showing it to you. If you link the cycle tracker to Apple Health, the periods you log are saved there too.
• Focus app blocking uses Apple's Screen Time (or, on Android, usage access) on your device. The apps you choose to block aren't sent anywhere.
• Deliveries: delivery emails you share or paste into Daystead are read on your device to find the tracking details. On Android, if you allow notification access, Daystead reads delivery notifications from your email app on your device for the same purpose. Nothing is uploaded.
• Weather: your chosen place, rounded to about 1 km, is sent to Open-Meteo to get the forecast. If you use "Use where I am now", your device's location is used once, rounded the same way, and not stored by us. Place search sends what you type to Open-Meteo's place search. Open-Meteo doesn't link requests to anyone, but keeps its server logs (which can include the rounded place and your IP address) for up to 90 days for troubleshooting, then deletes them. That's why the App Store lists "Location: not linked to you" for Daystead.
• Widgets read a small summary that the app saves on your device for them. It never leaves the device.
• Deleting your data: Settings → Erase all data, or delete the app. You can revoke access to your calendar, reminders, location or health data any time in your device's settings.

This website

• No cookies and no analytics. This site doesn't use tracking cookies or analytics tools.
• The beta and waitlists. If you sign up, we keep your email address, when you signed up, which link you came from (for example a social media profile), which version you signed up for (the iPhone and iPad beta, or the Mac or Android waitlist, so we send the right emails), when we emailed you, and the wording you agreed to. We use it only to send your beta invite, tell you when Daystead launches, and send occasional product news. We never sell or share it. Every email has an unsubscribe link, and you can ask us to delete your address any time at [email protected]. It's stored with our host, Cloudflare.
• Spam protection. To limit spam, we briefly count sign-ups per connection using a scrambled form of your IP address, which is deleted within about an hour.
• Hosting logs kept by our host, Cloudflare, for example IP addresses and pages requested, for security and reliability.

Beta testing

Beta versions are delivered through Apple's TestFlight and Google Play's testing programme. Apple and Google may share crash reports and feedback you choose to send through them with us, under their own privacy policies. Those reports don't include your tasks, calendar or health data.

Buying Daystead

You start Daystead's free trial, or buy it, through the App Store (and, when the Android app launches, Google Play). They handle payment under their own privacy policies; we never see your name, card details or Apple Account. The app asks the store, on your device, which Daystead purchases your account has, so it knows whether to unlock. Apple and Google give us sales reports that don't identify you, such as how many people bought in each country.

Who handles your data, and your rights

For the email addresses on our beta and launch lists, Xpo8 Limited is responsible for your data (the "controller"). We keep them because you asked us to (your consent), until you unsubscribe or ask us to delete them. Two companies process them for us: Cloudflare, which hosts this website and stores the list, and Resend, which sends our emails. Both may process data outside your country under standard data protection safeguards.

Wherever you live, you can ask us for a copy of the data we hold about you, ask us to correct or delete it, or withdraw your consent, by emailing [email protected]. We reply within 30 days. If you're in the UK or the EU, you can also complain to your data protection authority (in the UK, the Information Commissioner's Office). Data in the app is on your device, so you control it directly.

Children

Daystead isn't directed at children under 13, and we don't knowingly collect anyone's personal information.

Changes

If we change this policy, we'll update this page and the date at the top. If a change affects how the app handles your data, we'll say so in the app's release notes.

Contact

Xpo8 Limited. Questions or requests: [email protected]