Privacy Policy
Daily Tools is operated by GoEnhanced LLC. Daily Tools is designed to support greater independence, especially for neurodivergent individuals and others who benefit from additional structure, together with families, caregivers, coaches and trusted supporters. This draft describes the intended privacy framework and must be reviewed against the final production data flows and applicable law before launch.
1. Information we may collect
Depending on the features you choose to use, Daily Tools may process account and contact information; plans, goals, routines and rewards; schedules and work-related information; money-learning, budget, account-label and payroll-estimate information; messages and requests; and other information you enter into the service.
Optional wellness features may allow users to enter information such as menstrual-cycle information, mood, energy, sleep, medication-related information, caregiver episode logs (time, duration, intensity and notes), weight, height or similar wellness information. These features are not required to use every part of Daily Tools.
Some fields are free text. Please avoid entering medical or other highly sensitive information into general-purpose text fields unless the feature is specifically designed for that information and you are comfortable storing it in Daily Tools.
2. How we use information
We use information to provide and operate the features selected by the user; maintain accounts and permissions; display plans, routines, schedules and progress; enable authorized supporter collaboration; process subscriptions; secure and troubleshoot the service; provide requested support; and comply with applicable legal obligations.
We do not intend to use sensitive wellness information for targeted advertising, sell it as a data product, or permit an invited supporter to access it merely because that supporter or professional has a Daily Tools account. Access is intended to depend on the permissions available to and authorized by the applicable user/account relationship.
3. Family, caregiver and supporter sharing
Daily Tools may allow an individual or authorized account owner to invite family members, caregivers, coaches or other trusted supporters. Information made available to a supporter depends on the product's sharing and permission features. A Professional or Professional Pro subscription, by itself, does not grant access to another person's private information.
Users and account owners should invite only people they trust and should not enter information about another person unless they have an appropriate basis or authorization to do so.
4. Payments and service providers
Payments are processed through Stripe. Daily Tools does not need to store complete payment-card numbers in order to use Stripe's payment services. Daily Tools also relies on technology and infrastructure providers, including Google/Firebase, for functions such as authentication, hosting, databases and related service operations. These providers process information according to their services, contracts and privacy terms.
5. Sensitive and wellness information
Daily Tools is not intended to diagnose or treat a medical condition. Nevertheless, information voluntarily entered into Cycle, My Day, Episode Log, medication, mood, sleep, weight/height or similar features may be sensitive. GoEnhanced LLC intends to apply data minimization, role-based access and appropriate security controls to such information and to evaluate whether additional consent, deletion, breach-notification or other requirements apply before production use.
Vault. The optional Vault is meant for identity, insurance, benefits or account details and photos of related cards or letters. Vault entries and photos are encrypted in the user’s browser before they are stored, using keys protected by each person’s own passphrase or PIN. The stored data is designed so that GoEnhanced LLC and its service providers cannot read it. A caregiver chooses which family members can open each entry, and the Vault keeps a history of who opened or viewed an entry, without recording the contents. Because the keys are held by users, GoEnhanced LLC cannot recover Vault contents if a passphrase and its recovery code are both lost.
6. Data choices, access and deletion
Where provided by the product or required by applicable law, users may request access to, correction of, export of or deletion of their information and may be able to disable optional features. Disabling a feature does not necessarily delete information previously stored in that feature; deletion requests should be handled through the product's deletion process or privacy contact.
The product includes a self-service My data download (Settings, then Sharing) that builds a ZIP of your account information in your browser. You run it yourself; we do not run exports on behalf of customers. Vault items are included in encrypted form only, and each export writes a small record (time and counts) to your account.
7. Retention
We intend to retain personal information only for as long as reasonably necessary to provide the service, maintain required business and transaction records, protect security, resolve disputes and satisfy applicable legal obligations. Final retention periods should reflect the production data architecture and counsel's advice.
8. Security
We use reasonable administrative, technical and organizational safeguards appropriate to the service. No Internet service can guarantee absolute security. Users should protect their account credentials and promptly report suspected unauthorized access.
9. International users
Daily Tools is operated from the United States. If the service is made available to users outside the United States, information may be processed in the United States or other locations used by our service providers. Mandatory privacy and consumer rights applicable in a user's jurisdiction are not waived by this Policy.
10. Children and supported adults
Daily Tools is designed primarily for individuals who can use the service themselves or through an appropriate family/support relationship. The final age requirements, parental-consent rules and treatment of accounts for minors must be confirmed before launch. Adults who receive decision-making or daily-living support retain the privacy and legal rights applicable to them; supporter access should follow applicable authorization and permission rules.
11. Changes to this Policy
We may update this Policy as Daily Tools, its features, vendors or legal requirements change. Material changes will be communicated as required by applicable law.
12. Contact
Privacy questions or requests may be sent to [email protected]. Counsel should confirm whether an additional legal address, privacy contact or jurisdiction-specific contact must be published.
13. Technical information, analytics and optional inputs
The current application includes Google Analytics for usage measurement, in addition to Google/Firebase and Stripe integrations. Web requests and analytics can involve technical identifiers, browser/device information and usage information. Optional “Speak title” input in My Plans uses the browser's speech-recognition service after the user activates it; it places recognized text into the plan-title field. Browser speech processing may involve the browser provider. This feature is not continuous listening.
The application also includes optional external notifications through Pushover/ntfy and photo/calendar functionality. Depending on the enabled feature, information can be made available to the configured provider or recipients. Notification previews and shared devices may expose message content to other people.
Review decision: Verify the deployed feature set, exact information sent to each provider, analytics/cookie settings, consent controls, processing locations, recipient access and vendor contracts. This draft does not assert that wellness entries are sent to analytics, or that all processing occurs on the user's device.
AI-assisted checklists
Optional Level Up list generation sends the description you enter and checklist instructions through our server to the configured cloud AI provider. The default provider in the code is Google Gemini; deployment settings can select Groq, OpenAI, OpenRouter or a compatible endpoint. The list request does not automatically attach your wellness records, Vault contents or family profile. Avoid entering names, diagnoses, medication details, financial details or other private information.
Another-provider backup (Groq) and use of a saved account or family API key require separate choices for each request. When enabled, the same prompt may be sent to those providers if the first attempt fails; a saved key may also be used when the app daily limit is reached. A retry may use another model within the configured provider. Provider processing and retention follow the applicable provider terms; we do not promise that cloud processing is local or that providers immediately delete prompts. Copy-and-paste mode uses the AI service you choose.
Saved API keys are encrypted on our server and decrypted there to make enabled requests; this differs from the browser-encrypted Vault. In a family plan, one key can cover the family. Authorized users can remove the saved key; removal does not erase earlier provider requests or charges. The feature stores usage counters and key status information. Reviewed lists are saved to your account or shared plan when you select Save, subject to the normal sharing controls. AI suggestions can be wrong and require review before use.
AI polish for My Day notes
Optional AI polish in My Day sends the note text you choose to polish, plus a style instruction, through our server to the configured cloud AI provider. Nothing is sent until you tap Polish my note. The default provider in the code is Google Gemini. The request does not automatically attach your other records, Vault contents or family profile. Because notes can be personal, avoid entering names, diagnoses, medication details, financial details or other private information.
As with Level Up list generation, another-provider backup (Groq) and use of a saved account or family API key require separate choices for each request, and both are off by default. When enabled, the same text may be sent to those providers if the first attempt fails; a saved key may also be used when the app daily limit is reached. Provider processing and retention follow the applicable provider terms; we do not promise that cloud processing is local or that providers immediately delete prompts. The feature keeps a daily usage counter. The polished text is saved only if you choose to apply it to your note. AI suggestions can be wrong and require your review.
14. Health-data consent and supporter authority
Making a wellness feature optional does not replace any separate notice or consent required by law. A paid subscription, family relationship or professional role does not by itself establish legal authority over an adult's information. An adult who needs assistance retains the rights applicable to them.
Review decision: Confirm separate collection and sharing choices where required, the precise information each permission exposes, verification of representative authority and a working withdrawal process. Evaluate a distinct consumer-health privacy notice for applicable jurisdictions. Revocation should stop future authorized in-app access; it cannot automatically retrieve copies someone already downloaded.
15. Requests, retention and jurisdiction review
Privacy questions and requests can be directed to [email protected]. Depending on applicable law, rights may include access, correction, deletion, portability, withdrawal of consent, objection, restriction, opt-outs, appeals and complaints to a regulator. Applicable deadlines and non-waivable rights are not reduced by this draft.
Review decision: Finalize request verification and appeal procedures; data-category retention criteria; backup and processor deletion; monitoring of the contact channel; and the distinction between disabling a feature, canceling billing and deleting an account. Confirm age limits and any parental-consent process. For selected overseas markets, assess legal bases, health-data conditions, representatives and transfer safeguards before claiming compliance. No worldwide approval is implied.