Privacy Policy

Last updated: November 9, 2025

1. Introduction

This Privacy Policy explains how Daychat ("we", "our", or "us") collects, uses, and protects your information when you use our iOS application ("the App"). Daychat is operated by Jean-Sébastien Wallez, based in Paris, France.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Data Controller: Jean-Sébastien Wallez
Location: Paris, France
Email: js.wallez@gmail.com

3. Information We Collect

3.1 Google Calendar Data

When you use Daychat, we access and store locally on your device:

• Calendar events: Event titles, descriptions, dates, times, locations, and attendees from the past and upcoming 120 days
• Google account information: Your email address and basic profile information (name, profile picture) required for authentication

3.2 Data Sent to Third-Party Services

To provide our AI-powered chat functionality, we send the following data to OpenAI's API:

• Your chat messages and queries
• Relevant calendar event information necessary to answer your questions (event titles, times, descriptions)
• Conversation context to maintain coherent dialogue

Important: We only send the minimum calendar data necessary to answer your specific queries. Your complete calendar is not transmitted to OpenAI.

3.3 Data We Do Not Collect

We do not collect, store, or process:

• Device identifiers or advertising IDs
• Location data beyond what's in your calendar events
• Usage analytics or tracking data
• Any data from other apps on your device

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: You provide explicit consent when you authorize access to your Google Calendar
• Contract performance: Processing is necessary to provide the services you've requested
• Legitimate interests: We have a legitimate interest in improving and maintaining the App's functionality

5. How We Use Your Information

We use your information exclusively for the following purposes:

• To provide the core functionality of the App - allowing you to interact with your calendar data through natural language
• To process your queries using OpenAI's API and generate relevant, contextual responses
• To authenticate your identity and maintain your connection to Google Calendar
• To improve the App's performance and user experience based on technical functionality (not user tracking)

We do not:

• Use data obtained through Google Workspace APIs to develop, improve, or train generalized AI and/or ML models
• Use your calendar data for marketing, advertising, or promotional purposes
• Sell, rent, or share your personal data with third parties for their marketing purposes
• Process your data for any purpose other than providing the Service

6. Data Storage and Security

6.1 Where Your Data is Stored

Your calendar data is stored exclusively on your local device. We do not maintain any servers that store your calendar information. Your data remains under your control on your iOS device.

6.2 Security Measures

We implement industry-standard security measures to protect your information:

• All communication with Google Calendar API uses encrypted HTTPS connections
• All communication with OpenAI's API uses encrypted HTTPS connections
• Authentication tokens are stored securely using iOS Keychain
• We follow Apple's security best practices for iOS app development
• We only retain the minimum amount of data necessary for the App to function (120 days of calendar data)

6.3 Data Retention

• Calendar data: Stored locally on your device; automatically removed when the 120-day window expires or when you delete the App
• Authentication tokens: Stored until you revoke access or delete the App
• Chat history: Stored locally on your device; you can clear it at any time within the App

7. International Data Transfers

When you use Daychat, your data may be transferred to and processed by third-party services located outside the European Economic Area (EEA):

• OpenAI (United States): We use OpenAI's API to process your chat queries. OpenAI has implemented appropriate safeguards for international data transfers. For more information, see OpenAI's privacy policy at https://openai.com/privacy
• Google (Multiple locations): Your calendar data is stored by Google in accordance with their data residency practices. See Google's privacy policy at https://policies.google.com/privacy

These transfers are necessary to provide the Service. By using the App, you acknowledge and consent to these international data transfers.

8. Data Sharing and Third-Party Services

8.1 Third-Party Services We Use

• Google Calendar API: For accessing and modifying your calendar data. Subject to Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including Limited Use requirements
• OpenAI API: For processing natural language queries and generating responses

8.2 Our Commitments

• The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements
• We process the contents of your calendar—including events and related details—solely on your behalf to provide the Service
• We do not share your data with any other third parties
• We do not use your data for any purpose other than providing the Service

9. Your Rights Under GDPR

As a user in the European Union, you have the following rights regarding your personal data:

• Right of Access: You can request confirmation of whether we process your personal data and obtain a copy of it
• Right to Rectification: You can request correction of inaccurate personal data
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data by deleting the App or revoking calendar access through your Google account
• Right to Restriction of Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
• Right to Object: You can object to our processing of your personal data
• Right to Withdraw Consent: You can withdraw your consent at any time by revoking calendar access in your Google account settings
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority (in France: CNIL - Commission Nationale de l'Informatique et des Libertés)

9.1 How to Exercise Your Rights

To exercise any of these rights, please contact us at js.wallez@gmail.com. We will respond to your request within 30 days as required by GDPR.

10. How to Delete Your Data

You can delete your data at any time through the following methods:

• Delete locally stored data: Uninstall the Daychat app from your iOS device. This will remove all locally stored calendar data and chat history
• Revoke calendar access: Go to your Google Account settings → Security → Third-party apps with account access → Remove Daychat
• Clear chat history: Use the "Clear Chat History" option within the App settings

Once you delete the App or revoke access, we no longer have any access to your calendar data. Since we don't store your data on our servers, deletion from your device is immediate and complete.

11. Children's Privacy

Daychat is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at js.wallez@gmail.com, and we will take steps to remove such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify users of material changes through the App or via email
• For significant changes, we may require you to accept the updated policy before continuing to use the App

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Jean-Sébastien Wallez
Paris, France
Email: js.wallez@gmail.com

For data protection inquiries specifically, please include "Data Privacy Request" in your email subject line.