daypadYOUR DATA & YOUR CHOICES
Privacy policy
Last updated
November 8, 2026
Overview
Daypad is provided by Graspery (Yunus Kulyyev). Daypad is a local-first time tracking and invoicing app. Your projects, time entries, invoices, expenses, attachments, and settings are stored on your device. No account is required.
Data stored on your device
Depending on the features you use, Daypad stores project names, notes, time records, rates, client and company details, invoices, payments, expenses, images and receipts, preferences, and optional work locations. Daypad does not operate a cloud sync service or automatically upload your workspace to a Daypad server. Daypad does not include advertising or analytics SDKs.
Optional location and maps
Daypad requests foreground location permission only for features that attach your location to an entry. You can decline permission and continue tracking time. Daypad does not track your location in the background. Saved coordinates and location names remain in your local workspace unless you export them, enable Google Drive backups, or your device backs them up.
Optional notifications
On Android, you can enable timer controls, break and resume reminders, long-session checks, and daily start reminders. Daypad requests notification permission when you enable these features. Reminder schedules and a limited timer snapshot, including the project name and timing state, are stored on your device so Android can display notifications while the app is closed. Notifications may show project information according to your device notification and lock-screen settings. These features do not send your workspace to a Daypad server. You can disable reminders in Timer settings or revoke notification permission in Android settings. Android may delay reminders in battery-saving modes; reopen Daypad after force-stopping it to restore reminders.
External map and address services
Displaying a map downloads map tiles from OpenStreetMap. These requests disclose your IP address, the map area being viewed, and an application identifier to the OpenStreetMap Foundation. Recently viewed tiles are cached on your device to reduce repeat requests. OpenStreetMap’s privacy policy is available at https://osmfoundation.org/wiki/Privacy_Policy. Address search and reverse geocoding use Android’s system geocoding service, which may send address search text or coordinates to the service provider configured on your device. Its processing is governed by that provider’s privacy policy. Choosing Open on a location passes its coordinates to an external map app or browser, governed by that app or service’s policy.
Exports, backups, and support
Backups, reports, and invoice exports are created locally. You choose whether and where to share them. Exported files may include client details, billing information, notes, locations, and attachments. Shared files are handled under the receiving app or service’s privacy practices. If you contact support or share diagnostic information, we receive the information you choose to send and use it to respond and investigate the issue. Avoid sending sensitive workspace data unless it is needed for your support request.
Device backups and security
Android or your device manufacturer may back up or transfer app data according to your device settings and their policies. Daypad does not control those services. Local workspace storage and exported backups are not encrypted by Daypad. Protect your device and backup files using your device security and storage settings.
Retention and deletion
Workspace data stays on your device until you delete it, clear app storage, or uninstall the app. Projects that have linked history may be archived to preserve their time records, expenses, and invoices. To remove all local workspace data, clear Daypad’s storage in Android settings or uninstall the app. Separately delete exported files, shared copies, and device backups from their destinations. Without a usable backup, clearing storage or uninstalling may permanently lose your workspace. Support emails are retained as needed to handle your request and maintain support records; contact us to request deletion.
Your choices
Location features are optional. You can revoke location permission in Android settings and edit or clear location fields on entries. You control exported files and platform backup settings. Daypad does not sell your workspace data or use it for advertising.
Changes and contact
We update this policy when Daypad’s data practices change. The date above identifies the current policy. For privacy questions or support, contact Graspery at graspery@gmail.com.
Optional calendars and home-screen widget
On Android, you can choose a calendar already synced to your device, such as Google Calendar. Daypad requests read-only calendar permission when you connect. It reads calendar names and events for the period you open, and does not edit your calendars or read them in the background. Events become local time entries only when you explicitly confirm an import. Imported entries retain the event title, times, optional location text, and source identifiers to prevent duplicate imports. Disconnecting stops later reads; imported entries remain until you delete them. You can revoke calendar permission in Android settings. If you add the Daypad home-screen widget, it shows recent project names or the active timer state to anyone who can view that home screen. A limited local snapshot supplies the widget; actions open Daypad to update the saved timer. You can remove the widget from your launcher.
Optional Google Drive backups
On Android, you can opt into backups to Daypad’s private application folder in your Google Drive account. Google handles account selection and authorization; Daypad requests the drive.appdata scope. Daypad stores the selected account name and backup settings privately on this device. Scheduled uploads use Android WorkManager and send prepared workspace backups, including projects, time entries, invoices, expenses, settings, optional locations, and available attachments, to your Drive. Your Google account storage and privacy policies apply. The app shows verified upload time separately from the time of the included workspace data. Android can delay jobs; reopening Daypad may be needed after force-stop or to finish preparing recent changes. Optional encryption uses AES-256-GCM and a random recovery key protected locally by Android Keystore. The recovery key is not uploaded with the backup and must be saved outside the device; Daypad cannot recover encrypted files without it. Older versions are pruned only after a new upload is verified. Disconnecting stops future scheduled uploads without deleting existing cloud files. You can separately revoke Google access or delete stored app data through Google’s controls. Local exports and account-free tracking remain available.
Google user data and limited use
Daypad uses Google authorization and Drive data only to provide the backups and restores you choose. Daypad does not use Google user data for advertising, sell it, or use it to train artificial intelligence models. Daypad’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can stop future backups by disconnecting Drive in Daypad, revoke authorization in your Google Account’s third-party access settings, and delete Daypad’s stored app data through Google Drive’s Manage apps settings. Disconnecting or revoking access does not itself delete existing backups.
Google API Services User Data Policy · Google Privacy Policy