Effective August 26, 2026

Privacy policy

Daybreak is a private, personal-use application. This policy explains how it handles the owner's Google user data.

Data Daybreak accesses

With the owner's consent, Daybreak uses read-only authorization to access Gmail messages and settings and Google Calendar calendars and events. It also receives the Google account identity needed to verify that it is reading the account the owner configured.

How the data is used

Google user data is used only to collect relevant mail and calendar information, create daily or weekly personal briefings, link briefing items back to their source, and report collection health. Daybreak does not use Google user data for advertising and does not sell it.

Processing and disclosure

Daybreak processes data on private infrastructure controlled by the owner. When the owner has explicitly enabled remote model processing for an account, bounded selected excerpts may be sent to OpenAI solely to generate the requested briefing. OAuth tokens, API keys, raw attachments, and browser session secrets are not sent to the model provider. Daybreak does not disclose Google user data to other parties except as required to operate these owner-selected services or by law.

Storage and retention

OAuth credentials are stored encrypted and are available only to the collector responsible for Google access. Raw mail and attachments are not retained. Normalized briefing inputs are deleted after a run. Briefing reports and delivery records are retained for up to 30 days; collection health and run metadata for up to 90 days; and minimal security audit records for up to 365 days.

Security

Daybreak separates collection, model processing, rendering, delivery, and web access into least-privilege services. The public site you are reading does not run Daybreak, accept sign-ins, use analytics, set cookies, or collect visitor information through forms.

Your control and deletion

The owner can revoke Daybreak's Google access at any time from their Google Account permissions. The owner may also request deletion of retained Daybreak data or ask privacy questions by emailing mark@marklynch.dev.

Google API Services User Data Policy

Daybreak's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Changes

Material changes will be posted here with a revised effective date before they take effect.