LEGAL

Privacy policy

Effective October 1, 2026

This policy explains what DayFinch collects, why, who helps us run the service, and the choices you have. DayFinch is provided by HK HOLDINGS SAS, which is responsible for your personal information in DayFinch.

What we collect

Your account: your name, email address and sign-in details, and the devices and sessions you use to sign in.
Your community’s work: the community name, groups, calendar, the activities and kits you prepare, session records and notes, and your teammates’ names, email addresses and roles.
Billing: Paddle collects your payment details at checkout. We receive the billing name, billing email, plan, subscription status and dates. We never see or store full card numbers.
Sample requests: opening a sample kit needs no email. If you choose to have one emailed to you, we keep the name and email you give us, and whether you agreed to hear from us.
How DayFinch is used: a short list of actions such as opening a sample, starting a trial or preparing a first kit. We use them to improve DayFinch. There are no third-party advertising pixels.
Technical data: IP address, browser and device information and security logs, which our hosting provider processes to deliver and protect the service. To stop abuse of the sample and demo forms we keep a one-way code made from the IP address that changes every day; it cannot be turned back into the address.

Residents

DayFinch is built to work without residents’ personal information. Please keep residents’ names and health details out of session notes and use attendance counts instead.

How we use it

To provide DayFinch and its features, keep accounts secure, process your subscription, answer requests, send service emails (for example about your trial, billing or team invitations) and improve the product. We send marketing emails only if you agreed, and you can stop them at any time.

Who helps us run DayFinch

Cloudflare: hosting, database and security.
Clerk: sign-in and account security. If you choose to sign in with Google, Google shares your name and email address with us through Clerk.
Paddle: checkout, payments, taxes and invoices. Paddle is our reseller and Merchant of Record and handles payment data under its own privacy notice.
Resend: delivery of DayFinch emails, when email is turned on.

We do not sell personal information and do not share it for targeted advertising.

Cookies and similar technologies

DayFinch uses only what it needs to work. It does not use advertising, tracking or analytics cookies, and it does not follow you to other websites.

Sign-in cookies: our sign-in provider, Clerk, sets cookies that keep you signed in and your session secure.
Sample cookie: if you request a sample kit by email, a cookie called dayfinch_sample lets you open that kit again for up to 7 days.
Your browser’s storage: your device keeps preferences such as the light or dark theme, the progress of a session in progress and, if you turn it on, the activity copy for offline use. It stays on your device.
Checkout: the payment form loads from Paddle only when you open checkout, and Paddle may set its own cookies under its privacy notice.

If we ever add cookies that are not strictly necessary, we will ask for your choice first and update this page.

How long we keep it

We keep your information while your account or community is active. After a paid plan ends, the community stays readable for 90 days; after that we may delete it and will email the owner first. Recovery backups are kept for a limited time and replaced on a rolling basis. Billing records are kept as long as the law requires.

Your choices and rights

You can see and correct your profile in Account, export your community’s work, and ask us to delete your account or your community from Account → Help & data. Depending on where you live, you may have more rights, such as knowing what we hold about you or objecting to some uses. Contact us and we will respond within the time the law requires.

Security

Connections use encryption (HTTPS). Access inside a community follows each person’s role. The activity copy downloaded for offline use is encrypted on the device with a passphrase; the progress of the day on that device is kept in the browser. Only the people who run DayFinch can reach its systems, and only when needed.

Where your data is processed

DayFinch is run for customers in the United States. We and our providers may access and process data in the United States and in other countries.

Children

DayFinch is for adults at work. It is not directed to children and should not be used by anyone under 18.

Changes to this policy

We will update the effective date above and tell account owners about significant changes before they apply.

Questions? Email support@dayfinch.com.

What we collect

Your account: your name, email address and sign-in details, and the devices and sessions you use to sign in.

Your community’s work: the community name, groups, calendar, the activities and kits you prepare, session records and notes, and your teammates’ names, email addresses and roles.

Billing: Paddle collects your payment details at checkout. We receive the billing name, billing email, plan, subscription status and dates. We never see or store full card numbers.

Sample requests: opening a sample kit needs no email. If you choose to have one emailed to you, we keep the name and email you give us, and whether you agreed to hear from us.

How DayFinch is used: a short list of actions such as opening a sample, starting a trial or preparing a first kit. We use them to improve DayFinch. There are no third-party advertising pixels.

Technical data: IP address, browser and device information and security logs, which our hosting provider processes to deliver and protect the service. To stop abuse of the sample and demo forms we keep a one-way code made from the IP address that changes every day; it cannot be turned back into the address.

Who helps us run DayFinch

Cloudflare: hosting, database and security.

Clerk: sign-in and account security. If you choose to sign in with Google, Google shares your name and email address with us through Clerk.

Paddle: checkout, payments, taxes and invoices. Paddle is our reseller and Merchant of Record and handles payment data under its own privacy notice.

Resend: delivery of DayFinch emails, when email is turned on.

We do not sell personal information and do not share it for targeted advertising.

Cookies and similar technologies

DayFinch uses only what it needs to work. It does not use advertising, tracking or analytics cookies, and it does not follow you to other websites.

Sign-in cookies: our sign-in provider, Clerk, sets cookies that keep you signed in and your session secure.

Sample cookie: if you request a sample kit by email, a cookie called dayfinch_sample lets you open that kit again for up to 7 days.

Your browser’s storage: your device keeps preferences such as the light or dark theme, the progress of a session in progress and, if you turn it on, the activity copy for offline use. It stays on your device.

Checkout: the payment form loads from Paddle only when you open checkout, and Paddle may set its own cookies under its privacy notice.

If we ever add cookies that are not strictly necessary, we will ask for your choice first and update this page.

How long we keep it

Your choices and rights

Security