Privacy Policy

Last updated: February 19, 2026

How's Your Day ("we," "our," or "the app") is operated by Itúy FZ-LLC. We built this app for parents who want a simple, clear view of their child's school day. This privacy policy explains what data we collect, how we use it, and how we protect it.

1. Information We Collect

Account Information

When you create an account, we collect your email address, name, and a password. This is used for authentication and to deliver your daily signal.

School Platform Credentials

To connect your children's school platforms (PowerSchool, Google Classroom, WhatsApp), you provide login credentials or authorize access via OAuth. All credentials are encrypted on your device using client-side encryption before they are transmitted or stored. We never have access to your plaintext passwords.

Google Classroom Data

When you connect Google Classroom, we access the following data through Google's API using OAuth 2.0 authorization:

• Course names and teacher information
• Announcements and due dates
• Coursework and student submissions (read-only)
• Class rosters (to identify your child's classes)

School Platform Data

From connected platforms, we temporarily access data such as grades, teacher comments, attendance, assignments, announcements, and parent group messages. This data is processed to generate your daily signal and is not permanently stored.

Preferences

We store your children's names, preferred signal delivery time, timezone, and notification preferences (email, push, WhatsApp).

Waitlist

If you join our waitlist, we collect your email address solely to notify you when the app launches.

2. How We Use Your Data

We use your data for one purpose: to generate and deliver your daily signal. Specifically:

• Credential retrieval: Your encrypted credentials are decrypted server-side to authenticate with school platforms and retrieve current data.
• Data processing: School data is analyzed by our AI pipeline to identify the single most important piece of information for your day — an upcoming test, a teacher comment, a deadline, or a school notice.
• Signal generation: We use Anthropic's Claude AI to synthesize a 2–3 sentence signal from the processed data. Only the final signal text is stored.
• Delivery: Your signal is delivered via the method you choose — in-app, email, or WhatsApp.

3. Google API Services — Limited Use Disclosure

How's Your Day's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google Classroom data to provide the core functionality of the app — generating your daily signal.
• We do not use Google Classroom data for advertising, marketing, or profiling.
• We do not sell Google Classroom data to third parties.
• We do not use Google Classroom data for AI/ML model training beyond generating your individual signal.
• We do not allow humans to read your Google Classroom data unless you provide affirmative consent, it is necessary for security purposes, or it is required by law.

4. Data Storage and Security

• Client-side encryption: School credentials are encrypted on your device using a cryptographic key before transmission. The server never receives plaintext credentials.
• Database isolation: Row-Level Security (RLS) is enforced at the database level, ensuring each user can only access their own data. This is not application-level logic — it is enforced by the database engine itself.
• Infrastructure: Our backend runs on Supabase (PostgreSQL) with encrypted connections. Our AI pipeline runs on Railway with isolated container execution.
• Signal storage: Only the final signal text (2–3 sentences) and its metadata (date, type, child name) are stored. Raw school data is never persisted.

5. Third-Party Services

We use the following third-party services to operate the app:

• Supabase (database, authentication, storage) — hosted in the United States
• Anthropic Claude AI (signal generation) — school data is sent to Claude's API for processing. Anthropic does not use API inputs for model training per their privacy policy.
• Resend (email delivery) — receives only the signal text and your email address
• Twilio (WhatsApp delivery) — receives only the signal text and your phone number, if WhatsApp delivery is enabled
• Vercel (web app hosting)
• Railway (AI pipeline hosting)

We do not share your data with any other third parties. None of these services receive your school credentials or raw school data — only the minimum data required for their specific function.

6. Children's Privacy

How's Your Day is a tool for parents. We do not collect data directly from children, and children do not create accounts or interact with the app. The school data we process belongs to the parent's connected accounts and is used solely to generate signals for the parent.

We are committed to complying with applicable children's privacy laws, including COPPA (Children's Online Privacy Protection Act) and FERPA (Family Educational Rights and Privacy Act). If you believe we have inadvertently collected personal information from a child, please contact us immediately.

7. Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion.
• Encrypted credentials: Retained while the platform connection is active. Deleted when you disconnect a platform or delete your account.
• Daily signals: Retained as part of your signal history. Deleted upon account deletion.
• Raw school data: Not retained. Processed in memory and discarded immediately after signal generation.
• Pipeline logs: Operational logs (status, errors) are retained for up to 90 days for debugging purposes. They do not contain school data content.

8. Your Rights

You have the right to:

• Access your personal data by viewing your profile, preferences, and signal history in the app.
• Delete your account and all associated data at any time.
• Disconnect any school platform, which removes the stored encrypted credentials.
• Revoke Google Classroom access at any time through your Google Account permissions.
• Export your signal history upon request.

9. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via email or an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

If you have questions about this privacy policy or how we handle your data, please contact us:

• Email: privacy@howsyourday.app
• Entity: Itúy FZ-LLC, UAE