DailyGoalPrivacy Policy
Introduction
At DailyGoal.fit, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application.
By using DailyGoal.fit, you consent to the data practices described in this policy.
Information We Collect
We collect the following types of information:
- Personal information you provide (email address etc)
- Fitness and nutrition data you enter into the application.
- Usage data and analytics to improve your experience.
- Records of the API tokens and connected apps you set up, described under API Clients and Connected Apps.
How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain our service.
- To personalize your experience and help you achieve your goals.
- To send your data to API clients and connected apps that you set up.
- To analyze usage patterns and improve our application.
- To measure which of our ads lead to sign-ups and subscriptions.
- To communicate with you about updates or changes to our service.
- To comply with legal obligations.
API Clients and Connected Apps
With paid access, including a free trial, you can let programs outside DailyGoal use your data through the DailyGoal API. You choose whether to do this. You can connect a program in two ways:
- API token: you create a token in your DailyGoal settings and paste it into a script, an AI agent, or another API client.
- Connected app: you sign in to DailyGoal from an AI assistant or other app and approve it on a DailyGoal consent screen. The screen shows the app's name, the website it will return you to, and what it can read and change. Apps we do not recognise are labelled "Unverified app".
When you connect a program, we send it the data it requests. A connected program can:
- Read, add, change, and delete your weight, body fat, and step readings, food entries, custom foods, workouts, and goals.
- Search the food catalogue, including your custom foods and saved meals, and search the exercise catalogue.
- Read your timezone, preferred units, usage limits, and whether you have paid access.
Once a program receives your data, its provider handles that data under its own terms and privacy policy. We do not control what it does with your data.
To run the API, we keep the following records:
- For an API token: a one-way hash of the token, a short prefix so you can recognise it, and when it was created and last used. We do not store the token itself.
- For a connected app: the app's name, the website it returns you to, and when you connected it and last used it.
- A note on each record written through the API that it came from the API, and which token or connected app wrote it.
- Which token or connected app made each request, and the app's name. Our request logs do not contain your token or the contents of your requests.
You can stop a program's access at any time:
- Revoke your API token, or any single connected app, in your DailyGoal settings. Revoking takes effect immediately.
- Regenerating your API token stops the old token immediately.
- Signing out on all devices, resetting your password, or deleting your account revokes every API token and connected app.
If your paid access ends, API access pauses and requests are refused. Your token and connected apps stay listed in settings, where you can still revoke them. Access resumes if you subscribe again.
Revoking access stops future requests. It does not remove data a program already received. To ask a provider to delete that data, contact the provider.
Third-Party Services
We use the following services to run DailyGoal. For each one, we list what data it receives and why.
- Convex: Hosts our backend and database. It stores and processes all of your account, profile, fitness, food, workout, and goal data so DailyGoal can work.
- Vercel: Hosts the DailyGoal website and receives the standard request data any website receives, such as your IP address and browser details. Vercel Web Analytics counts page views without cookies.
- Cloudflare: Hosts our own diagnostics collector. It receives technical records of requests and errors in the app, website, and backend, such as timings, error types, and app versions. If you allow analytics, it also receives a record of which screens and features you used, linked to a pseudonymous ID. These records do not contain your name, email address, the text you enter, or health data.
- Apple and Google sign-in: If you sign in with Apple or Google, that company confirms your identity and gives us your email address and, if you share it, your name. With Apple, you can choose to share a relay address instead of your real email address.
- Sentry: Error and crash reporting. When something goes wrong, Sentry receives the error, your device or browser details, and your DailyGoal account ID so we can find and fix the problem. It does not receive your email address or record your screen.
- PostHog (EU servers): Product analytics, used only after you allow analytics cookies. PostHog receives your DailyGoal account ID, the features you use, and a few profile details: whether you have paid access, whether you finished onboarding, and the sex you entered. If you allowed analytics, our server also reports your trial and purchase events to PostHog with your account ID, the product, the price, and the currency. PostHog does not receive your email address or name.
- Google Analytics: Website analytics, used only if you allow analytics cookies. If you subscribe on the website, our server also reports the purchase to Google Analytics using the analytics ID your browser was given.
- Lemon Squeezy: Runs checkout and billing for subscriptions bought on the website. It receives your email address, your DailyGoal account ID, and the payment details you enter at checkout, and it tells us when your subscription starts, renews, or ends.
- Meta (Facebook): Advertising measurement, used only if you allow advertising cookies. The Meta Pixel then loads on the website. If you subscribe on the website after allowing advertising cookies, our server sends Meta a subscription event. It contains a one-way hash of your email address and of your DailyGoal account ID, and can also include the purchase value and currency, your IP address, your browser details, and the Meta click and browser identifiers stored in your browser.
- Resend: Delivers our emails. It receives your email address and the content of each email we send you, such as sign-in and password emails, replies to your feedback, reminders, and product updates.
- OpenAI, through the Convex AI Gateway: Powers the AI assistant. When you use it, the gateway receives the text you type or dictate and the context the assistant needs: the names of your recent and favourite foods when you log food, your goals with their targets, descriptions, and schedules when you ask it to change them, and your preferred units. It sends this to OpenAI, or to a routing model that decides what kind of request it is, and returns the result. It does not receive your email address or name.
- Open Food Facts: An open food database. When you scan a barcode, our server sends it the barcode number only, to look up the product. It receives no information about you.
Data Security
We implement industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your data is stored securely and we regularly review our security practices to ensure the highest level of protection.
Your Data Rights
You have the following rights regarding your personal data:
- Right to access your personal information.
- Right to correct inaccurate data.
- Right to delete your personal information.
- Right to restrict or object to processing.
- Right to data portability.
To exercise these rights, please contact us using the information provided at the end of this policy.
Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website or through the application.
Contact Information
If you have questions or concerns about this Privacy Policy, please contact us at admin@dailygoal.fit
Last updated: Oct 14, 2026