Privacy Policy

1. Who we are

My Daily Journal is a daily AI email digest service (“we”, “us”, “our”). My Daily Journal reads documents you select from Google Drive, synthesises them using Claude (Anthropic), and delivers a formatted digest to your inbox each morning. Questions about this policy can be sent to digest@mydailyjournal.net.

2. Information we collect

We collect the minimum information required to deliver the service:

• Account information. Your name and email address, obtained via Google OAuth when you sign in.
• Google OAuth tokens. An access token and refresh token that allow us to read Google Drive files on your behalf. These tokens are stored in our database and refreshed automatically so the service keeps running between your visits.
• Folder selections and delivery preferences. Which Drive folders you want My Daily Journal to read, what time you want your digest delivered, your timezone, and any personal instructions you give Claude.
• Digest history. The rendered HTML of each digest we send you is stored so you can review past digests in your dashboard.

3. Google Drive — what we read and what we store

When generating your digest, our server temporarily reads the text content of documents inside the folders you selected. This reading happens in memory, on our server, at digest-generation time. We never permanently store the raw contents of your Google Drive documents. The document text is passed directly to Claude (Anthropic’s API) to produce the digest, and then discarded. Only the finished digest HTML is saved.

We request read-only Drive access. My Daily Journal cannot create, edit, move, or delete any of your files.

4. Google OAuth scopes

We request the following Google OAuth scopes:

• openid, email, profile — to identify your account and pre-fill your delivery email.
• https://www.googleapis.com/auth/drive.readonly — to read documents in the folders you select. Used only when generating your digest.

My Daily Journal’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use your information

• To authenticate you and maintain your session.
• To read your selected Drive folders and generate your daily digest.
• To send the digest to your delivery email address.
• To display your digest history in your dashboard.
• To improve the service (aggregate, anonymised usage metrics only).

We do not sell your personal data. We do not use your Drive contents or digest content to train AI models. Your document content is sent to Anthropic solely to generate your digest under their privacy policy.

6. Data storage and security

Your account data, OAuth tokens, preferences, and digest history are stored in a Supabase-hosted PostgreSQL database. Data is encrypted at rest and in transit. OAuth tokens are stored with restricted access and are used exclusively for the operations described in this policy.

7. Third-party services

• Google — authentication and Drive read access.
• Anthropic (Claude API) — AI synthesis of your digest content.
• Resend — transactional email delivery.
• Supabase — database hosting.
• Vercel — application hosting and edge infrastructure.

Each provider processes data only as necessary to deliver their service. We do not share your personal data with any other third parties.

8. Revoking access

You can revoke My Daily Journal’s access to your Google account at any time from your Google Account permissions page. Revoking access stops all future digests immediately.

9. Deleting your account and data

To delete your account and all associated data (including OAuth tokens, settings, and digest history), email us at digest@mydailyjournal.net with the subject line “Delete my account” from the email address associated with your My Daily Journal account. We will complete deletion within 30 days and confirm by email.

10. Children’s privacy

My Daily Journal is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above. Continued use of My Daily Journal after changes constitutes acceptance of the revised policy.

12. Contact

For any questions or requests regarding this Privacy Policy, please contact us at digest@mydailyjournal.net.