Privacy policy

Version of November 6, 2026

This policy explains what data Dayflow (the Telegram bot @mydaylog_ai_bot and the mini app at app.day-flow.ru) collects, why, and how you can delete it.

1. Who processes the data

Data controller: the owner of Dayflow, an individual. Contact for any data questions: support in the bot @mydaylog_ai_bot (/support command). Details about the operator are provided on request through support.

2. What we process

• From Telegram: user ID, first name, username, interface language. Your profile photo is shown in the app directly from Telegram and is not stored by us.
• Settings: time zone, language, currency, theme. If you fill in the calorie goal form: sex, year of birth, height, weight, activity level and goal.
• Your entries: spending and income, food and macros, activities and workouts (type, intensity, duration, calorie estimate), weight diary and weight goal, tasks and reminders.
• Service data: time, type and cost of AI parses (without message text), payment records: plan, amount, status, transaction ID. We never receive card details; the payment provider handles them.

We do not store the original message text, voice notes or photos. They are sent for parsing and discarded afterwards. The parse result is kept until you confirm it, for no longer than 30 minutes.

Support requests are passed to the AI assistant (via OpenRouter) and to the operator in Telegram, where the conversation takes place. Our database keeps only the link between the request and your profile, without the text, for up to 90 days.

3. Why

• to parse your messages and keep your logs;
• to send task reminders and subscription expiry notices;
• to enforce plan limits and accept payments;
• to answer your requests and protect the service from abuse.

4. Legal basis

Your consent, given when you start using the bot, and performance of the service agreement (terms of use). You can withdraw consent at any time by deleting your data (section 7).

5. Who receives the data

Only the services Dayflow can't work without:

• Telegram: message delivery and the mini app;
• OpenRouter and the AI model providers it routes to: text, voice or photo for the duration of parsing;
• Neon: database hosting;
• Cloudflare: website delivery and secure connection to the server;
• Platega: payment processing.

Their servers may be located outside Russia, so data is transferred across borders. We don't sell data or share it for advertising.

6. Retention

As long as you use the service. Once you delete your data, it is erased immediately. It may remain in encrypted backups for up to 30 days, after which the backups are deleted. Payment records are kept without a link to your profile for accounting.

7. Your rights

You can find out what data we hold about you, correct it, withdraw consent and request deletion. To delete everything yourself, use /delete_me in the bot or "Delete my data" in the app settings. For other requests, contact support in the bot @mydaylog_ai_bot (/support command). We reply within 10 business days.

8. Security

Connections are encrypted, only the operator can access the database, backups are encrypted, and secret keys never appear in code or logs. Message text is never written to logs.

9. Age

The service is not intended for children under 14.

10. Changes

A new version is published on this page. If the changes are significant, the bot will let you know.