Privacy Policy
This policy describes what Day Triage collects, where it is stored, and who it is shared with. Day Triage is published by Arandur Accounting Ltd (United Kingdom).
The short version
- Day Triage stores your tasks, workstreams, and email or chat snippets only on your devices (local SwiftData, and your private iCloud database once CloudKit sync is enabled).
- By default, Day Triage classifies your tasks on your device using Apple Intelligence — that content never leaves your device.
- If you explicitly opt into a cloud classifier, the content you triage is sent to the provider you chose — Anthropic (Claude) and/or Google (Gemini) — using your own API key. Each is gated on its own in-app consent sheet, and neither provider trains on your content.
- Day Triage connects directly to Gmail, Outlook, and Slack on your behalf, using only the read scopes those services require. OAuth tokens live in the device Keychain and never reach Arandur's servers.
- Arandur Accounting Ltd does not operate any user-data backend, log your content, or have visibility into your inbox.
Data we store
| Data | Where | Why |
|---|---|---|
| Triaged tasks, workstreams, linked items, follow-ups | On-device SwiftData store; syncs to your private iCloud database when enabled | Core app functionality |
| Calendar events (when a calendar source is connected) | Read in-memory only — never persisted to the on-device store, never sent to Anthropic | Free-time gap calculation, "today's meetings" line, next-slot lookup |
| Scheduled-event ID (when you schedule a task as a calendar block) | On-device, on the originating task; syncs to your private iCloud database when enabled | So a future "open in calendar" affordance can find the event again |
| OAuth refresh tokens (Gmail, Outlook, Slack) | Device Keychain, per service | Re-authorising without prompting |
| Your Anthropic API key (optional) | Device Keychain | Only if you have opted into Claude via the in-app consent sheet |
| Your Google Gemini API key (optional) | Device Keychain | Only if you have opted into Gemini via the in-app consent sheet |
| Rejected-classification events | On-device, for possible future tuning | Opt-in, never leaves your device |
| Crash reports (if you enable diagnostics) | Apple's anonymised MetricKit pipeline | Fixing real-world crashes |
We do not run a user-data backend. Our OAuth broker (api.daytriage.com) is a thin Cloudflare Worker that holds only short-lived CSRF state (no more than 10 minutes) and Slack event queue entries (no more than 7 days) before the app drains them.
Classification: on-device by default
Day Triage classifies the tasks you triage — assigning a RAG status, a confidence level, and a workstream. You choose which classifier does that work, in Settings:
- Apple Intelligence (default) — classification runs entirely on your device using Apple's on-device foundation models. The content being classified never leaves your device and is never sent to Arandur, Anthropic, or anyone else. Requires a device that supports Apple Intelligence.
- Claude (optional) — if you supply your own Anthropic API key, classification is handled by Claude instead. This sends content off your device; see below.
What we send when you opt into a cloud classifier
This applies only if you have explicitly opted into a cloud classifier (Anthropic Claude or Google Gemini) via the in-app consent sheet. When you then use Paste to triage or Refresh with a connected source, Day Triage sends to the chosen provider:
- The pasted text, email body, or Slack message
- Your current workstream names and descriptions (for context)
- A list of your most recent triage decisions (for pattern-matching)
Each provider receives this via your own API key. Per Anthropic's Commercial Terms, Anthropic API traffic is not used to train their models. Per Google's terms, Google's paid-tier Gemini API traffic is likewise not used to train their models. If you stay on the default Apple Intelligence classifier, none of this content is sent anywhere.
Consent for Claude and consent for Gemini are captured separately, in-app, and each can be revoked at any time — switch back to Apple Intelligence in Settings → AI Providers to revoke Claude; delete the Gemini key to revoke Gemini.
Third-party services
| Service | Scope | Why |
|---|---|---|
| Anthropic Claude API (optional) | Customer-managed API key | Classification and nudge drafting — only when you opt into Claude via the in-app consent sheet |
| Google Gemini API (optional) | Customer-managed API key | Classification routed by the multi-provider router — only when you opt into Gemini via the in-app consent sheet |
| Google APIs (Gmail + Calendar) | gmail.readonly, calendar.events | Fetching unread inbox + sent-mail follow-up scan; reading calendar for free-time + creating calendar blocks for scheduled tasks |
| Microsoft Graph | Mail.Read, User.Read, Chat.Read, Tasks.Read, Calendars.Read, Calendars.ReadWrite, offline_access | Outlook mail, Teams chat, To Do tasks, Calendar (read availability + create blocks for scheduled tasks) |
| Slack Web API | app_mentions:read, channels:history, reactions:read and a few others | Capturing slash-command, @mention, and :triage: events |
| Apple iCloud (CloudKit) | User's private database only | Cross-device sync |
| Apple App Store (StoreKit 2) | Subscription receipt | Day Triage Pro entitlement and renewal status. Apple holds the receipt; we never see your payment details. |
Google API Services — Limited Use
Day Triage's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice: data obtained from Gmail and Google Calendar is used only to provide the user-facing triage, follow-up, and scheduling features described above. It is processed on your device, is never sold, is never used for advertising, and is never used to train generalised AI or machine-learning models. It is not transferred to any third party — except where you have chosen Claude as your classifier, in which case the content you triage is sent to Anthropic solely to perform that classification.
Data retention and deletion
- Disconnect any source from Settings to revoke its tokens and wipe its linked items locally.
- Delete the app to wipe all local data. iCloud data for this app is removed by Apple's standard process when you delete the app on your last device or sign out of iCloud.
- Contact [email protected] if you need help scrubbing data.
Legal basis (UK GDPR)
Processing is necessary for the performance of the contract you enter into when you install and use the app. For diagnostics we rely on your consent (opt-in).
Children
Day Triage is rated 4+ but is built for professional workflows and not directed at children. We do not knowingly collect data from children under 13.
Changes to this policy
If the policy changes materially, we'll update the date at the top and post the change in the app's release notes. Continued use after the update constitutes acceptance.
Contact
Arandur Accounting Ltd
[email protected]
arandur-accounting.co.uk