Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
This privacy policy raises some concerns regarding the handling of your data. Your information may be transferred to a new party if the company undergoes business changes like a merger or bankruptcy (risk_flags-1). Furthermore, your data might be disclosed to comply with legal obligations or to protect the company's rights, potentially without your explicit consent or knowledge (risk_flags-2). While anonymous data doesn't identify you, the company reserves the right to disclose it publicly without restriction (data_use-1). Lastly, even if you opt out of promotional communications, service-related emails may still be sent to you (data_use-2).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
2 findings
Critical issues that represent a material risk of harm to the user, such as loss of funds, privacy violation, or denial of access if the user doesn't strictly follow terms.
medium90% confidence
Information may be transferred during business changes
User information would likely be one of the assets that is transferred or acquired by a third party in connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company, or if the company goes out of business or enters bankruptcy.
Why it matters: If the company undergoes a merger, sale, acquisition, or bankruptcy, your information may be transferred to a new party. While the privacy policy states it would continue to apply, a new entity would control your data.
In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company, or in the unlikely event that we go out of business or enter bankruptcy, user information would likely be one of the assets that is transferred or acquired by a third party. If any of these events were to happen, this Privacy Policy would continue to apply to your information and the party receiving your information may continue to use your information, but only consistent with this Privacy Policy;
We use your personal information to:, paragraph 4 · Citation strength: strong
medium90% confidence
Disclosure of information to comply with legal obligations, disputes, or protect rights
The service may disclose information if they believe it is necessary to resolve disputes, investigate problems, enforce their Terms of Service, comply with relevant laws, warrants, subpoenas, court orders, and other enforceable legal processes, or protect the property or rights belonging to Day One, you, third parties, or the public at large.
Why it matters: Your personal information may be disclosed to comply with various legal or regulatory demands, or to protect the company's or others' rights, potentially without your direct consent or knowledge.
We may disclose information about you if we believe in good faith that such disclosure is necessary to (a) resolve disputes, investigate problems, or enforce our Terms of Service; (b) comply with relevant laws, or warrants, subpoenas, court orders, and other enforceable legal process; or (c) protect the property or rights belonging to Day One, you, third parties, or the public at large.
We use your personal information to:, paragraph 4 · Citation strength: strong
Data Use
2 findings
Practices around the collection, processing, and sharing of user data that may be surprising or concerning.
medium90% confidence
Anonymous information can be disclosed without restriction
The service reserves the right to disclose anonymous information or other information that cannot reasonably be used to identify you publicly without restriction.
Why it matters: While this information is anonymous, it means the company can share data derived from your usage without limitations, potentially for commercial purposes.
We reserve the right to disclose anonymous information or other information that cannot reasonably be used to identify you publicly without restriction.
Marketing communications may still be received even after opting out of promotions
Even if you unsubscribe or opt-out of promotional emails, the service may still send you Services related communications, such as emails related to your account or the App.
Why it matters: You may still receive certain communications even after opting out, which could be an inconvenience if you wish to cease all communications from the service.
Please note that even if you unsubscribe or opt-out of our emails, we may still send you Services related communications (e.g., emails related to your account or the App).
We use your personal information to:, paragraph 2 · Citation strength: strong
Cancellation & Renewal
Not clearly stated
Terms governing how subscriptions renew, how to cancel, and any associated fees or conditions.
?
Not clearly stated
No cited billing terms — wording is unclear
The policy lacks explicit details regarding automatic renewal terms or specific cancellation procedures beyond account deletion and app uninstallation. Information on refund policies or prorated refunds upon cancellation is also not clearly stated.
Gotchas
Not clearly stated
Potentially overlooked clauses that could negatively impact the user's experience or rights.
?
Not clearly stated
No cited gotchas — wording is unclear
The policy notes that some features may not function properly without cookies, but this is a common and expected limitation of many online services. No other particularly surprising or potentially overlooked clauses were identified.
Protections
6 findings
User-benefiting clauses that are protective, transparent, or grant the user control.
Protection95% confidence
Journal entries are private and inaccessible to others
Your journal entries are private. This means that when you use Day One to create a journal, none of the entries in that journal are made publicly viewable on the Internet. Entries are not accessible to other Day One users.
Why it helps: This ensures that your personal journal entries remain private and are not viewable by other users or made public on the internet, protecting your personal thoughts and memories.
Your journal entries are private. This means that when you use Day One to create a journal, none of the entries in that journal are made publicly viewable on the Internet. Entries are not accessible to other Day One users.
**_Information You Provide Us_**, paragraph 2 · Citation strength: strong
Protection95% confidence
End-to-End Encryption for Journal Data
The service offers End to End Encryption on journals. If that option is enabled, it is impossible for their employees to access your journal data. All new journal entries are end-to-end encrypted.
Why it helps: End-to-end encryption ensures that your journal data is highly secure and cannot be accessed by anyone, including the service's employees, providing a strong privacy safeguard.
We also offer [End to End Encryption](https://dayoneapp.com/guides/day-one-sync/end-to-end-encryption-faq/) on our journals. If that option is enabled, it is _impossible_ for our employees to access your journal data.
**_Information You Provide Us_**, paragraph 2 · Citation strength: strong
Protection95% confidence
Motion, activity, or fitness data not used for advertising or data mining
The service never uses your motion, activity, or fitness data for advertising and similar services or for use-based data mining. They also do not disclose this information to a third party for their own use or sell it to advertising platforms, data brokers, or information resellers.
Why it helps: This commitment ensures that sensitive health and activity data collected from your device is not exploited for advertising, data selling, or user-based data mining, protecting your privacy.
We never use your motion, activity, or fitness data for advertising and similar services or for use-based data mining. We don’t disclose this information to a third party for their own use or sell it to advertising platforms, data brokers, or information resellers.
**_Information We Collect from Other Sources_**, paragraph 2 · Citation strength: strong
Protection95% confidence
Data deletion upon account closure
When you close your account, the service waits for a 5-day recovery window and then permanently deletes all of your journal entries, their attachments, and your account data.
Why it helps: This ensures that your personal data, including journal entries and attachments, is permanently removed from the service after a short recovery period upon account closure, giving you control over your data's lifecycle.
As another example, when you close your account we wait for a 5-day recovery window and then permanently delete all of your journal entries, their attachments, and your account data.
How Long We Keep Information, paragraph 3 · Citation strength: strong
Protection90% confidence
Ability to limit, update, or delete personal information
You can review, change, and/or delete certain of your personal information by logging into the Site or the App and accessing your account.
Why it helps: This provides users with direct control to manage and correct their personal information, ensuring accuracy and giving them the power to remove data they no longer wish to share.
You can review, change, and/or delete certain of your personal information by logging into the Site or the App and accessing your account.
Your Choices, paragraph 2 · Citation strength: strong
Protection95% confidence
No selling or sharing of personal data, including for minors
The service states they do not “sell” or “share” your personal data as defined under the privacy laws of relevant US states. They also have no knowledge of any “sales” or “sharing” of personal data of minors under 16 years of age.
Why it helps: This commitment assures users that their personal data will not be sold or shared with third parties for purposes like targeted advertising, protecting user privacy and preventing unauthorized commercial use of data, especially for minors.
We do not “sell” or “share” your personal data as those terms are defined under the privacy laws of the relevant US states. We also do not have any knowledge of any “sales” or “sharing” of the personal data of minors under 16 years of age.