Introduction
DaysWeeksYears ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information.
DaysWeeksYears is a personal-first journaling platform. Privacy is not an afterthought — it's a core design principle. We collect the minimum data necessary to provide the service and never use your journal entries for any purpose other than displaying them to you.
Data we collect
Account information
When you create an account, we collect your email address for authentication purposes. We use magic links for sign-in, so we do not store passwords.
Journal content
Your journal entries, including text, metadata, tags, and attached media files, are stored to provide the journaling service. This content is yours and is not accessed, analysed, or processed by us for any other purpose.
Technical data
We collect minimal technical data necessary for operating the service, including session tokens and basic server logs. We do not use tracking pixels, third-party analytics, or advertising networks.
How we use your data
- To provide and maintain the journaling service
- To authenticate your identity via magic links
- To send you transactional emails (sign-in links, service notifications)
- To maintain service reliability and security
We do not use your data for advertising, user profiling, AI/ML training, or any purpose other than providing the service.
Data storage and security
Your text and metadata are stored in PostgreSQL. Media files (photos) are stored in S3-compatible object storage. Both systems use industry-standard encryption and access controls.
We implement regular automated backups and maintain data redundancy to protect against data loss. Access to production data is restricted and logged.
Content visibility
DaysWeeksYears supports three visibility levels: private, unlisted, and public. Private content is accessible only to you. Unlisted content is accessible to anyone with a direct link. Public content may be indexed by search engines.
All journals default to private. You control visibility at both the journal level and the individual entry level.
Your rights
You have the right to:
- Access — request a copy of all data we hold about you
- Export — download your journals, entries, and media at any time
- Rectification — correct any inaccurate personal data
- Deletion — request deletion of your account and all associated data
- Portability — receive your data in a standard, machine-readable format
To exercise any of these rights, contact us at [email protected].
Cookies
We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party cookie services.
Third parties
We do not sell, rent, or share your personal data with third parties. We may use third-party infrastructure providers (hosting, email delivery) who process data on our behalf under strict contractual obligations.
Changes to this policy
We may update this privacy policy from time to time. Significant changes will be communicated via email or a prominent notice on the platform. The "last updated" date at the top reflects the most recent revision.
Contact
For privacy-related questions or requests, contact us at [email protected].