Privacy Policy
This policy describes what Day Triage collects, where it is stored, and who it is shared with. Day Triage is published by Arandur Accounting Ltd (United Kingdom).
The short version
- Day Triage stores your tasks, workstreams, and email or chat snippets only on your devices (local SwiftData, and your private iCloud database once CloudKit sync is enabled).
- Day Triage sends content you explicitly choose to classify to Anthropic (the maker of Claude) using your own API key. Anthropic does not train on your content.
- Day Triage connects directly to Gmail, Outlook, and Slack on your behalf, using only the read scopes those services require. OAuth tokens live in the device Keychain and never reach Arandur's servers.
- Arandur Accounting Ltd does not operate any user-data backend, log your content, or have visibility into your inbox.
Data we store
| Data | Where | Why |
|---|---|---|
| Triaged tasks, workstreams, linked items, follow-ups | On-device SwiftData store; syncs to your private iCloud database when enabled | Core app functionality |
| Calendar events (when a calendar source is connected) | Read in-memory only — never persisted to the on-device store, never sent to Anthropic | Free-time gap calculation, "today's meetings" line, next-slot lookup |
| Scheduled-event ID (when you schedule a task as a calendar block) | On-device, on the originating task; syncs to your private iCloud database when enabled | So a future "open in calendar" affordance can find the event again |
| OAuth refresh tokens (Gmail, Outlook, Slack) | Device Keychain, per service | Re-authorising without prompting |
| Your Anthropic API key | Device Keychain | Sending content to Claude for classification |
| Rejected-classification events | On-device, for possible future tuning | Opt-in, never leaves your device |
| Crash reports (if you enable diagnostics) | Apple's anonymised MetricKit pipeline | Fixing real-world crashes |
We do not run a user-data backend. Our OAuth broker (api.daytriage.com) is a thin Cloudflare Worker that holds only short-lived CSRF state (no more than 10 minutes) and Slack event queue entries (no more than 7 days) before the app drains them.
What we send to Anthropic
When you use Paste to triage or Refresh with a connected source, Day Triage sends:
- The pasted text, email body, or Slack message
- Your current workstream names and descriptions (for context)
- A list of your most recent triage decisions (for pattern-matching)
Anthropic receives this via your own API key. Per Anthropic's Commercial Terms, API traffic is not used to train their models.
Third-party services
| Service | Scope | Why |
|---|---|---|
| Anthropic Claude API | Customer-managed API key | Classification and nudge drafting |
| Google APIs (Gmail + Calendar) | gmail.readonly, calendar.events | Fetching unread inbox + sent-mail follow-up scan; reading calendar for free-time + creating calendar blocks for scheduled tasks |
| Microsoft Graph | Mail.Read, User.Read, Chat.Read, Tasks.Read, Calendars.Read, Calendars.ReadWrite, offline_access | Outlook mail, Teams chat, To Do tasks, Calendar (read availability + create blocks for scheduled tasks) |
| Slack Web API | app_mentions:read, channels:history, reactions:read and a few others | Capturing slash-command, @mention, and :triage: events |
| Apple iCloud (CloudKit) | User's private database only | Cross-device sync |
| Apple App Store (StoreKit 2) | Subscription receipt | Day Triage Pro entitlement and renewal status. Apple holds the receipt; we never see your payment details. |
Data retention and deletion
- Disconnect any source from Settings to revoke its tokens and wipe its linked items locally.
- Delete the app to wipe all local data. iCloud data for this app is removed by Apple's standard process when you delete the app on your last device or sign out of iCloud.
- Contact support@arandur-accounting.co.uk if you need help scrubbing data.
Legal basis (UK GDPR)
Processing is necessary for the performance of the contract you enter into when you install and use the app. For diagnostics we rely on your consent (opt-in).
Children
Day Triage is rated 4+ but is built for professional workflows and not directed at children. We do not knowingly collect data from children under 13.
Changes to this policy
If the policy changes materially, we'll update the date at the top and post the change in the app's release notes. Continued use after the update constitutes acceptance.
Contact
Arandur Accounting Ltd
hello@arandur-accounting.co.uk
arandur-accounting.co.uk