Privacy Policy
Last updated: 31 March 2026
The Daily Canon is built to be used, not to harvest data. We don't run ads, we don't sell your information, and we don't use third-party analytics or tracking SDKs. This policy explains what we do collect and why.
Account information
When you create an account using Sign in with Apple, Google, or a magic link, we receive your name and email address from the authentication provider. Your name is used as your display name within the app (you can change it at any time). Your email is used for account recovery and, if you opt in, occasional updates about The Daily Canon.
Reading activity
To power features like streaks, badges, reading stats, and your personal reading list, we store your reading activity. This includes which works you mark as read, which works you save to your reading list, your visit dates, and your personal rankings. This data is tied to your account, protected by row-level security, and is never shared with third parties.
Push notifications
If you enable push notifications, we store your device token (provided by Apple's Push Notification service), your timezone, and your preferred notification time and frequency. This information is used solely to deliver your daily notification at the right time. You can change your preferences or disable notifications at any time in Settings.
Bloomy (AI companion)
Bloomy is powered by Anthropic's Claude API. When you use Bloomy, your conversation history and a summary of your reading activity (works read, reading list, and rankings) are sent to Anthropic to generate responses. Anthropic does not use this data to train its models. Your conversation history is stored in our database so you can return to it. Bloomy is a premium feature and is not used unless you choose to open it.
Subscriptions and payments
If you subscribe to Daily Canon+, your payment is processed entirely by Apple through the App Store. We never see or store your payment details. Subscription status is managed by RevenueCat, which receives your app user ID and subscription entitlement. RevenueCat does not receive your name, email, or reading data.
Hosting and infrastructure
The app is hosted on Vercel. Your account data is stored in Supabase (database and authentication). We use Upstash Redis for caching to improve performance. Standard server logs (IP addresses, request timestamps) may be recorded by our hosting providers as part of normal operations.
What we don't do
- We don't use advertising or social media SDKs.
- We don't use third-party analytics platforms.
- We don't sell or share your data with advertisers.
- We don't use cookies for tracking purposes.
Deleting your data
You can permanently delete your account and all associated data at any time from Settings > Advanced > Delete Account. This removes your profile, reading history, conversations, badges, and all other data from our systems. You can also email us to request deletion.
Children's privacy
The app does not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Changes to this policy
If this policy changes, the updated version will be posted here with a revised date.
Contact
Questions about this policy can be sent to hellodailycanon@gmail.com