Privacy policy

Who is responsible

SaveYourDay is operated by Epir AB, reg. no. 556794-9887, Heljeredsvägen 30, 428 37 Kållered, Sweden. We are the controller of the personal data described here. Send questions to info@saveyourday.com.

What we process

• Account: first name, last name, email address, language, reminder and newsletter settings, and your password (stored only as an encrypted hash).
• Content you add: lists, tasks, comments, tags, contexts, dates and emails you send to SaveYourDay to create tasks.
• Purchases: what you bought, amount, date, Premium period, Stripe's payment references and your statement that you buy as a consumer in the EU. Card details are handled only by Stripe and never reach us.
• Technology and security: sign-in sessions with timestamps, and protection against sign-in attempts where email and IP network are stored only as encoded keys.

Why, and on what legal basis

• To provide the service under the terms of use (contract, Art. 6(1)(b) GDPR).
• To complete and account for purchases (contract and legal obligation, Art. 6(1)(b) and (c)).
• To protect the service against abuse and intrusion (legitimate interest, Art. 6(1)(f)).
• Daily reminders and newsletters are sent only if you turn them on in Account settings, and you can turn them off at any time.

Who receives the data

We never sell data and show no advertising. These providers process data on our behalf under data processing agreements:

• Microsoft (Azure): hosting and database in data centres within the EU.
• Microsoft 365: email sent from and to SaveYourDay.
• Stripe: payments. Stripe may transfer data to the United States under the EU-US Data Privacy Framework and standard contractual clauses.

How long we keep data

• As long as you have an account. When you delete your account it is closed immediately and all content is permanently erased within 180 days.
• Accounts that have not been used for 3 years are deleted the same way. We email you first, and if you sign in and change a task within a month the account stays. An account that was only tried during its first week, with at most five tasks of its own and no payment, is erased without notice. Accounts with an active Premium period are not deleted.
• Accounts that are never verified are deleted after 7 days.
• Sent emails are logged for 30 days, deletion warnings for 90 days. Backups are overwritten within 35 days.
• Payment records are kept by Stripe and in our accounts for 7 years as required by Swedish bookkeeping law.

Your rights

You have the right to access, correct, erase and move your data, and to object to or restrict processing. Download all your content under Account settings → My data, change your details in Account settings and delete your account there. For anything else, contact us.

You can lodge a complaint with the Swedish Authority for Privacy Protection (imy.se) if you think we process your data incorrectly.

Cookies

We use only one necessary cookie for signing in and store a few display settings in your browser. We use no cookies for statistics or marketing.