Privacy Policy

Last updated: November 10, 2026

Bank of Todays ("we", "our", or "us") is built by Dreamstinct. This Privacy Policy explains what information we collect, how we use it, and how we protect it. We believe your deposits are private — we design accordingly.

1. Information We Collect

We collect only what is necessary to provide the service:

Account information: Your name and email address when you sign in with Apple or Google.
Deposits: The content you write in the app (wins, emotions, lessons, gratitude, photos). This is your private data.
Profile picture (optional): If you choose to set a profile picture, it's stored on our servers for any signed-in account, free or Pro, so it displays consistently across your own sessions. This is separate from your deposit photos, which stay local-only unless you're on Pro.
Health data (optional): Step count, sleep duration, and mindful minutes — only if you enable HealthKit integration. This data is never shared with third parties and is never used for advertising.
Usage analytics: Anonymous event data — for example, how many of a deposit's fields you fill in, the character count of what you write (never the text itself), and which features you use — collected for every account, free and Pro alike, to help us improve the app. No personal content is ever included.
Device information: iOS version and device type, collected automatically for crash reporting and compatibility.
Reflection time card (optional): If the daily reminder and the "Reflection time card" switch in Notifications are on, we store a device notification token, your reminder time, your time zone, whether you've banked today, and when the app was last opened, so we can show a card on your Lock Screen after your reminder. It never includes the content of your deposits. Turn the switch off, sign out, or delete your account and it is removed.
AI Insights (Pro, optional): When you ask for an AI Insight on a weekly or monthly Statement, the text of the reflections you banked for that period is sent to our AI provider to generate the insight. Your name, account, and photos are never included. This only happens when you tap "Get AI insights" and agree to the one-time prompt.

2. How We Use Your Information

To sync your deposits across your devices (Pro subscribers only)
To restore your subscription and manage billing — you can view or cancel your subscription anytime from Profile → Plan Details → Manage Subscription, or from your Apple ID Settings
To improve the app based on anonymous usage patterns
To respond to support requests

We do not sell your data. We do not use your deposit content for advertising. We do not share your personal information with third parties except as described below.

3. Third-Party Services

Supabase — Secure cloud database for syncing deposits (Pro only). Data is stored encrypted. Supabase Privacy Policy
PostHog — Anonymous product analytics (feature usage, not content). PostHog Privacy Policy
Adapty — Subscription and in-app purchase management. Adapty Privacy Policy
Sentry — Crash and error reporting (diagnostics, not content). Sentry Privacy Policy
OpenAI — When you request AI Insights on a weekly or monthly Statement, the text of the reflections you banked for that period is sent to OpenAI to generate the insight. Your name, account, and photos are never included. OpenAI does not use this data to train its models and retains it only briefly for abuse monitoring. OpenAI Privacy Policy
Apple Push Notification service — Delivers the Lock Screen reflection card to your device. Apple receives your device notification token to do so. Apple Privacy Policy
Apple Sign In / Google Sign In — Authentication only. We receive your name and email from your provider.

4. HealthKit

If you enable Health integration, Bank of Todays reads step count, sleep data, and mindful minutes from Apple Health. This data is used only to enrich your daily deposits. It is never sold, shared with advertisers, or used for any purpose other than displaying it within your own deposits. You can disable this at any time in the app's Profile tab.

5. AI Insights

AI Insights is a Pro feature that looks at a whole week or month of your reflections and surfaces recurring patterns. It runs only when you tap "Get AI insights", and the first time you do, the app asks you to agree. When you generate an insight, the text of the reflections you banked for that period is sent to our AI provider (currently OpenAI) for analysis. Your name, account, and photos are never sent. The provider does not use this text to train its models and retains it only briefly for abuse monitoring. Generated insights are stored on our servers alongside your synced deposits and are removed under the same retention rules.

6. Data Storage and Security

Free (Basic) users' deposits are stored only on their device using Apple's SwiftData framework. Pro users' deposits are additionally synced to Supabase servers using row-level security — only you can access your data. Photos are stored in a private Supabase storage bucket.

7. Cloud Backup Retention After Cancellation

If you cancel or your Pro subscription lapses, syncing stops immediately, but your already-synced deposits and photos remain on our servers for 30 days — giving you a window to resubscribe without losing anything. If you don't resubscribe within that window, your synced deposits and deposit photos are automatically and permanently deleted from our servers. This does not affect your account, your profile picture, or anything saved on your own device — those are untouched regardless of subscription status. There is currently no in-app way to export your synced deposits before this deletion; the only way to retrieve them afterward is to still have them on the original device where they were created. This is separate from the account-deletion process described below, which removes everything at your request.

8. Data Retention and Deletion

You can delete your account and all associated data at any time in the app (Profile → Delete account), or by contacting us at [email protected]. This is a full, immediate deletion of your account, profile, and all deposits — different from the automatic 30-day cloud backup retention described above, which only ever applies to synced deposit content after a Pro subscription lapses. We will delete your data within 30 days of your request. Local data on your device can be deleted by uninstalling the app.

When you delete a single day, it is kept in Recently deleted for 30 days so you can restore it, on your device and, for synced days, on our servers. After 30 days it is permanently deleted.

9. Children's Privacy

Bank of Todays is not directed at children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Questions about this Privacy Policy? Contact us at [email protected].