Privacy Policy

This policy explains what Toodday collects, why, and who else touches it. Toodday is operated by VICA Technology. Questions or requests: support@toodday.com.

1. What we collect

• Account details — your email address, and your name and profile details if you sign in with Google. Handled by our authentication provider, Clerk.
• Your timezone, used to decide when your scheduled days begin and end.
• Commitment data — the habit names you type, the days you schedule, and the stake amounts you set.
• Activity — your check-ins, missed days, disputes, and pauses, with their dates.
• Payment references — the identifiers Stripe gives us for your customer record and saved payment method, plus a record of each fee we charge (amount, date, outcome).

2. What we never see or store

We do notreceive or store your full card number, expiry date or security code. Card details are entered on Stripe’s own payment pages and held by Stripe. We only ever hold references that let us ask Stripe to charge the card you authorized.

3. Who processes your data

• Clerk — authentication: your account, sign-in, and session.
• Stripe — payments: card storage, charges, the subscription, and the billing portal.
• Cloudflare — hosting and the database that stores your commitments and activity.

These providers process data on our behalf under their own terms. We do not sell your personal data, and we do not share it with advertisers.

4. Where your data is held

Your Toodday data is stored on Cloudflare infrastructure with its primary region in North America. Our providers operate globally, so your data may be processed in countries other than where you live.

5. Cookies

We use only what the service needs to work: session cookies set by Clerk to keep you signed in, and cookies set by Stripe during payment. We do not use advertising or cross-site tracking cookies.

6. How we use your data

• To run your commitments — scheduling days, recording check-ins, and calculating streaks and misses in your timezone.
• To charge the accountability fees and subscription you authorized.
• To show you your history, and to contact you about your account.
• To keep the service secure and to meet our accounting and legal obligations.

7. How long we keep it

We keep your account and commitment data while your account exists. Records of payments we have charged are kept longer where we need them for accounting, tax and dispute-handling purposes, even after an account is deleted.

8. Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and its data. Write to support@toodday.com and we will respond within a reasonable time. Depending on where you live you may have additional rights under local data-protection law, and you may have the right to complain to your local regulator.

Deleting your account does not reverse fees already charged, and does not remove records we are required to retain.

9. Children

Toodday is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has an account, contact us and we will remove it.

10. Changes

We may update this policy. The date at the top shows when it last changed, and we will make a reasonable effort to tell you about material changes.

11. Contact

Toodday is operated by VICA Technology. For any privacy question or request, write to support@toodday.com.