A clear look at the information dueday uses, why it is needed, and how you can manage it.
01Who we are
dueday.ai is operated by ENJOYN PTE LTD (UEN: 202636553M) in Singapore. This Privacy Policy explains how we handle personal data when you visit our website, use our Telegram personal assistant, contact us, or choose to connect a supported calendar.
For privacy enquiries, access or correction requests, withdrawal of consent, or requests to delete your data, contact our privacy contact at support@dueday.ai. Requests are handled by the operator on behalf of ENJOYN PTE LTD. We may need to verify your identity before acting on a request; please do not send passwords or access tokens.
02Information we process
- Telegram account information: your Telegram user and chat identifiers, username and first name when supplied by Telegram, and your access or onboarding status.
- Your requests and plans: messages sent to the bot, task and event titles, dates, times, links you provide, recurring schedules, deadlines, completion status and reminder responses.
- Preferences and usage: timezone, daily-overview settings, reminder state, feature usage counts and relevant operational or error information.
- Support information: your email address, correspondence and details you choose to include when asking for help.
- Website and connection information: technical request information, such as IP address, browser information, timestamps and security-related records, processed by our hosting and infrastructure providers.
When you include someone else's information in an event or message, only share information you are entitled to use for that purpose. Avoid sending passwords, financial account credentials or unnecessary sensitive information.
03How we use information
We use information to understand your requests; save and organise plans; deliver reminders and daily overviews; answer questions about your schedule; manage access and preferences; provide support; and keep the service reliable and secure.
We process personal data with your consent where required, or on another basis permitted by applicable law. Providing the information needed for a feature is optional, but that feature may not work without it. We do not sell your personal data or use your calendar contents for targeted advertising.
04Google Calendar connections
Optional integration: this section applies if Google Calendar connections are available to you and you choose to enable them. Connecting is not required to use dueday's local planning features. Availability may differ between testing and public versions.
With your Google authorisation, we access your Google account identifier and email address, your calendar list and access permissions, and events in the calendars you select. You can connect separate Google accounts and select calendars from each.
We use this access to show your selected calendars in dueday and, when you request it, create, update or remove Google events. Read-only calendars cannot receive changes. Google's event permission is broader than a single selected calendar; dueday uses your in-app selections to determine which calendars it works with.
The integration stores authorisation tokens and caches event identifiers, titles, start and end times, event types, recurrence-instance information and synchronisation metadata. It does not request Gmail inbox access or use Google Calendar access to read your email. This calendar integration does not cache attendee lists or event descriptions.
Calendar details may appear in Telegram replies and may be processed by our AI provider when needed to answer your calendar questions. Changes to shared events can be visible to other calendar participants, and Google may notify invited guests. Existing dueday events are not automatically copied into Google merely by connecting an account; any separate export feature requires its own action and confirmation.
You can disconnect an account through /connect when that feature is available, or revoke Google's authorisation from your Google Account connections. A dueday disconnect removes that connection's stored credentials and cached events from the active integration database; it does not delete events already stored in Google, your other connected accounts, or unrelated local dueday records. Backup and provider retention are explained below.
05AI processing and Google’s Limited Use rules
dueday uses Anthropic's API to interpret requests and answer questions. The relevant message, scheduling context and, where necessary, selected task or calendar details are sent to Anthropic to produce a response. This is processing for your requested feature, not a private on-device calculation. AI responses can be inaccurate.
We do not use data obtained through Google Workspace APIs to develop, improve or train general-purpose or non-personalised AI or machine-learning models. We do not authorise our AI providers to use that Google data for those purposes.
We handle and share information received from Google APIs in accordance with the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements. Such data is used for the user-facing features described here, not advertising, sale or unrelated profiling.
Human access to Google user data is restricted to the circumstances permitted by those policies, such as your specific agreement to view particular information for support, security investigations or legal obligations. We do not routinely read calendar contents for unrelated purposes.
06Service providers and disclosures
We use the following services to deliver dueday:
- Telegram carries messages, bot interactions and notifications under its own platform policies.
- DigitalOcean provides hosting for the bot and its stored data.
- Cloudflare provides website hosting and domain or network services.
- Anthropic processes the information needed for AI-assisted features.
- Google provides optional Calendar authorisation and calendar services, and our support email service.
We share information needed for those functions, and may disclose information where legally required or necessary to address fraud, abuse or security incidents. Disclosures of Google data remain subject to Google's applicable restrictions. Providers also have their own policies and retention arrangements; disconnecting dueday does not delete your Telegram or Google account.
Processing may take place outside Singapore. Where we transfer personal data internationally, we are responsible for using safeguards required by applicable law, including the Singapore Personal Data Protection Act's transfer requirements.
07Security
We use reasonable technical and organisational safeguards appropriate to the data and service. The Google connection design uses HTTPS, encrypted stored authorisation tokens, account-specific access checks and a confirmation step in Telegram before linking an account. We do not receive or store your Google password.
Token encryption is not the same as encrypting all stored data: event contents and account details in the bot database are not protected by the token-encryption key. dueday is not an end-to-end encrypted storage service. No internet service can guarantee absolute security. Keep your Telegram and Google accounts secure and report suspected unauthorised access to support@dueday.ai.
08Retention and deletion
We retain personal data for as long as it is needed to provide the service and for legitimate business or legal purposes. Finishing a task or removing an item from your visible schedule does not necessarily erase every associated database record. Local records do not currently have an automatic age-based deletion schedule.
To request deletion of your dueday account data, email support@dueday.ai. We will review the request, verify ownership where needed, and explain any information that must be retained and why. Withdrawing consent may mean we can no longer provide the affected features. /removeall is not a complete account-deletion or Google-permission-revocation command.
We use daily DigitalOcean backups for recovery. Copies may remain until those backups are securely overwritten or expire. Manual server snapshots, if taken, remain until separately deleted. Deletion from active systems is therefore not a promise of immediate removal from every backup. Contact us for the retention arrangements applicable to your request.
Anthropic's standard API retention is normally up to 30 days for inputs and outputs. Longer retention can apply under its service-specific, safety, legal or contractual exceptions; we do not claim zero data retention. See Anthropic's retention information. Other service providers may also retain data under their own contractual or legal requirements.
09Your choices and rights
You can change supported reminder and overview settings, choose whether to connect a calendar, and stop sending information to the bot. You may request access to or correction of personal data we hold, ask about its use or disclosure, withdraw consent, or raise a privacy concern by emailing support@dueday.ai.
We handle requests in accordance with applicable law, including any permitted exceptions and identity checks. If an issue is not resolved with us, you may contact Singapore's Personal Data Protection Commission or another competent data-protection authority.
10Website, cookies and third-party links
These website pages serve their own fonts and brand assets and do not require an advertising cookie to read them. Hosting, security services and linked platforms may process technical information or use their own cookies. When Google sign-in is available, a short-lived security cookie is used to help protect that connection flow.
Links to Telegram, Google and other providers take you to services governed by their own policies. We will update our disclosures and obtain consent where required before introducing non-essential tracking that needs it.
11Changes and contact
We may update this policy as the service and our practices change. We will update the date on this page and provide additional notice or seek consent where required for material changes. Future paid features may require additional billing disclosures before launch.
ENJOYN PTE LTD · Singapore
UEN: 202636553M
Privacy enquiries and support: support@dueday.ai