ourday ☀

Your family’s information

Privacy policy

Effective date: October 12, 2026

Ourday is a family planning app operated by Shailendra Yadav. Parents manage access; children use a parent-paired device. This policy describes the current private-testing version and this website.

Questions or data requests: ourday.dev@gmail.com.

Information the app uses

Why this information is used

Ourday uses this information to sign parents in, connect family devices, show each child their activities, sync changes, support family communication and diagnose service problems. It is not used for advertising or sold.

Children and parent control

Ourday is intended for use by children under a parent or legal guardian’s direction. An adult creates the family and chooses which children a paired device can access. Children do not create Google or email accounts through Ourday. Use a nickname if you prefer; dates of birth, school details and precise location are not required.

A parent or legal guardian must authorize their child’s participation. Parents can contact us to review, correct or request deletion of their child’s information, or stop further collection. We may ask for information needed to verify their authority over the family. Please do not send identity documents unless we specifically discuss a secure way to verify a request.

Who can access family information

Connected adult members share parent access to the family’s plans and activity. A paired child device receives information for its assigned children. A shared tablet can show more than one sibling’s profile. Keep invitation codes private and invite only people you trust.

Google Firebase and Google Cloud provide authentication, database, hosting and backend infrastructure; Firebase Crashlytics processes mobile crash diagnostics in builds that include it. Authorized maintainers may access information when needed for support, maintenance, security or a verified data request. Information may also be disclosed when legally required.

Photos, videos, voice notes and notifications

Earlier private-test versions included a local example mode that saved chosen photos and videos on the device or in browser storage. From version 0.1.1, this example mode is removed and its old local data is not loaded. In builds where the family creator enables Google Drive attachments, Ourday requests access only to files it creates in an Ourday folder in that parent’s Drive. The family creator grants this access in Parent space. Paired children and other parents can send and view those attachments through Ourday without signing into Drive. The selected photos, videos, voice notes and supported documents (PDF, Office, text and CSV files) are stored in the creator’s Drive, while attachment references and activity remain in Firebase. Ourday does not scan unrelated Drive files or create public links. Revoking Drive access stops new uploads and may prevent attachments from opening until the creator reconnects it; revocation does not delete files already in Drive. Drive attachments are disabled until the connection is enabled for the family.

Voice notes use the microphone after you choose to record. You can listen and retry before explicitly saving or sending; recordings are limited to one minute. Shared voice notes use the same private Drive access as other attachments. Dictation uses on-device speech recognition only on supported devices with an available speech language. Dictation audio is not uploaded by Ourday; the recognized text remains editable and follows the same save/send choices as typed text. Microphone and dictation controls are hidden when the required device capability is unavailable.

Android builds supporting notifications use Google Firebase Cloud Messaging directly when you enable alerts and grant device permission. We store the installation’s notification token, its family/account association, platform and delivery records to send family updates. From version 0.1.31, notification previews can include a child’s name, the task title and the replying parent’s name. You can hide names and task titles in Family settings on each device. Photos are not included. Message text stays out of alerts unless you explicitly turn on message snippets for that device in Family settings; the preview then may include a short part of a direct family message or reply. This choice is off by default and requires detailed previews to be on. Older builds keep generic wording. Lock-screen visibility follows your device settings. Daily family check-ins are on by default for new families and for existing families without a saved choice when a parent next opens the updated app online. A parent can turn these check-ins off in Family settings; device notification permission is still controlled by the operating system. You can turn alerts off in Ourday or device settings. Completed delivery records are scheduled for deletion after seven days. iOS push notifications are not yet enabled.

Planning shortcuts

Activity-title autofill runs locally, without sending prompts to an AI service. When a parent saves an activity, Ourday may store the last typed title, the local parser’s proposed fields, the saved title, date, time and child references, and the parser version in a separate private Firebase record. These records help us understand corrections and improve autofill. We do not record keystrokes or abandoned drafts, include attachments or message content, or send these inputs to general analytics. Access is limited to family parents and authorized maintainers. Records are scheduled for automatic deletion after 30 days; deletion processing can take additional time. Permanently deleting a child profile also removes the family’s temporary planning-input records.

Optional AI planning for parents

Eligible parents can choose to turn a written or pasted note into proposed activities. AI is unavailable in child views and paired child-device accounts. We ask for agreement before the first use and again after a material change to the provider or data flow. You can withdraw this permission in Family settings. Ordinary planning remains available.

Your in-app notice identifies the provider and processing region before you agree. Ourday can change the configured model without an app update; a change to the provider or data handling requires agreement to the updated notice. Our backend sends the note after masking known family names and detected contact details, the selected date, current date, timezone and substitute child labels. Masking may miss identifying information and is not a guarantee of anonymity; avoid unnecessary sensitive details. Photos, videos, audio, other attachments and historical family activities are not sent to the model. Ourday restores known profile labels for your review.

Requests are permitted only when the source-region Bedrock retention setting is none and model invocation logging is disabled. A failed privacy check blocks generation; we do not silently send the note to another provider. These model controls do not remove Ourday’s separate Firebase storage or the cloud providers’ technical service records.

Raw AI notes are not deliberately saved in analytics or request records. Generated drafts are temporarily stored in private Firebase records for reliable retries, expire for access after 24 hours, and are scheduled for automatic deletion; deletion processing can take additional time. Your saved activities follow the ordinary family-record retention policy. We record your agreement version, family allowance counters and technical metrics such as success/failure, latency and token counts, without note or draft text in diagnostic logs. Your family shares 10 AI generations per local day; technical failures do not consume that allowance. Check proposed children, dates and instructions before saving; AI can make mistakes.

Optional device unlock

On a parent’s shared device, a parent may enable the phone’s screen lock to open Parent space after confirming their existing Ourday PIN. Authentication is performed by the operating system. Ourday receives only the result, not fingerprints, face data or the device passcode. The choice stays on that device and can be turned off in Family settings. Do not enable it if a child can unlock that phone and should not have parent access.

Provider and model details

The link in your AI notice opens the relevant entry below. These are supported integrations, not a statement that all are enabled. Switching models does not silently bypass privacy checks or send a failed request to another provider.

AWS Bedrock · Meta Llama 3.3 70B

Processing: United States (Northern Virginia, Ohio or Oregon). Ourday checks source-region retention mode none and that model invocation logging is disabled before sending a note.

AWS Bedrock · Amazon Nova Pro

Processing: Sydney, Australia. This route requires its privacy configuration and real-data approval before use with family information.

AWS Bedrock · OpenAI GPT-6 Luna

Processing: the configured global inference regions, which may change. This route requires model-specific zero-retention eligibility and regional retention/logging checks; account retention alone does not establish eligibility.

OpenAI API · GPT-6 Luna

Processing: the OpenAI project's configured service regions. Use with real family information requires approved Zero Data Retention for that project. A fictional-data-only trial is not approval for real family data.

For every route, only parents use AI, generated activities need review, the family's daily allowance is shared, and permission can be withdrawn in Family settings. Provider controls do not remove Ourday's temporary draft storage or technical service records described above.

Storage and security

Connected family records are stored using Firebase. The primary Firestore database is configured in Mumbai, India; authentication, hosting, support and other provider operations may process information in other locations. Access rules restrict connected family data by membership and device assignment. No online service can guarantee absolute security.

Any plans and media from the earlier example mode remain in local app or browser storage. Removing the app or clearing that storage can remove these local copies. Signing out or uninstalling does not by itself delete connected-family records.

Retention, access and deletion

Connected account and family records are retained while the family uses the service until removed through a verified request or service maintenance. There is no automatic expiry for the family’s plans and activity. Technical logs and provider backups may follow separate provider retention schedules.

Self-service account deletion is not yet available. To request access, correction, export or deletion, email ourday.dev@gmail.com from your parent sign-in address and describe the request. We will verify the request and explain its scope, including effects on shared family records and any records that must be retained for legal or security reasons.

This website

This website has no advertising, analytics scripts, sign-in forms or tracking cookies added by Ourday. Firebase Hosting processes requests needed to serve the pages. If you email us, we receive your email address and the contents of your message.

Your choices and changes

You can stop using Ourday, manage device permissions, or request deletion. Google account permissions can also be managed in your Google account settings; revoking access does not automatically delete data already stored in Ourday.

Material changes will be reflected on this page with a revised effective date. See Google’s privacy policy for information about Google’s own processing.