Privacy Policy

1. Introduction

This Privacy Policy explains how SG Block LLC ("Company," "we," "us," or "our") collects, uses, stores, and protects information when you use DayPrism, a macOS desktop application ("Application" or "Software"). By downloading, installing, or using DayPrism, you agree to the practices described in this Privacy Policy.

DayPrism is designed with privacy as a core principle. Your data stays on your Mac. We do not operate servers that receive, store, or process your personal data. However, you should understand how DayPrism interacts with your local data and third-party services.

2. Information We Do NOT Collect

To be explicit about our privacy-first design:

• No Telemetry: DayPrism does not collect usage analytics, crash reports, or telemetry data.
• No Server Communication: DayPrism does not transmit data to servers owned or operated by SG Block LLC.
• No Account Required: DayPrism does not require you to create an account with us.
• No Tracking: DayPrism does not include advertising trackers, analytics SDKs, or fingerprinting technologies.

3. Information Accessed Locally

DayPrism accesses the following data sources stored on your Mac to provide its functionality. This data never leaves your device except as described in Section 5.

3.1 Messages and Communications

• Apple iMessage: DayPrism reads your iMessage database located at ~/Library/Messages/chat.db to retrieve recent messages. This requires Full Disk Access permission.
• WhatsApp (Native): If installed, DayPrism reads the WhatsApp database from ~/Library/Containers/com.whatsapp/. This requires Full Disk Access permission.
• WhatsApp Web: Optionally, DayPrism can use browser automation to read messages from WhatsApp Web using your existing session.

3.2 Meeting Transcripts

• Granola: If you use Granola for meeting notes, DayPrism reads cached transcripts from ~/Library/Application Support/Granola/.

3.3 Contacts

• macOS Contacts: DayPrism reads your Contacts database to match phone numbers and email addresses to names, improving the quality of briefings.

3.4 Locally Cached Data

DayPrism stores processed data locally in the following locations:

• ~/.dayprism/evidence_store.db - SQLite database containing parsed messages, emails, and events
• ~/.dayprism/output/ - Generated briefings and summaries
• ~/.dayprism/logs/ - Application logs (stored locally only)
• ~/Library/Application Support/DayPrism/ - Application settings and preferences

4. Third-Party Services You Connect

DayPrism allows you to connect to the following third-party services using OAuth 2.0 authentication. When you authorize these connections, DayPrism retrieves data from these services:

4.1 Google Services

• Gmail: Emails from your inbox (primary label), sent emails, and email metadata
• Google Calendar: Calendar events, attendees, and event details

OAuth tokens are stored locally at ~/.dayprism/google_token.json and in your macOS Keychain. You can revoke access at any time through your Google Account settings.

4.2 Microsoft Services

• Outlook Mail: Emails and email metadata
• Outlook Calendar: Calendar events and meeting details

OAuth tokens are stored locally at ~/.dayprism/outlook_token.json. You can revoke access through your Microsoft Account settings.

5. Data Transmitted to AI Services

IMPORTANT: To generate briefings, DayPrism sends your data to best-in-class third-party AI services. This means your data leaves your device and is processed by these third parties according to their respective privacy policies. Your data is never sent to DayPrism servers.

5.1 Anthropic (Claude API)

DayPrism sends structured data (emails, messages, calendar events, meeting notes) to Anthropic's Claude API to generate briefings and answer queries. Review Anthropic's privacy practices at anthropic.com/privacy.

Data sent includes: Email subjects, bodies, senders, timestamps; message content and participants; calendar event details; meeting transcripts and summaries.

5.2 Google (Gemini API)

DayPrism uses Google's Gemini API to parse and structure raw data before briefing generation. Review Google's AI privacy practices at ai.google.dev/terms.

5.3 Your Control Over AI Data Transmission

• You can review what data sources are enabled in DayPrism settings.
• You can disable specific data sources to exclude them from AI processing.
• API calls are made directly from your device to these AI services.
• Your data is never routed through or stored on DayPrism servers.

6. macOS Permissions Required

DayPrism requires the following macOS permissions to function:

You can modify these permissions at any time in System Settings > Privacy & Security.

7. Data Retention

7.1 Local Data

Data cached by DayPrism remains on your device until you delete it. You can delete all DayPrism data by removing:

• ~/.dayprism/ (all cached data, tokens, and outputs)
• ~/Library/Application Support/DayPrism/ (settings)

7.2 Third-Party Services

Data retention by Anthropic, Google, and Microsoft is governed by their respective privacy policies. We recommend reviewing their data retention practices.

8. Data Security

DayPrism implements the following security measures:

• Keychain Storage: OAuth tokens and credentials are stored in the macOS Keychain, Apple's secure credential storage system.
• OAuth 2.0: Industry-standard authentication for Google and Microsoft services.
• Local Processing: Data aggregation and processing occurs on your device.
• HTTPS: All API communications use encrypted HTTPS connections.
• No DayPrism Servers: Your data is never transmitted to servers owned or operated by SG Block LLC.

However, no software is perfectly secure. By using DayPrism, you acknowledge that you are responsible for securing your device.

9. Children's Privacy

DayPrism is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has used DayPrism, please contact us.

10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information is collected. As described above, DayPrism does not transmit personal data to our servers.
• Right to Delete: You can delete all local data by removing the directories listed in Section 7.1.
• Right to Opt-Out: DayPrism does not sell personal information.
• Non-Discrimination: We do not discriminate against users who exercise their privacy rights.

To exercise any rights regarding data transmitted to third-party AI services, contact those providers directly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice on the DayPrism website
• Including a notice in Application release notes

Your continued use of DayPrism after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or DayPrism's privacy practices, contact us at:

SG Block LLC
Email: privacy@dayprism.com

13. Summary