Privacy notice

What this notice covers

This notice covers two products: the DayTwo mobile app, used by business owners, and DayTwo Insights, the web service used by staff at partner organizations.

It does not cover onow.ai. That is a separate website with its own privacy policy.

Who we are

ONOW Ascent Inc. operates DayTwo and DayTwo Insights. We are a company incorporated in Delaware, United States.

Nathan Temeyer is our data protection contact. To ask a question about your information, or to make a request about your rights, write to nathan@getdaytwo.com.

Who can use DayTwo

DayTwo is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that we have collected a child's information, we delete it.

What we collect

When you create an account, we collect a phone number or an email address, a name you choose, your language, your currency, and your country.

When you use DayTwo, we store the records you enter. A record can hold:

• an amount
• a date
• a category you choose
• the name of a person or a business
• your own notes
• a photo you attach

We also store the goals and the plans you set.

You decide what to enter. Some people enter business money only. Some people also enter household money.

When you talk to Bizzy, we store your messages and Bizzy's replies. We store them so that you can read them again. Bizzy also reads them to follow what you discussed.

To run DayTwo, we collect:

• your app version
• your device's operating system
• a code that lets us send notifications to your phone
• reports about faults in DayTwo, if your phone settings allow Apple or Google to send them

What we collect if you work at a partner organization

When you use DayTwo Insights, we collect your name, your work email address, the name of your organization, and a record of when you sign in and what you look at. We use these to run your account, to keep the service secure, and to show your organization who has access.

We also record which version of the partner agreement you accepted, and when.

Your organization decides who at your organization can see what. We do not.

When a DayTwo user shares records with your organization, your organization decides how it uses them. From that point your organization is responsible for those records under its own law, alongside us. The partner agreement sets out what your organization may and may not do with them.

The rest of this notice applies to you as well.

Why we use it

We use your account details and your records to run DayTwo and to show you your own information.

If you turn Bizzy on, we use your records and your messages to write Bizzy's replies.

If you turn on sharing with a partner organization, we show that organization your records for the dates you choose. The organization then decides how it uses what you shared. The organization may want to use your records to decide something about you, such as whether to lend you money. If so, the organization must tell you first. The organization must also ask your permission separately.

We use your app version, your device's operating system, and fault reports to keep DayTwo working and to fix faults. Fault reports reach us through Apple and Google. They carry no records and no conversations.

We do not sell your information. We do not use your information for advertising.

Where your information goes

Supabase stores your information. To see which country Supabase stores it in, read the list of companies linked at the end of this section.

If you turn Bizzy on, we send your records and your message to another company. That company writes the reply and processes your information in the United States. We pay for a service level that stops the company from using your information to train its systems.

Expo, Google, and Apple carry notifications to your phone.

We can change the companies we use. To see the current list, read the list of companies that process information for DayTwo. We keep that list up to date, and we tell our regulators when the list changes.

How long we keep it

We keep your records while your account is open. We keep them for 24 months after you last sign in, and then we delete them.

Apple and Google hold fault reports under their own terms. We do not store them ourselves.

If you delete your account, we delete your records within 30 days.

We keep a record of the permissions you gave and withdrew. That record lets us show what you agreed to and when you agreed to it.

Your choices

You choose whether Bizzy reads your records. DayTwo works without Bizzy. To turn Bizzy off, open Settings.

You choose whether a partner organization sees your records, and you choose which dates the organization sees. Sharing stays off until you turn it on. If you turn sharing off, the organization stops seeing your records.

You choose whether to receive notifications.

If you turn off any of these, your account stays open and your records stay.

Your rights

You can ask to see the information we hold about you. You can ask us to correct it. You can ask us to delete it. You can ask us to send you a copy that you can take elsewhere. You can withdraw any permission you gave us.

To make a request, write to nathan@getdaytwo.com. We reply within 30 days.

For help using DayTwo, read the help pages or write to hello@getdaytwo.com.

If you are in Kenya, you can complain to the Office of the Data Protection Commissioner. If you are in Rwanda, you can complain to the National Cyber Security Authority.

How we protect it

We encrypt your information while it travels and while we store it. We limit which people on our team can see records, and we log what they see.

No system is perfect. If someone sees your information who should not, we tell the regulator. If the risk to you is significant, we also tell you.

How we change this notice

If we change how we use your information, and the change affects you, we tell you in DayTwo before the change starts. If the change needs your permission, we ask you again.

To read a previous version of this notice, write to nathan@getdaytwo.com.