Privacy Policy

Effective date: August 31, 2026
Last updated: August 31, 2026

DayDeck (“DayDeck,” “we,” “us,” or “our”) is the daily focus app for Bay Mode, operated by Stitch Hospitality LLC. This Privacy Policy explains what information we collect when you use DayDeck, how we use it, and the choices you have. Questions: chris@stitchhospitality.com.

Who we are

DayDeck is a personal productivity web application (tasks, calendar, notes, and a focus timer). It is provided by Stitch Hospitality LLC. The marketing site is baymode.co. The app itself is at app.baymode.co.

Information we collect

1. Google account information.
When you sign in with Google, we receive basic profile information from your Google account — your name, email address, and profile picture. We use this solely to create and secure your DayDeck account and to identify you when you sign in.

2. Google Calendar (read-only).
If you connect your calendar, DayDeck requests the OAuth scope https://www.googleapis.com/auth/calendar.readonly. See Google sign-in and Calendar access below.

3. Content you create in DayDeck.
The tasks, notes, and focus sessions you enter are stored so the app can show them back to you across sessions and devices.

We do not collect payment card numbers. If DayDeck offers paid features, payments will be handled by a third-party processor and this policy will be updated to name it.

Google sign-in and Calendar access

DayDeck uses Google sign-in so you can create and secure an account with your Google identity (name, email address, and profile picture).

To show your existing schedule next to your tasks, DayDeck also requests this OAuth scope:

https://www.googleapis.com/auth/calendar.readonly

That scope is used only to display events from your primary Google Calendar inside DayDeck. DayDeck does not write to your calendar, does not read other Google services (Gmail, Drive, Contacts), and does not use calendar data for advertising.

Calendar events are fetched in your browser with a short-lived Google access token. Tokens are used client-side. DayDeck does not store Google Calendar event data for advertising, does not sell it, and does not share it with advertisers.

You can disconnect Google Calendar at any time by signing out of DayDeck, or by revoking DayDeck’s access in your Google Account permissions at myaccount.google.com/permissions. After you disconnect, DayDeck can no longer read your calendar.

How we use your information

We use the information above only to:

authenticate you and keep your account secure;
display your primary calendar events in DayDeck;
store and display the content you create;
operate, maintain, and improve DayDeck;
respond to your support requests.

We do not sell your personal information, and we do not use it for advertising.

Google user data — Limited Use

DayDeck’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google account and Calendar data we receive is used only to provide and improve DayDeck’s sign-in and calendar-display features, is never sold, is never used for advertising, and is never shared with third parties except as needed to operate the service (see Service providers below) or as required by law.

Service providers

We rely on a small number of third-party providers to run DayDeck. They process data only on our behalf and only to provide their service:

Google — authentication (Google Sign-In) and read-only Calendar API access as described above.
Supabase — database and authentication infrastructure. Your account and the content you create are stored in Supabase’s United States (US-East) region.
Vercel — application hosting and content delivery.

We do not use any third-party analytics, advertising, or tracking services beyond what is required to operate the service through the providers listed above.

Data storage and security

Your account and the content you create are stored in the United States via Supabase. Google Calendar events are fetched in the browser and are not stored for advertising. We use industry-standard measures, including encrypted connections (HTTPS) and access controls, to protect your information. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.

Data retention and deletion

We keep your account information and content for as long as your account is active. You can request deletion of your account and associated data at any time by emailing chris@stitchhospitality.com, and we will delete it within a reasonable period, except where we are required to retain it by law.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you. To exercise any of these rights, email chris@stitchhospitality.com. Because DayDeck signs you in through Google and stores only what you enter, most of your data is already visible to you inside the app.

Children

DayDeck is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice. Continued use of DayDeck after a change means you accept the updated policy.

Contact

Stitch Hospitality LLC
Email: chris@stitchhospitality.com