Your data, handled with care.

This Privacy Policy explains how The Daybreak Digest (“we,” “us,” the “Service”) collects, uses, shares, and protects information when you use thedaybreakdigest.online and the morning email it sends. By creating an account or using the Service, you agree to this Policy.

1. Information we collect

• Account information: your email address, an optional username, and a password (stored only as a salted hash by our auth provider — we never see it).
• Preferences: the topics you enable, and optional personalization — city/ZIP for weather and local news, stock tickers, subreddits, industries, sports teams, delivery time, and timezone.
• Service records: the digests we’ve generated for you (archived so you can re-read them), the date we last sent one, and operational/cost logs (counts of API calls and tokens used to produce your digest).
• Payment information (future): if and when we offer paid plans, payments will be processed by Stripe. We do not collect or store your full card number — Stripe does. We retain only non-sensitive billing metadata (e.g., plan, status, last four digits, billing email).
• Technical data: standard server logs and the authentication cookie that keeps you signed in. We do not use third-party advertising or analytics trackers, and we do not put tracking pixels in the email.

2. How we use your information

• To build and deliver your personalized morning digest and (optionally) its audio version.
• To operate, secure, debug, and improve the Service.
• To communicate with you about your account or important changes.
• If you opt into paid features: to process payments and manage your subscription.

3. AI processing

Your digest is written by AI. To produce it we send the fetched news/market data, your selected topics, and your chosen name/greeting to Anthropic (Claude). Audio versions are generated by sending the digest script text to OpenAI for text-to-speech. These providers process that content to return the result. Depending on our provider account settings, the text we send may also be used by those providers to improve their models. We do not send your password or payment details to any AI provider.

4. Service providers (subprocessors)

• Supabase — account database and authentication.
• Vercel — application hosting.
• Cloudflare — scheduled delivery trigger.
• Anthropic — AI summarization (Claude).
• OpenAI — text-to-speech audio.
• Resend — email delivery.
• Stripe — payment processing (only if/when you purchase a paid plan).
• Public data sources — RSS feeds, Yahoo Finance, Polygon, Twelve Data, Tiingo, Finnhub, CoinGecko, OpenWeather, ESPN, Wikipedia, and Reddit’s public data. These receive no personal information about you.

5. What we never do

• We never sell your personal information.
• We never share your email with the news sources we link to.
• We never run ad networks or behavioral tracking on you.

6. Data retention

We keep your account data while your account is active. Archived digests are retained so you can browse your history. When you delete your account, we remove your personal data within 30 days, except where we must retain limited records to comply with legal, tax, or fraud-prevention obligations (for example, payment records).

7. Your rights and choices

• Access & update: manage your preferences any time in your dashboard.
• Pause: stop delivery while keeping your settings.
• Delete: delete your account from the Account page, or email us to wipe everything.
• Export: email us to request a copy of your data.
• Depending on where you live (e.g., the EU/UK or California), you may have additional rights to access, correct, port, or restrict processing of your data. Contact us to exercise them.

8. Security

We use reputable infrastructure providers, encrypted transport (HTTPS), hashed passwords, and row-level access controls. No system is perfectly secure, but we work to protect your data and limit access to it.

9. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

10. International users

We operate in the United States and our providers may process data there and elsewhere. By using the Service you understand your information may be transferred to and processed in the U.S.

11. Changes

If we materially change this Policy, we’ll update the date above and notify you by email or in-app. We will not quietly expand what we collect.

12. Contact

Questions or requests? Email privacy@thedaybreakdigest.online.

This document is provided for transparency and is not legal advice.