Privacy Policy
Who we are
Ago is published by Day Two (CVR: 38 02 36 83), a company registered in Denmark. Under GDPR, Day Two is the data controller for any personal data described in this policy.
Contact: hello@daytwolabs.dev
The short version
Almost everything you do in Ago stays on your device. Your items, dates, and settings are stored locally and are never sent to any server we operate. The one exception is our in-app purchase system, which uses RevenueCat to verify your Pro unlock.
What data is collected and why
1. App content
Everything you create in Ago (item names, dates, icons, colors, notification settings) is stored on your device using local storage. We never see it, receive it, or store it anywhere. This data is not transmitted off your device and does not constitute processing by Day Two under GDPR.
2. Purchase verification
When you unlock Ago Pro, we use RevenueCat to verify your purchase and restore it if you reinstall.
| Data | Purpose |
|---|---|
| Anonymous app user ID | Identify your purchase session |
| Device identifier (iOS) | Link the purchase to your device |
| Apple purchase receipt | Verify and restore the Pro unlock |
| App version, OS version | Support and issue diagnosis |
Legal basis (GDPR Art. 6(1)(b)): Processing is necessary for the performance of the contract - delivering the Pro feature you purchased.
RevenueCat acts as a data processor on our behalf. We have a Data Processing Addendum (DPA) in place with RevenueCat as required by GDPR Article 28. RevenueCat stores data on AWS servers in the United States; transfers from the EU are covered by standard contractual clauses (SCCs) under GDPR Article 46(2)(c). RevenueCat does not use this data for advertising or cross-app tracking. See RevenueCat's privacy policy.
3. Product analytics (PostHog)
Ago uses PostHog to understand anonymous, aggregate usage patterns - which features get used, where people drop off in onboarding, whether a purchase completes. This helps us fix broken flows and prioritize what to build next.
| Data | Purpose |
|---|---|
| Anonymous, randomly generated device ID | Group events from the same install together - not linked to your identity or any account (Ago has none) |
| Event names (e.g. “item added,” “onboarding step viewed,” “paywall viewed”) | Understand which features are used and where |
| App version, OS version, device type | Diagnose issues tied to specific versions or devices |
What PostHog never receives: your item names, dates, notification content, or any text you type into Ago. No advertising identifier (IDFA) is collected or used.
Legal basis (GDPR Art. 6(1)(f)): legitimate interest in understanding and improving our product, balanced against your privacy since no personal data is collected.
PostHog acts as a data processor on our behalf, hosted on PostHog Cloud's EU servers (data stays in the EU/EEA, no international transfer). We have a Data Processing Addendum (DPA) in place with PostHog as required by GDPR Article 28. See PostHog's privacy policy.
4. Local push notifications
If you enable reminders, Ago schedules local notifications on your device. No notification data is sent to any server. Legal basis (GDPR Art. 6(1)(b)): necessary to provide the reminder feature you requested.
What we do not collect
- No advertising SDK or advertising identifier (IDFA)
- No user accounts
- No email addresses or contact information
- No location data
- No remote push notifications
- No item names, dates, or app content sent to any analytics or purchase processor
International data transfers
Your purchase data is processed by RevenueCat, Inc. (United States). This transfer is covered by standard contractual clauses approved by the European Commission under GDPR Article 46(2)(c). Analytics data is processed by PostHog on EU-based servers and does not leave the EU/EEA. We do not transfer any other personal data outside the EU/EEA.
Data retention
App content is stored on your device until you delete the app. Purchase data is retained by RevenueCat for as long as necessary to provide purchase verification and comply with legal obligations - see RevenueCat's privacy policy for their full retention terms. Analytics data is retained by PostHog per their standard retention policy - see PostHog's privacy policy for their full terms.
Your rights under GDPR
As a data subject, you have the right to access, correct, or delete personal data we hold about you; to restrict or object to processing; to receive your data in a portable format; and to withdraw consent where processing is based on consent.
Because all app content stays on your device, most rights requests relate to RevenueCat's processing. For purchase data deletion, contact RevenueCat directly at compliance@revenuecat.com, or contact us at hello@daytwolabs.dev and we will coordinate on your behalf. We will respond within 30 days.
Right to lodge a complaint
If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with the Danish supervisory authority:
Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby, Denmark
datatilsynet.dk · dt@datatilsynet.dk
You may also lodge a complaint with the supervisory authority in the EU member state where you live or work.
Children
Ago is not directed at children under 13 (or under 16 where applicable EU law requires a higher age). We do not knowingly collect personal data from children.
California (CCPA)
The California Consumer Privacy Act does not apply to Day Two. We do not meet the applicable thresholds: we do not have gross annual revenue over $25 million, do not buy or sell the personal information of 100,000 or more California residents, and do not derive 50% or more of annual revenue from selling personal information.
Changes to this policy
If we make material changes, we will update the effective date at the top of this page. Continued use of Ago after changes take effect constitutes acceptance of the updated policy.
Contact
Day Two · CVR 38 02 36 83 · Denmark
hello@daytwolabs.dev