Privacy Policy · Today: Daily Reset

Legal

Privacy Policy

Last updated: April 17, 2026

Today: Daily Reset ("Today", "we", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, who we share it with, and the rights you have over it. By using our web app or mobile app, you agree to the practices described here.

1. Information we collect

Account data: name, email address, profile picture (if you sign in with Google), and a device identifier generated in your browser.

Wellness content you create: mood entries, gratitude journal entries, doodles (rendered on your device, not sent to servers unless you save them), personality test answers and results, program progress, meal preferences.

Usage data: pages and features you visit, interaction events, approximate location derived from your IP address for currency detection only, device/browser type, and timezone.

Payment data: when you purchase a subscription or report, payment details (card number, UPI, wallet) are collected and processed directly by our payment processor, Razorpay. We never see or store your full card information. We store only: transaction ID, amount, currency, status, and the product you purchased.

2. How we use your information

  • To provide, personalize, and improve the Today app experience.
  • To fulfill purchases and unlock paid features tied to your account.
  • To generate your personalized personality and IQ reports (via a large language model, described below).
  • To send transactional communications (receipts, password resets, account changes).
  • To detect abuse, fraud, and security incidents.
  • To comply with legal obligations.

3. Legal basis for processing (EEA / UK users)

We rely on the following legal bases under the GDPR / UK GDPR: (a) performance of our contract with you, (b) your consent (which you can withdraw at any time), (c) our legitimate interests in operating and improving the service, and (d) compliance with legal obligations.

4. Third-party processors

We share limited, purpose-specific data with these processors, each bound by strict contractual and data-protection obligations:

  • Razorpay — payment processing, fraud prevention.
  • Google Firebase / Google Analytics (GA4) — anonymous usage analytics and crash reporting.
  • Meta Pixel (Facebook) — conversion analytics. You can disable this with any standard ad-blocker or browser tracking protection.
  • Google Sign-In — authentication (when you choose that option).
  • OpenAI / Anthropic / Google (LLM providers) — to generate your personality and IQ reports. We send only the anonymized test responses needed to produce the report; no identifying information is included.
  • Cloud hosting providers — to run the app infrastructure.

5. Cookies and similar technologies

We use first-party cookies and browser localStorage to keep you signed in, remember preferences, and maintain a stable device identifier. Analytics partners (GA4, Meta Pixel) may set their own cookies. You can control or delete cookies via your browser settings; doing so may affect functionality.

6. Data retention

We retain account data and wellness content for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we must keep it to comply with legal, tax, or accounting obligations (typically up to 7 years for transaction records).

7. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete the personal data we hold about you.
  • Port your data to another service.
  • Object to or restrict certain processing.
  • Withdraw consent at any time.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at support@todaytheapp.com.

8. Security

We use industry-standard safeguards — HTTPS in transit, encryption at rest, access controls, and regular audits. No service is ever perfectly secure; if you believe your account has been compromised, contact us immediately.

9. Children's privacy

Today is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us and we will delete it.

10. International transfers

Your data may be processed in countries other than your own (including the United States and India). Where required, we use Standard Contractual Clauses or equivalent safeguards to protect cross-border transfers.

11. Changes to this policy

We'll update this page if our practices change materially and notify you in-app or by email. The "Last updated" date at the top always reflects the current version.

12. Contact us

Questions, requests, or concerns about privacy? Email support@todaytheapp.com. We aim to respond within 48 hours on business days.