Privacy Policy

Last updated: 20 October 2026

Tiko.day (恰时) is a planning app that works on top of Google Calendar and Google Tasks. This policy explains what we collect, why, where it is stored, who processes it for us, and how you can delete it. It covers the website at tiko.day, the waitlist, and the web app at tiko.day/app.

Tiko.day is operated by Tealun Du, an individual based in Guilin, China. In this policy "we" and "us" mean that operator. You can reach us at tealun@gmail.com.

In short

• We use your Google Calendar and Google Tasks data only to show you your day and to write back changes you make or approve. We do not sell it, use it for ads, or send it to AI providers.
• When you use smart capture, the text or image you give us goes to an AI provider to be turned into tasks. On the AI plan and the trial that provider is DeepSeek, with Google (Gemini API) as a backup when DeepSeek is unavailable; with your own key it is the provider you chose. We do not train AI models on your data.
• We never store the images you capture. We keep the text read from them.
• Google tokens and your own AI keys are encrypted before they are stored.
• Disconnecting Google deletes everything we copied from it. You can delete your whole account yourself in Settings at any time.

What we collect

If you join the waitlist

Your email address, the language of the page, which version of the landing page you saw, the plan you clicked (if any), the planning tool you picked from the list (optional), the page that sent you to us, campaign tags in the link (UTM), and your country. Cloudflare works out the country from your IP address; we do not store the IP address.

The landing page also counts page views and clicks on the sign-up and pricing buttons. For that it keeps a random visitor ID and the page version in your browser's local storage. These records hold the same page details and country, but no email address.

If you use the app

• Account: your email address (you sign in with a link sent to it), your time zone and your language.
• What you create: tasks, events, milestones, projects and notes.
• Captures: the text you typed or dictated, or the text read from an image, together with the items proposed from it and whether you confirmed them.
• Google data: described in the next section.
• Your own AI key, if you add one, stored encrypted. We only ever show you its last four characters.
• AI usage: for each AI request, the feature, provider, model, number of tokens and credits used. These records do not contain your text or images.
• Billing: Paddle handles checkout and payment. We receive your Paddle customer and subscription IDs, the plan, billing period, subscription status, and the credit packs you bought. We never see your card details.
• An activity log of important actions, such as a sync that changed items or a change written to Google.

Technical data

Cloudflare, which hosts the site, processes IP addresses to deliver pages and to protect against abuse. Our code uses your IP address briefly, in memory, to limit how often a form can be sent; we do not write it to our databases. Cloudflare keeps short-lived operational logs of requests and errors. Our code does not log your content, tokens or keys.

Google user data

When you connect Google, you choose which permissions to grant. We ask for three:

• See your list of calendars (calendar.calendarlist.readonly), so you can pick which calendars Tiko.day reads.
• View and edit events (calendar.events), to read events on the calendars you picked, and to change or add an event only when you edit it in Tiko.day or choose "Add to Google".
• View and edit tasks (tasks), to read your task lists and tasks, and to change or add a task only when you edit or complete it in Tiko.day or choose "Add to Google". Google Tasks has no narrower permission that allows writing.

We also read the ID of your primary calendar, which is your Google email address, so Settings can show which account is connected. We do not ask for your Google profile, contacts, email or files.

What we store

A working copy of the events on the calendars you picked (from 30 days in the past to about 400 days ahead) and of the tasks in the lists you picked: title, description or notes, start, end and due times, all-day flag, status, and Google's IDs and version tags. We also store the names, colours and your access level of your calendars and task lists, the sync position for each, and an encrypted refresh token so we can sync while you are away. The copy is refreshed every 15 minutes and when you press "Sync now". Google stays the source of truth: when the two differ, Google's version wins.

How we use it

Only to provide features you can see in Tiko.day: showing your day, ranking what to do now, warning when a deadline no longer fits your free time, and writing back the changes you make or approve. Tiko.day never changes your Google Calendar or Google Tasks on its own.

We do not:

• sell Google user data, or use or transfer it for advertising, retargeting, credit checks or lending;
• send it to AI providers. Smart capture sends only what you capture (see the next section);
• use it to develop, improve or train AI or machine-learning models;
• transfer it to anyone, except to the service providers that store and run Tiko.day for us (Supabase and Cloudflare, listed below), or when needed for security, to comply with the law, or as part of a merger, acquisition or sale of the business.

No person at Tiko.day reads your Google data unless you ask us to and agree to it (for example to fix a problem you reported), it is needed for security (such as investigating abuse or a bug), or the law requires it.

Tiko.day's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting

In Settings, "Disconnect" in the Google section revokes our access at Google and deletes the connected account, its calendar and task-list records, and every item we copied from Google. Your calendars and tasks in Google are not touched. Turning off a single calendar or task list deletes the items copied from it. You can also remove access at myaccount.google.com/permissions; Tiko.day then stops syncing, and the copied items stay until you disconnect in Settings or delete your account.

Calendar subscription link

In Settings you can create a private link (https://tiko.day/cal/…) so that Google Calendar, Apple Calendar or another calendar app can show your Tiko.day events and dated tasks. The feed holds only the title and time of each item: no notes, projects or account details, and never items copied from Google. Anyone who has the link can read it, so keep it private. We store only a fingerprint (hash) of the link, note when it was last read, and limit how often it can be read. Making a new link or turning it off stops the old one at once. When your calendar app fetches the link, the company behind that app (for example Google or Apple) receives these titles and times under its own privacy policy.

AI processing

Smart capture turns a sentence, a voice note or a screenshot into proposed tasks and dates. For each capture we send the AI provider what you captured (your text, the transcript, or the image), the current date and time, your time zone, your language setting and the names of your Tiko.day projects. For text captures, so that a sentence like "move that task to tomorrow" can change an existing item, we also send up to 50 of your open items: their type, title (up to 80 characters) and due or start time. We do not send notes, projects or other fields, and never items synced from Google. Nothing is saved or changed until you confirm the proposal.

• AI plan and trial: requests go to DeepSeek, a company based in China, so your captures may be processed and stored in China. If DeepSeek fails, the same request is retried with Google (Gemini API, paid tier); under Google's terms for paid Gemini API services, Google does not use prompts or responses to improve its products.
• Your own key (Basic plan): requests go to the provider you chose (Anthropic, OpenAI, Google Gemini, OpenRouter, DeepSeek or Moonshot/Kimi), with your key and under your own agreement with that provider. DeepSeek and Moonshot are companies based in China, so captures you send through them may be processed and stored in China.
• Images: your browser shrinks the image first. We pass it to the provider and do not store it. We keep only the text the AI read from it and the proposed items.
• Recorded audio: when your browser cannot recognise speech and you have your own OpenAI, Gemini or OpenRouter key, we send the recording to that provider for transcription. We do not store the recording. We keep the transcript.

Tiko.day does not use your content to train AI models, and AI output never goes to Google until you confirm it.

Voice input in your browser

Voice capture first uses the speech recognition built into your browser. That runs between you and your browser maker, not through us: in Google Chrome the audio is sent to Google's servers to be recognised, and other browsers may use their own online service. We receive only the resulting text. If you prefer not to send audio to your browser maker, type instead.

How we protect your data

• All traffic uses HTTPS.
• Google refresh tokens and your own AI keys are encrypted with AES-256-GCM before they are stored. The encryption keys are derived from a master key that is held only as a server secret, never in the database.
• Every table in the product database has row-level security, so each account can read only its own rows. The app reaches the database with your own sign-in token.
• Background sync uses a separate server credential that is limited to the sync functions and to one user at a time.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

Where your data is stored and who processes it

• Supabase: the product database and sign-in. Our project runs in the AWS Singapore region (ap-southeast-1). Supabase also sends the sign-in emails.
• Cloudflare: hosting, the server code, the waitlist database (Cloudflare D1) and Cloudflare Web Analytics.
• Google: Google Calendar and Google Tasks, at your request; and speech recognition if you use voice in Chrome.
• DeepSeek: AI for the AI plan and the trial (China).
• Google (Gemini API): backup AI for the AI plan and the trial when DeepSeek is unavailable.
• The provider of your own AI key, if you add one.
• Paddle: our reseller and merchant of record. Paddle runs checkout, takes payment, charges tax and sends invoices, and handles your payment data under Paddle's privacy notice.

These providers may process data outside your country, including in Singapore, the United States and China. Where the law requires it, we rely on the providers' standard contractual safeguards for these transfers.

Cookies, local storage and analytics

The landing page sets no cookies. It keeps the page version and a random visitor ID in local storage, as described above. We use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites.

The app keeps your sign-in session in your browser's storage. While you connect Google, it sets one short-lived cookie (10 minutes) to make sure the connection finishes in the browser that started it. Paddle's checkout window is run by Paddle under its own notice.

How long we keep data

• Waitlist: we use your email only to tell you about the launch, and delete it when you ask.
• Account data, items, projects and captures: while your account exists.
• Copied Google data: until you disconnect Google, turn off that calendar or list, or delete your account.
• Your own AI key: until you delete it in Settings, which takes effect at once, or delete your account.
• Calendar subscription link: until you turn it off, make a new one, or delete your account.
• Deleted accounts: for 30 days after deletion we keep a one-way, keyed hash of your email address and the deletion date, and nothing else. It cannot be turned back into your address. We use it only so that signing up again with the same email within those 30 days does not start a second free trial; after 30 days it is deleted.
• Billing records: as long as we need them for tax and accounting law. Paddle keeps its own records.
• Deleted data can remain in database backups for a short time before the backups expire.

Your choices and rights

• Disconnect Google, turn off calendars or task lists, and delete your AI key at any time in Settings.
• Delete items and projects in the app.
• Delete your account in Settings, under Delete account. It takes effect at once: we cancel an active subscription so Paddle does not charge you again, revoke our access at Google, and delete your account and all data linked to it, as described on tiko.day/account/delete. If you can't sign in, email tealun@gmail.com from the address you sign in with; we delete the account within 30 days and confirm by email.
• Leave the waitlist: email us and we delete your address.

Depending on where you live, for example in the EU, the UK or California, you may also have the right to access, correct, export or delete your personal data, to object to or restrict some processing, and to complain to your data protection authority. Email us to use any of these rights. We do not sell or share personal data for cross-context behavioural advertising.

Children

Tiko.day is not meant for children under 16, and we do not knowingly collect their data. If you think a child has given us data, email us and we will delete it.

Changes to this policy

We will post changes on this page and update the date at the top. If a change affects how we use your Google data or other personal data in a significant way, we will tell you by email or in the app before it takes effect.

Contact

Tealun Du, an individual based in Guilin, China
Email: tealun@gmail.com