Privacy notice
Template draft. Last edited 11 October 2026.
This is a template, not legal advice. The owner needs to read it, fill in the bracketed parts and have it checked before the site goes public.
Who is responsible
The data controller for Horae is [owner name and postal address, to be filled in]. For anything in this notice, write to hello@dmpinto.com.
What we store
- Your account: your email, your name and your password, which the account service stores hashed.
- What you create: tasks, events, habits, books, notes, cards, projects, money entries, links, pages and settings.
- Connections you choose to add, such as Apple Calendar or Craft. Their passwords and links are encrypted on the server.
- Messages you send us, for example a feedback message, an invite request or a deletion request.
- A sign-in session, kept in a cookie so you stay signed in.
We do not run analytics, show ads, sell your data or use tracking cookies. This website, horae.day, sets no cookies and makes no requests to other sites. If you choose Milk or Dusk, that choice is saved in your own browser and never sent to us.
Where it is kept
The app and its database run on Cloudflare. Sign-in is handled by our account service provider, Supabase, and invitation and feedback emails are sent through Resend. If you connect Google or Apple, those services see what you ask them to sync. Some of these providers may process data outside Portugal. [Owner to confirm regions and add processor agreements.]
Your files
Files can be kept in Horae-hosted storage, within the limit of your plan, or in your own Google Drive. Files kept in Drive are in your Drive, under Google’s terms. [Owner to confirm where hosted files are kept.]
How long we keep things
- Deleting an item removes it.
- If you ask us to delete your account, we erase your data within 30 days of confirming the request with you. Copies in backups are removed as the backups expire.
- Sessions end after a while, or when you sign out.
Your rights
Under the GDPR you can ask to see your data, correct it, delete it, limit how it is used, take it with you, or object to its use. You can withdraw consent where we rely on it. You can export your data and ask for deletion yourself in Settings, under Data. For anything else, write to the contact below. You can also complain to your national data protection authority. In Portugal that is the CNPD.