Privacy Policy
Last updated 20 October 2026. This explains what the Daily Rebuild app stores about you, why, and how to see, download or delete it.
Who is responsible
The Daily Rebuild app is run by John Mitchell, Lisin Glen, Ballyboggan Road, Glasnevin, Dublin 11, D11 CC04, Ireland (the “controller” under data protection law). Contact: dailyrebuildguide@gmail.com. We’re a small operation and haven’t appointed a Data Protection Officer; write to that address about anything in this policy.
What we store, and why
| What | Why | Legal basis |
|---|---|---|
| Your email address, first name (optional), timezone | To run your account, sign you in and show your days in your own time | Contract: providing the app you signed up for |
| The steps you tick each day and which Move habit you did | Your Today screen, calendar and streaks | Contract |
| Your daily reflections | So you can write and look back on them | Your explicit consent, given when you join (reflections can include health or other sensitive details) |
| Your reminder time | To send the daily reminder you turned on | Your consent; turn it off any time |
| The date you agreed to this policy and confirmed you’re 18 or over | To show we asked | Legal obligation and our legitimate interest in keeping a record |
| Short-lived security records (sign-in codes, a scrambled form of your IP address for rate limits) | To keep accounts safe and stop abuse | Our legitimate interest in keeping the app secure |
We don’t use analytics, advertising or tracking of any kind, and we never sell or share your data for marketing.
Your reflections are private
Reflections are encrypted before they’re saved. Only you can read them in the app. Admins see counts (for example, how many members finished today), never what anyone wrote. Withdrawing consent is simple: delete any reflection, or all of them, in Settings, or delete your account.
How long we keep things
- Reflections: for as long as you choose in Settings (30 days, 1 year, or until you delete them).
- Your account and steps: until you delete your account, or after 6 months without using the app. We email you 14 days before that happens.
- Unconfirmed sign-ups: deleted after 24 hours.
- Sign-in codes: 15 minutes. Sign-in sessions: 90 days from last use. Security records: 1 day. Reminder send records: 60 days.
- Our host keeps routine server backups for no longer than one month, so anything you delete is gone from them within a month.
Who else handles your data
The app, its database and its email mailbox are hosted by Web Hosting Ireland on servers in Ireland, which store the data on our behalf. Emails we send (sign-in codes, reminders) pass through your own email provider. Your data stays in Ireland; we don’t transfer it outside the European Economic Area.
Cookies and storage on your device
Only what the app needs to work, so no cookie banner:
- Session cookie: keeps you signed in (up to 90 days).
- Security cookie: protects your forms from being misused by other sites (until you close the browser).
- Sign-in cookie: remembers which email your code was sent to (20 minutes).
- App files: if you add the app to your home screen, your phone stores the design files (never your data) so it opens quickly and can show an “offline” page.
- “Not now” on the install card: remembered on your device so it doesn’t ask again.
Your rights
You can see, correct, download and delete your data yourself in Settings (Download JSON or CSV; Delete my account). You also have the right to restrict or object to processing, and to withdraw consent at any time. For anything you can’t do in the app, email dailyrebuildguide@gmail.com and we’ll reply within one month. No decisions about you are made automatically.
If you’re unhappy with how we handle your data, you can complain to the Data Protection Commission at dataprotection.ie.
Age
The app is for adults. You must be 18 or over to join.
Changes
If this policy changes in a way that matters, we’ll tell you in the app or by email before it takes effect.