← Back to Foreday

Privacy

Last updated October 14, 2026. Foreday is in beta.

Short version: your notes are yours. We use them only to run the app for you, we never sell them or show you ads, and you can download or delete everything at any time.

Who runs Foreday

Foreday is built and run by SCUNI CORP., based in New York, USA ("we"). Questions or requests: [email protected].

What we store

• Your account: username, a hashed password (we can't read it), your two-factor or Face ID settings if you turn them on.
• If you use Continue with Google: your email address, Google's account ID and your first name (we use it to greet you; you can change it in Settings), so we know it is you next time. We ask Google for nothing else: no access to your Gmail, contacts or files.
• What you put in: the items, notes, spaces and files you dump or import. Imported files are read once and not kept; only the items found in them are saved.
• Security logs: login times, IP address and browser type, to spot break-in attempts.
• Usage counters: how many AI sorts and asks you used today, to enforce fair-use limits. Also counts only: which days you opened the app, whether from the Home Screen icon or the browser, how many items you added and finished, and how many reminders reached you or were tapped. The person who runs Foreday uses these to see whether it is useful. They never include what your items say.

No ad trackers, no analytics scripts, no third-party cookies. The one cookie we set keeps you logged in.

How the AI works

To sort your items and build your "next 3" and smart lists, the text of your open items is sent to an AI model through OpenRouter. We ask OpenRouter to use only providers that do not train on your data and do not keep it (zero data retention). Only the item text and space names are sent, never your username, email or password. You can use Foreday without AI; sorting then falls back to keyword rules.

Voice typing: if you tap the microphone button, your phone or browser asks for permission to record. The recording (up to one minute) is sent to the same AI service, with the same no-training, no-retention rule, to be turned into text, and the text is put in the box you were typing in. Foreday does not save the audio; it keeps only a count of how many seconds you used today, for the daily limit. You can say no to the microphone and keep typing.

Asking the AI helper about your notes: when you ask the helper a question, Foreday looks for your notes that match it and sends only the matching passages of up to five notes (not your whole library) to the same AI service, under the same no-training, no-retention rule. If nothing matches, no note text is sent. You can turn this off in Settings > Notes (Helper reads notes).

Your journal: your Morning and Night pages and day notes are private to your account and are never used to train AI. The insight on the Habits page is worked out from your habit history. The AI reads your journal text for it only when both AI insight from my journal (Settings > Journal) and Helper reads notes (Settings > Notes) are on; then at most the last 14 days of journal lines are sent, to the same AI service under the same no-training, no-retention rule, and Foreday keeps no copy of what was sent. The AI never gives medical, diet or guilt advice. Each journal day also shows up as a read-only note in Notes, under Journal.

Who else touches your data

• The server host (DigitalOcean, USA) stores the database.
• Cloudflare protects the website and passes traffic through.
• Stripe, when you start a subscription: it takes your card and billing details on its own page and tells us whether you're subscribed, your plan and its dates. We never see or store your card number.
• Google, only if you choose Continue with Google: it tells us your email address, account ID and first name after you approve.
• OpenRouter and the AI provider it picks process item text for sorting, and the matching note passages when you ask the helper about your notes, as described above.

We don't sell, rent or share your data with anyone else, and we only disclose it if the law forces us to.

Keeping it safe

Encrypted connections (HTTPS), hashed passwords, optional two-factor login, strict separation so no account can read another's data (enforced by the database itself), and nightly backups: copies on the server (readable only by the app's system account) kept for 14 days, plus an encrypted off-site copy on Cloudflare R2 kept for up to 6 months.

Your controls

• Download: Settings → Download my data gives you everything as Markdown files (open them in Obsidian or any editor) plus a JSON file.
• Delete: Settings → Delete all my data removes your items, notes and spaces immediately. Copies in backups age out: server copies within 14 days, the encrypted off-site copies within 6 months.
• Close your account: email us and we delete the account and everything in it.

Kids

Foreday isn't meant for anyone under 13, and we don't knowingly collect their data.

Changes

If this policy changes in a way that matters, we'll tell you in the app before it takes effect.