The short version
dyal keeps what it needs to show your week, and not much else. We don't sell it, we don't advertise, and we don't follow you around the internet. You can take it with you, and you can have it deleted.
What we keep
Your account. Your name, your email address, the language you chose, whether you prefer the light or dark theme, and your password stored as a hash — we never hold the password itself. If you sign in with Google we keep your Google account id, name, and email. Nothing else from your Google account is visible to us.
Your schedules. Their names and settings, the people on them with their names and colours, and shifts with dates, times, and whatever label you wrote.
Invitations. The email address of someone you invite to a schedule, until they accept it or you remove it.
Technical odds and ends. The IP address and browser of a signed-in session, so you can be told when something looks wrong, plus ordinary server logs.
Cookies. One so you stay signed in, and a longer-lived one if you asked to be remembered on a device. There are no advertising or analytics cookies on dyal.
What we don't keep
No payment details — there's nothing to pay for. No location, no contacts, no calendars, no phone numbers. A person on a roster has a name and a colour, because dyal has nowhere to put anything more.
Why we hold it
To run the service: sign you in, show you your week, send the handful of emails it has to send — an invitation, a password reset — and keep accounts secure. That's the whole list of reasons.
People who never signed up
Most names on a schedule belong to people without dyal accounts. Those names were typed in by whoever runs the schedule, and that person decides what goes in and what comes out. We're holding it on their behalf, not gathering it ourselves.
If your name is on someone's dyal schedule and you'd like it gone, ask the person who runs that schedule — removing a name takes them one click. If you can't reach them, write to us at [email protected] and we'll help.
Who else touches it
- The hosting provider that stores the database.
- Resend, which delivers our email.
- Google, if you choose to sign in that way.
That's the entire list. Each does one job for us, and none of them get your information for their own purposes. Our servers may sit outside the country you're in.
How long we keep it
For as long as your account is open. Delete a schedule and its people and shifts go with it. Ask us to close your account and we remove what's in it. Backups may hold a copy for a short while after that before they roll over.
Getting it out, or getting rid of it
Any week exports to CSV or PDF from the week itself, whenever you want it. A schedule is deleted from its own settings page. There's no button yet for closing an entire account or for exporting everything at once — write to [email protected] and we'll do it by hand, quickly.
Children
dyal is meant for adults organising a week — including a week that has children in it. It isn't meant to be used by children under 13, and we don't knowingly keep accounts for them.
Changes to this policy
When it changes, the new version appears here and the date at the top changes with it. If a change matters to you, we'll say so by email rather than hoping you check.
Talk to us
Anything about your information, or anyone else's, goes to [email protected].