Last updated 12 October 2026
Who is responsible
Tidy Day is made and sold by Jakub Radziejewski, based in Poland ("I", "me"). I am the controller of the personal data described here. You can reach me at hello@tidy.day about anything on this page.
The app
The Tidy Day app does not send me any data. It sends Polar only what activating your license needs, and asks tidy.day whether there's an update.
- Your tasks, focus sessions and settings are stored in a local database on your Mac.
- The app connects to the internet for two things only. Once on each Mac it activates your license key with Polar: it sends the key and your Mac's name, so you can tell your Macs apart in your Polar account (deactivating sends the key and the activation's ID). The legal basis is our contract (Art. 6(1)(b) GDPR).
- About once a day it checks tidy.day for a newer version and, if you choose to install one, downloads it from there. Like any web request, this shows Cloudflare your IP address and the app's version; nothing about you or your tasks is sent. You can turn automatic checks off in Settings › General. The legal basis is my legitimate interest in keeping the app secure and working (Art. 6(1)(f) GDPR).
- Your tasks are never sent anywhere.
- There is no account, no analytics, no advertising and no crash reporting.
- Reminders are scheduled by macOS on your Mac. Showing them needs your permission in System Settings.
To remove everything the app stored, quit Tidy Day, delete the app and delete the folder ~/Library/Containers/day.tidy.mac.
This website
tidy.day is hosted by Cloudflare. When you open a page, your browser sends technical information that every website receives: your IP address, the page you asked for, the time, and your browser and device type. Cloudflare processes it on my behalf to deliver the site and protect it from abuse, and keeps its logs only for a short time. The legal basis is my legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR).
The website sets no cookies and uses no analytics, tracking pixels or advertising. Fonts and images are served from tidy.day itself, so your browser does not contact other companies while you read.
The early access list
If you join early access, I store your email address and the date you joined. I use them only to email you when Tidy Day goes on sale, including the launch price, and about the early access release. I don't use them for anything else, and I never sell or share them.
- Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by replying to one of my emails or writing to hello@tidy.day. Withdrawing doesn't affect emails already sent.
- Where it is kept: in a database at Cloudflare, which acts as my processor. If I use an email delivery service to send these messages, it also acts only on my instructions, under a data processing agreement.
- How long: until you withdraw your consent, and at the latest 12 months after Tidy Day goes on sale.
Buying Tidy Day
Tidy Day is sold through Polar (polar.sh), which acts as the merchant of record. Polar handles the checkout, payment, sales tax and invoices as an independent controller under its own privacy policy. I never see your card details.
From Polar I receive what I need to deliver the app and support you: your name, email address, country, what you bought, the price, the date and the order number.
- To deliver the app, updates and support, and to handle refunds: the legal basis is our contract (Art. 6(1)(b) GDPR).
- For my tax and accounting records: the legal basis is a legal obligation (Art. 6(1)(c) GDPR). Polish tax law requires me to keep these records for five years from the end of the year they relate to.
Emails to me
When you write to me, I use your email address and message to reply and to fix what you report. The legal basis is my legitimate interest in answering you, or our contract if you bought Tidy Day. I delete support emails when they are no longer needed, and at the latest two years after the conversation ends.
Who else receives data
- Cloudflare, Inc.: website hosting and the early access database (processor).
- Polar: sales, payments and taxes (independent controller).
- My email provider: delivers and stores the emails we exchange (processor).
Some of these companies are based in the United States. Transfers there rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
I don't make automated decisions about you and I don't build profiles.
Your rights
Under the GDPR you can ask me to:
- give you a copy of your data;
- correct it;
- delete it;
- restrict how it is used;
- hand it over in a portable format.
You can also object to processing based on legitimate interest, and withdraw consent at any time. Write to hello@tidy.day; I reply within one month.
You can also complain to a data protection authority. In Poland that is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You can also complain to the authority where you live or work.
Children
Tidy Day and this website are not directed at children under 16, and I don't knowingly collect their data.
Changes
If this policy changes, I will update the date at the top. If a change affects the early access list, I will tell the people on it by email before it takes effect.