What is stored, and where
Everything you record — your activities, the time you tracked, what you wrote in a reflection, the lifestyle profile you are living, your settings, when your free week began, and the receipt reference if you subscribe — is kept by your own browser, on your own device. If you switch on Google Drive sync, one more thing joins it there: the connected account's name, address and picture link, described in the sync section. It cannot be read from here, because there is nothing of ours it is ever sent to.
- You can export the whole record at any time, as a backup file or a spreadsheet, from Settings. It is yours.
- You can delete it at any time. "Erase everything" in Settings removes your tracked time and your reflections, and any plan request waiting for an AI's answer; your activity buttons, settings and receipt stay, so you can carry on. To remove absolutely everything, including those, clear this site's data in your browser. If sync is on, "Erase everything" means it fully: the copy in your Google Drive is deleted too, and syncing stops. Clearing this site's data does NOT reach that copy — only Erase everything, or deleting the app's hidden data in your own Drive settings, removes it.
- There is no Daily Momentum account and no email address registered with us, and no cookie of ours unless you switch on Google Drive sync — then one that holds the permission you granted, sealed, and nothing else, and briefly a second while you connect. The sync section describes both. The only sign-in anywhere in the product is that optional sync — with Google, not with us, and off unless you turn it on.
- Each entry is marked with a label for the device it was made on — a random string, made up on the spot, derived from nothing about you, your browser or your hardware. It is there so that merging one device's backup into another can tell whose entry is whose instead of guessing. It stays in your browser, and travels only inside copies you choose to make — a backup file you export, or, if you switch on sync, the scrambled copy in your own Google Drive.
What leaves the device
Three things can involve a server, and this is the whole list: two are other companies', and one is ours. If you switch on the optional Google Drive sync, two more join them — your own Google account, and a small sign-in service of ours that seals the permission you grant and hands it straight back to your browser, keeping no copy — both described in the sync section, and only on your say-so. And if you create a plan with your own AI, two more can join them, again only by your own hand: the AI company you paste your request into, which sees everything you typed, and a plan-check service of ours your AI may call — both described in the AI section. And if you let an AI assistant in your own browser use your record, what it reads goes wherever that assistant sends it — see the section on AI agents.
- A visit count. When a page or screen is opened, its name — and only its name — is counted by GoatCounter, an analytics service chosen because it uses no cookie and builds no profile. Like any server answering a request, theirs receives your IP address and browser details in order to respond; GoatCounter does not retain them, and its servers are in the European Union. The count carries the screen's name alone — never the day you were looking at, or anything on it. This page itself is not counted.
- A licence check, if you subscribe. One of the three servers of ours — the others are the sign-in service for the optional sync and the plan-check service your own AI may call, each described in its own section — and here is the whole of it: after a payment, and around the end of each paid year — at most once each time the app opens — the app asks it whether your subscription still stands. It is told a Stripe subscription reference — never your record, never your name, never an email address — and, like any server answering a request, it sees the request's IP address, which it does not keep. It checks with Stripe and hands back a signed note; if it cannot be reached, nothing changes, because silence never takes a licence away. It keeps nothing about you: no database, no account, no log of who asked — this service's own logging is switched off, and the ten-minute working memory it uses to answer repeats forgets by itself. It runs on Cloudflare, a US company, which carries the traffic the way any host carries it and records what any host records, under its own terms; Cloudflare also serves this website.
- Payment, if you subscribe. Subscribing happens on Stripe's own checkout page, under Stripe's own privacy policy — Stripe Payments Europe, in Ireland, with processing that can involve Stripe in the United States. Your card details go to Stripe and never to us; what comes back to your device is a receipt reference, stored with your record so you can quote it if you ever need to.
One thing looks like it might belong on this list and does not: if you switch on guided transitions for a lifestyle profile, the app may ask your browser for permission to show notifications. Those notifications are composed on your device about your own schedule — there is no push service behind them, and nothing about them is sent anywhere.
A second thing that does not belong on the list: you can choose one file, anywhere on this device, that the app keeps written with a current backup of your record. The app writes that file on this device and stops there. If the folder you chose is one your own cloud service synchronises, that service carries the file under its own terms, on software you chose — the app neither knows about it nor sends anything itself.
Creating a plan with your own AI
Under Profiles, "Create with your AI" writes a request for a plan — your goal, your available hours, your fixed commitments, and whatever else you choose to type — and hands it to you, as text to copy. The app has no AI of its own, holds no key to anyone's, and sends nothing anywhere: you paste the text into the chat you already use (ChatGPT, Claude, Gemini, or another), on your own account, and you bring its answer back by hand. So this is not a device-only feature, and it would be dishonest to describe it as one. Everything you typed into the form goes to that AI company when you paste it, under that company's own terms, and it may keep it the way it keeps any conversation — and the form asks about family, health and recovery, so what you write there about your health goes too. Write only what the plan needs. Your record — your entries, your history, your other profiles — is not in the text unless you type it in yourself; the form shows you the exact text before you copy it.
One more server of ours can be involved, and only through your AI: a plan-check service. If you add it to your chat as a connector, your AI can send it your request and its own draft plan and be told, in a list, what does not fit — the same check the app runs on this device when you paste the plan in. That service is stateless: it has no database, no account, no store of any kind, and its own logging is switched off; a request lives in its working memory for as long as it takes to answer and is then gone. Like any server answering a request, it sees the request's address while it answers, and to stop a flood it counts requests for a minute against a scrambled form of that address — a scrambling that shapes the count, not a disguise. It runs on Cloudflare, a US company, which carries the traffic the way any host carries it and keeps its own record that a request arrived, under its own terms — the same host that serves this website. Nothing obliges you to connect it — a plan checked only on this device is exactly as welcome — and when you save a plan, it is stored in your record as a profile of your own, private, with a note saying which AI it came from and nothing about the conversation. The request itself waits on this device for a week for its answer, then is dropped; "Erase everything" removes it sooner.
AI agents in your browser
Some browsers let an AI assistant work inside them, and let a page offer it tools (a proposal called WebMCP). Where yours does, this site offers tools that describe the product, search the manual, list the published profiles and explain how a number is calculated. They contain nothing about you. Your own record is offered only inside the app, and only after you turn on "Let AI agents in this browser use my record" in Settings, Privacy. That switch is off by default, belongs to this browser alone, is never in a backup or a sync, and is checked again every time an assistant asks, so turning it off works at once.
- What an allowed assistant can see: what is running now and since when; your activity buttons; today's totals by category; the entries of up to seven days at a time, from the last four weeks only; and which day of a profile you are on, with the published profile's name and blocks — for a profile or plan of your own, only that you are following one. Activity and category names are shared as you wrote them, so a name that says something about your health says it to the assistant.
- What it can do: switch activity, as a tap does, except that it can never remove an entry you just made. The app shows the notice with Undo; the entry is stored like one you tapped.
- What it never gets: your notes, what you wrote at the end of a day, the device label, anything about sync or your subscription. It cannot edit or delete an earlier entry, and cannot publish anything.
None of this goes to Daily Momentum. The assistant is whichever one this browser lets use the page — built into the browser, or added by an extension you installed. What it reads, it may send to the company that provides it, under that company's terms; what happens then is between you and them, and nothing we can see or control. Allow it only for an assistant you would trust with your day.
Sync with Google Drive — optional, and off by default
Nothing in this section applies to you unless you connect Google Drive in Settings. Until you do, nothing about your use of the app changes.
- It is off unless you turn it on. Connecting means signing in to Google on Google's own page, under Google's own privacy policy, and granting exactly one permission: the app's own hidden storage space in your Google Drive. The app cannot see, list or touch anything else in your Drive — that boundary is enforced by Google, not merely promised by us.
- What moves is a copy of your record, and it moves between your device and your own Google Drive, directly. None of it comes to us: the sign-in service described below never receives your record, and has no way to accept one. The copy is scrambled on your device before it leaves, with a key made on your device and stored beside the scrambled file in the same hidden space, so anything that can reach one can reach the other; beside them sits a small plain index — how large the copy is, how many entries it holds, when it was written — so a second device can tell which copy is newer. Plainly: the scrambling protects the copy if it ever turns up somewhere on its own; it does not protect against someone who can open your Google account, and it is not protection from Google. While the copy is there, it sits in your Google account, held by Google under Google's own terms and privacy policy, and counts against your Drive storage.
- The sign-in is not an account with us. To label the connection, the app asks Drive for the signed-in account's name, email address and picture: the name and address are kept on your device and shown only to you, in Settings, and the picture is loaded from Google each time that screen is open. None of it is shared with anyone, sold, or used for anything but showing you which account is signed in — and none of it comes to us: the app asks Google for it directly, and the sign-in service never asks for it at all.
- The sign-in service is what lets the app stay connected instead of asking you to sign in again every time you open it. It is a small service of ours at auth.daily-momentum.com, and here is the whole of it. When you connect, Google hands it a permission slip for the app's hidden space in your Drive; it seals that slip and hands it back to your browser as a cookie the app's own pages cannot read, and keeps no copy. There is no database and no user list behind it, and no log of who asked — this service's own logging is switched off. The one thing it counts is how often a single connection asks for a pass, so that a stolen cookie cannot ask endlessly; that count is kept against a scrambled form of the cookie, never an address, and forgets itself within the minute. The sealed cookie holds no name, no address and no record, and it stays until you stop syncing, remove the app in your Google account, or leave the connection unused for six months. A second cookie, lasting ten minutes at most, carries the connect itself across Google's screen and is dropped when it ends. About once an hour, the app shows the sealed slip to the service and gets back a pass that lasts about that long; like any server answering a request, the service sees the request's IP address, which it does not keep. It runs on Cloudflare, like the licence check above and on the same terms. The pass itself lasts only while the app is open and is never saved to your device.
- Stopping is one tap, and it says what it does: syncing ends, the sign-in service is asked to hand the permission back to Google and to drop its cookie, your record stays on your device, and the copy stays in your Google Drive until you delete it there (Drive settings, Manage apps — the same screen where you can end the app's access yourself, with "Disconnect from Drive", if you want to be certain). Nothing about stopping needs our permission, because nothing of yours is with us.
Children
The children's lifestyle profiles are set up and supervised by a parent or guardian on the grown-up's own device. Nothing about a child is collected or transmitted by us — unless you allow an AI assistant in this browser to read the record, as described above; anything a child types into a reflection stays in the device's record like everything else, under the control of the adult whose device it is.
Offline, by design
The application works with no network at all. That is not a fallback mode; it is how the whole thing is built, and it is why most of this notice is a list of things that do not happen.
Who is promising this
Daily Momentum is made and sold by Karandeniya Mahadurage D Premathilaka (Janaka Premathilaka), Fadenstrasse 19, 6300 Zug, Switzerland. Questions about this notice, your data, or a subscription: [email protected].
If any of this changes
Any further feature that would move data off the device — an account, a copy kept somewhere else, a backup service — would change this notice before it changed the product, and would be opt-in. This page describes Daily Momentum as of 25 September 2026.