Privacy policy

LGA DayTrace · Last updated November 9, 2026

LGA DayTrace ("DayTrace") is a desktop app for Windows and macOS, with a companion app for iPhone, made by Lega Pugliese. This page explains what DayTrace does with your data, especially the data it receives from Google when you connect your Google Calendar, add a Google Sheets spreadsheet, turn on reading your Gmail or turn on syncing your computers. What the iPhone app does is described in its own section below.

What DayTrace accesses in your Google account

Only if you choose to connect a Google account, and only with the permissions you approve on Google's consent screen, DayTrace can:

see the list of calendars in your Google account and their default reminders;
read the events in those calendars, to show them in the app and to remind you before each one;
only when you ask it to from the app, and only in calendars you own: create, edit, move or delete an event without guests (and bring back one it deleted, if you undo it), and answer an invitation you received, or every date of a repeating meeting at once (as when you answer it in Google Calendar, the organizer gets your answer). This includes creating, when you click "Como evento" on a message suggestion, an event in your primary calendar with the suggested title and time. When you click "¿Lo agendo?" or answer another message suggestion, it can also create an event with the suggested title, time, place and meeting link, add a place, link or note to an event you own, or move or cancel an event you own that has no guests and is not part of a series. When you click "Pintarlo" or "Pintar los N" on a color suggestion, it can set the color of an event you own that has no color yet (with no guests and not part of a series) to the color of its project; an event that already has a color is never changed. When you move a Todoist task that has its own time block in your calendar (an event you own, with no guests, with the same title), DayTrace moves that event with it, and can delete it if you ask. It can also, when you ask, remove in one go the time blocks a previous planner left in your calendar (events that say so in their description), keeping a full copy of each one on your computer first. It never does any of this on its own;
only if you turn on "Read new messages" and connect Gmail in Settings › DayTrace Assistant: read your Gmail, read only (gmail.readonly). Every few minutes, while you are at the computer, it reads the messages that arrived or that you sent since the last time (and, for a message addressed to you or one that mentions a day, a time, a place or a meeting link, the earlier messages of the same thread, kept only in memory during that review, as described below), skipping the promotions, social and forums categories, drafts, spam and trash. Automatic notices (from "no-reply" senders and similar) are dropped on your computer unless they carry something for you, such as an appointment, a booking, a flight, a due date, an invoice, a payment or a delivery. Mailing lists, bulk mail, mail from marketing or newsletter senders and mail whose subject is an offer are always dropped; other mail with an unsubscribe link goes only if its subject names such an item. It never sends, deletes, labels or changes anything in Gmail;
only for the Google Sheets spreadsheets you add in DayTrace as a source of tasks (for example, a shared sheet where tasks are assigned to you): read the tab you choose in each one (DayTrace receives that tab's cells, the spreadsheet's name and the names of its tabs, and uses only the header row and each task's name, priority and status), to bring its open tasks into your task list. It keeps on your computer only what it needs to find each row again: the task's name, its row and the status it had;
in those same sheets, write a task's status back when you mark it done in DayTrace or in Todoist (or put back the status it had, if you undo it). DayTrace changes no other cell, and it doesn't open any other spreadsheet.
only if you turn on "Sync between computers" in Settings › Computers: create, read and update its own files in a hidden app folder of your Google Drive (drive.appdata). DayTrace can't see, open or change any other file in your Drive, and that folder doesn't appear in Google Drive.

DayTrace never sees your Google password.

Where your Google data stays

Calendar, Sheets and Gmail data is processed and stored only on your own computers, in DayTrace's data folder (%APPDATA%\LGA\DayTrace on Windows, ~/Library/Application Support/LGA/DayTrace on a Mac) and, if you turn on the day report and choose another folder for it, in that folder (see below). From Gmail it keeps only references to the messages it already read (ids, no text), a hashed reference to the conversation of a message that may still need your answer and to the last time you wrote in it (for up to 14 days), a hashed reference to each address you wrote to, never the address itself (for up to a year, so that an invitation from a mass mailing is suggested only if you correspond with its sender), and, for each suggestion it shows you, who wrote it, the subject, the suggested task and the sentence used as evidence (up to 200 characters), and, for an event suggestion, its place and meeting link. For a meeting proposal that nobody confirmed yet, it keeps a hashed reference to the conversation, the day and the time (no text), for up to 3 days. From an event it also keeps its color and, from its description, only the codes that match the projects you set up in DayTrace, to know which project the event belongs to; the rest of the description is not kept. If you turn on syncing your computers, the message suggestions described below, with their filtered evidence (email addresses and phone numbers replaced as described there, and the calendar only as "primary" or a fingerprint, never its id), are also copied, encrypted, to your other computers through DayTrace's hidden folder in your Google Drive, which neither Google nor I can read.
The day report (Settings › Day report, off by default): only if you turn on "Write a report of each day", once a day is over, and whenever you click "Write today's now", DayTrace writes one Markdown file for that day (DayTrace_YYYY-MM-DD.md) on your computer, in the reports folder inside DayTrace's data folder or in a folder you choose. Besides your hours by project and work type (from both computers, if they sync), it lists the time and title of that day's meetings from your Google Calendar (with the name of who invited you, when it wasn't you), the titles and projects of the Todoist tasks you closed or left open, and that day's message suggestions with who wrote, the suggested title, the sentence used as evidence (up to 200 characters, with passwords, codes, keys, email addresses and phone numbers removed) and your answer. It never includes window titles or text read from the screen. DayTrace writes only that file there, never sends it anywhere, never sends it to the AI service and never deletes anything in that folder. If you choose a folder that another program syncs or shares (a cloud drive or a network folder, for example), that program copies the file on its own terms.
The access Google gives DayTrace is stored encrypted on your computer. It is never written to a log, a web address or a server.
Data DayTrace receives from Google is not sent to any server, run by me or by anyone else, other than Google's own servers when DayTrace talks to the Google Calendar, Google Sheets and Gmail APIs. There are two exceptions, both set up by you: each open task of a spreadsheet you add becomes a task in your own Todoist account, with its name, its priority and a link to its row; and, if you turn on reading Gmail, the filtered text of new messages goes to the AI service described below, as explained there; and, only if you also turn on the AI in the assistant's conversation and write to it from a message suggestion, that suggestion's one-line title goes with your message, as explained there. Nothing from your spreadsheets or your calendars is sent to the AI service, unless you turn on the switch described below or you turn on the AI in the assistant's conversation (which sends the titles and descriptions of your open Todoist tasks, including those a spreadsheet created, and the titles of your events); calendar invitations that arrive by email are compared with your calendar on your computer and are not sent to the AI, except for the titles described under "Calendar invitations" when "Mandar a la AI mis próximos eventos" is on.

The rest of DayTrace

To work out what your day goes into, DayTrace records on your computer which app and window are in front, the site open in your browser, and short text it reads from some windows on screen. It also notes, for each minute, how many seconds had keyboard or mouse activity (not which keys, what was clicked or where). It reads the screen in memory and never saves an image of it. This record stays on your computers: only if you turn on syncing your computers (below), it also travels, encrypted, to your other computers. On Windows, to open the assistant box with the shortcut you chose (Win+K by default; you can change it or turn it off in Settings › DayTrace Assistant), DayTrace watches the keys you press only to recognise that shortcut, on your computer; it does not count, keep or send any key, and it sets that watch again every minute in case Windows removed it. It does not store, log or send any key.

To assign time to a project when its own rules are not enough, DayTrace can send a short description of that time (window titles, site names and short pieces of on-screen text, with passwords, codes and keys removed first) to Anthropic's Claude API, using your own key or account. You can turn off sending on-screen text in Settings. No data from Google is part of these requests.
To ask you which of your Todoist tasks you are working on ("¿Estás con…?", on by default once "Compare with your Todoist plan" is on; you can turn it off in Settings › DayTrace Assistant), DayTrace first compares your tasks with what you have open, on your computer. Only when two or more open tasks match it equally well, or when none matches by name but that stretch of time already belongs to a project with open tasks, it sends one short request to Anthropic's Claude API (Claude Haiku, with your own key or account) with the titles of those tasks (in the second case, up to 20 open tasks of that project, and the project's code), their day and planned duration, and the signals of that moment, filtered on your computer first: the app, the code repository, what the app says it has open, the site and the window title, with passwords, codes, keys, email addresses and web-address parameters removed. This happens even when DayTrace's own rules already assigned that time to a project. It never sends images, on-screen text, chat text or anything from Google. It makes at most 30 of these requests a day, never asks again about the same thing that day, and only shows you the question: nothing is written to Todoist unless you click.
Only if you turn on "Read new messages" (off by default), every few minutes while you are at the computer DayTrace reads what is new in your Gmail (as above), your Telegram (from the local database of LGA Assistant, read only) and your WhatsApp. On your computer it drops promotions, newsletters and other automatic notices except those that carry an appointment, a booking, a flight, a due date, an invoice, a payment or a delivery (for those, only the subject and the first 600 characters). It drops group messages that don't mention you or reply to you, and Telegram chats outside your work list (DayTrace's own, chat by chat, once you import one; for the chats it does not list, LGA Assistant's), unless they can close something you already have open: what you are waiting for from the person who writes (or, in the group where you were waiting, someone who names that person), or a plan being arranged in that chat. From those, only the new message goes, without earlier messages, marked so that DayTrace accepts from it only "it arrived" or that plan's event, never a new task or event. Messages from chats you marked "No leer este chat" are never sent to the AI. Links are cut to their website (meeting and map links stay whole) and long account or ID numbers and phone numbers (recognised as described under "Syncing your computers") are replaced. It also drops lines that talk about passwords, codes, keys or tokens, quoted replies and email addresses, and cuts each message short. What remains, and for a chat whose new message is addressed to you (a private chat, a mention, a reply to you or an email to you) or mentions a day, a time, a place or a meeting link, or is your reply in a WhatsApp or Telegram chat to something you were asked (a request still waiting for your answer in that chat, a message to you that arrived just before, or a message where you say you are on it) or refers to something said before ("what we said", "like I told you"), up to 30 earlier messages of that chat, or up to 25 earlier emails of that thread (filtered the same way, also dropping any line or pair of consecutive lines that gives a password, a PIN, a card or account number or a code with its value, and not stored), goes, together with the titles of your open Todoist tasks (and their descriptions, at most 240 characters each, filtered the same way, line by line), your project names, what you are waiting for from others and, if you share Todoist work projects with other people, their names, nicknames and what they do, as described below (never their ids or emails) and, for whoever wrote you something new, the titles of their open tasks in those projects, in a single request per pass to Anthropic's Claude API (Claude Sonnet by default, or the Claude model you choose; with your own key or account), to suggest that a task looks done or that someone asked you for something, that you promised to do something by a certain day, or that a message asked you something and you haven't answered it yet. Only when DayTrace uses Anthropic's API (not your Claude subscription), the AI may also search, at most twice per review, the older messages of those same chats and email threads: only then, DayTrace reads up to 150 earlier messages of each of them at that moment, from the same places and read only (for Gmail, the thread it already read; it makes no new request to Gmail, WhatsApp or Telegram), filters them the same way and keeps them only in memory until that review ends; they are never stored. The AI sends a few words and the mark of one of those conversations, DayTrace looks for them on your computer and sends back at most 8 messages in total: the ones with those words, each with the one that follows, with when and who sent them. Each search sends that same request again, with the messages found added, so a review that searches makes up to four requests to the API instead of one; and if the API rejects a request that offers the search, DayTrace sends the original request once more, without the search and without the messages found. It never searches another conversation, nor a chat you marked "No leer este chat". DayTrace's log records only how many searches were made and how many messages they returned, never what was searched. Each message, new or earlier, is labeled as sent by you or received from someone (by name), so that what you ask someone else is never suggested as your own task. In a WhatsApp or Telegram chat, a quick request (a call, a voice note, a link) is never suggested, unless it has a day or a time (a call at five), which is suggested as an event; a request that can wait is suggested once you accept it or say you are on it, once you write about something else without answering it, or after two working hours without an answer. While it waits, it is kept like any other suggestion (as described above) and DayTrace adds only a mark of whether it is waiting for your answer; it travels to your other computers like any other suggestion only once its wait is over, with at most a mark of whether you missed it or said you were on it. In later reviews, a request still waiting in a chat with something new goes again in the same single request (who asked, the chat, the suggested task and the quoted sentence, filtered the same way), so the AI can tell what you answered to that request. It can also suggest adding an event, completing a task or an event, moving or cancelling an event you own, or reminding you that something you asked someone for hasn't arrived (this last one stays inside DayTrace and is never written to Todoist). For the people you share work projects with, it can suggest creating a task for one of them, or completing one of their tasks when that person says clearly that it was delivered. When you tell DayTrace that a task it suggested from one of your own messages was for someone else (with "Para quién" in the notice, or by writing "es para …" in it, which DayTrace understands on your computer without the AI), it keeps on your computer the sentence of that message as a correction (filtered the same way, at most 160 characters, with a salted hashed reference to its chat and never who it was for or any id), up to 30 of them, and each request includes the 6 most recent ones as examples, so the assistant does not repeat the mistake. Corrections from a chat you marked "No leer este chat" are not sent; moving the task back to yourself deletes the correction. Event colors and the question about which project a WhatsApp chat belongs to are decided on your computer and send nothing to the AI; your answer to that question (a project or "Personal") is kept only as a salted hashed reference to the chat. From any notice that comes from a WhatsApp or Telegram chat (or from that question) you can choose "No leer este chat": from then on none of that chat's messages go to the AI, not even as earlier messages, and DayTrace keeps, on your computer only, that hashed reference and the chat's name, so Settings › DayTrace Assistant › "Chats que no leo" can list it with "Volver a leer"; reading it again deletes the stored name. Only if you turn on "Mandar a la AI mis próximos eventos" in Settings › DayTrace Assistant (off by default), the request also includes, for the events you own in the next 14 days that have a time and no guests, only their title (with passwords, codes and keys removed), day, time and duration, so the AI can tell that a message moves, cancels or completes one of them (the same switch allows the separate request described under "Calendar invitations"). To tell which messages are addressed to you, DayTrace compares, on your computer only, your own address with the "To" field of each email (addresses are never stored or sent to the AI); those messages carry a short mark in the same request, so no extra request is made. To know whether you already answered, it looks at what you sent later in the same conversation (the Gmail, Telegram and WhatsApp messages it already reads), and keeps only a hashed reference to that conversation. You can turn this reminder off in Settings › DayTrace Assistant. Nothing is written to Todoist or Google Calendar unless you click.
Calendar invitations. With "Read new messages" on, the computer that runs the message review also looks at the invitations in your primary Google calendar that you have not answered (never those in calendars shared with you, which belong to someone else). For each one (a repeating meeting counts as one, showing how it repeats and its next date) it shows a suggestion to answer it (Yes, Maybe, No; for a repeating meeting, all its dates or only the next one) and, if one of your own events on the same day, without guests and not repeating, looks like the same meeting, to delete that event. Nothing is written until you click: answering goes to Google Calendar, which notifies the organizer, as when you answer there; deleting your event can be undone, and undoing an answer sends the organizer a second update with your previous answer. For a repeating meeting, undoing restores only the answer to the whole series; if you had already answered one of its dates separately, DayTrace shows it before you answer and tells you afterwards whether Google changed it (it reads up to five of those dates again from Google Calendar, with the same permission), and never rewrites them on its own. When a Gmail message carries a calendar invitation as an attachment, DayTrace downloads that attachment with the same read-only Gmail permission only if the message comes from Google Calendar or is an individual invitation (not a mass mailing), and it uses it only if the message comes from Google Calendar or from the invitation's own organizer; otherwise the message is handled like any other. Calendar files of mass mailings, and those that are not invitations (such as most bookings and flights), are not downloaded. To tell you since when an invitation is waiting, DayTrace also reads when each event was created. The file is read on your computer and never stored; the suggestion keeps, like other suggestions, the meeting's title, day and time, place, the organizer's name, the meeting link and, if another invitation arrived for the same time, its sender and title. If "Mandar a la AI mis próximos eventos" is on (Settings › DayTrace Assistant), deciding whether an invitation and one of your own events are the same meeting is a separate small request to the AI (the base model, Claude Haiku): the titles of the unanswered invitations and of your own events that day, with their day and time, and the organizer's first name, with titles filtered like everything else sent to the AI; it counts toward the daily AI budget. With that switch off, DayTrace decides on your computer.
People you name. DayTrace keeps on your computer, in its own database, a list of people, organizations and jargon: the ones you add in Settings › Personas or import from a file, plus the people you share Todoist work projects with, added automatically with their Todoist name. If you turn on "Sync between computers", this list also travels, encrypted, to your other computers and to your iPhone, as described under "Syncing your computers". When the message assistant reviews new messages, the single request to the AI includes, from that list, only: the people you share Todoist work projects with, sent in every review, and the entries whose name, first name or nickname appears in that review's messages or in the earlier messages sent with them as context (for people, also whoever writes or the person you are writing to; for organizations and jargon, also a chat's or sender's name). Names are matched as whole words, and a name that is also a common word only when written with a capital letter. For each person it sends the full name, nicknames, what they do and whether they are work or personal; for organizations, the name, other names and what it is; for jargon, the term and its other forms; at most 20 of each per review. A name, nickname or description that contains a phone number, an email address or a long number is left out, and Todoist ids are never sent. How you classified each WhatsApp or Telegram chat is kept only as a salted hashed reference, never with the chat's id, and never with its name except for a chat you marked "No leer este chat", whose name is kept on your computer only while it stays blocked: the AI sees only the project label it gives that chat's messages (it travels with each message), and no message from a chat you blocked goes to the AI, nor does what you were waiting for from it.
Only if you turn on using the AI in the assistant's conversation (in the assistant panel, the assistant box that opens with its keyboard shortcut, or Settings › DayTrace Assistant; off by default), and only when you write to it something DayTrace can't answer on its own, DayTrace sends one request to Anthropic's Claude API (Claude Sonnet, or Claude Opus when you ask it to analyse, organize, prioritize, rearrange or spread several things at once; with your own API key; or through your Claude account with Claude Code if you allow that route in Settings › AI). It sends your message, the last three exchanges of that conversation (your messages and its answers, except one you declined to send), and, when you write from one of the assistant's notices (its "Decime otra cosa…" line), that notice in one line (the free time, the task it asks about, the hours a project has today, or the title of a message suggestion, which may come from a Gmail, Telegram or WhatsApp message), the project it is about and the title of what it suggests creating, filtered the same way, the current date and time, your free time today and tomorrow, the hours you spent on each project today, your list of projects (code, client name and type), your working hours, and up to 300 items from your plan: your open Todoist tasks (title, project, date, time, duration (the one you gave it in DayTrace, or Todoist's if it has one), priority, whether it repeats and its description, at most 240 characters, filtered the same way: whole links become [link] and a line that mentions a password, a key, a PIN or a code is dropped), the short facts you asked the assistant to remember (up to 20, at most 2,000 characters in all, checked again before each request with the same rules used to keep them) and your Google Calendar events from today to two weeks ahead that DayTrace has already read (title, date, time, and whether DayTrace may move it — if not, why: it has guests, it repeats, it's an invitation or it isn't yours; never who the guests are). When your message (or one of your three previous ones) names someone you share Todoist work projects with, or talks about assigning or delegating something or about your team, it also sends the people you share Todoist work projects with (up to 20, the ones your message names first): their first name as it appears in Todoist (with an initial when two share it), up to three nicknames, what they do and the project codes of the lists you share, filtered the same way, and which of them your message names; never their Todoist id, email address or phone number. Tasks assigned to someone else are left out of the plan it sends. The answer can then suggest creating a new task for one of those people, assigned to them, without a time, in a list you share: Todoist notifies that person when you click to create it, and "Deshacer" deletes only that task. Links, email addresses, passwords, codes and keys are removed from titles and from your message, and a message that mentions a password or a code is not sent at all. Guests, places, meeting links, IDs and on-screen text are never sent. The answer can only suggest changes: nothing is written to Todoist or Google Calendar unless you click. The conversation is kept in memory only and is gone when you close DayTrace; the database keeps only the cost of each request, never its text. Through Claude Code, the request is handed over in a temporary file in DayTrace's folder that is deleted as soon as the answer comes back.
The assistant's memory, with or without the AI: when you tell the assistant "recordá que…" ("remember that…"), when you accept a fact it offers to remember, or when you write one in Settings › DayTrace Assistant › Memoria, DayTrace keeps that short fact (up to 30, 160 characters each) in its database on your computer, never the conversation itself. A fact that names a password, a key or a token, or a PIN, a code, a card or a bank account together with a number or a value, or that contains an email address, a link (with or without "https://") or a long number (such as a phone, account or ID number), is not kept, whichever way it comes; the assistant tells you so. The duration you give a Todoist task in DayTrace (stretching it in Plan, answering how long it takes, or creating it with a length) is kept only on your computer, in DayTrace's own data folder, and is never written to Todoist; it is deleted two days after the task is no longer open. The facts are sent to the AI only as described above. If you turn on "Sync between computers", they also travel, encrypted, to your other computers and to your iPhone, as described under "Syncing your computers". You can see, edit and delete them in Settings › DayTrace Assistant › Memoria.
WhatsApp on Windows: only if you also turn on WhatsApp in Settings › DayTrace Assistant (off by default) and link it by scanning a QR code with your phone, DayTrace runs its own WhatsApp Web session with Microsoft WebView2, in its own profile folder inside the DayTrace installation (not your browser's). The page stays hidden. Without opening any chat, it reads the chat list (chat name, unread count, last line), the notifications the page would show (title and text; they are never displayed) and the page's own local message store, read only (for a chat whose new message mentions a day, a time or a place, is your reply to something you were asked in that chat or refers to something said before, also its earlier messages, as described above). A separate switch, off by default, lets it open for a few seconds only chats you have already read, to read the full text; it never opens a chat with unread messages, and if something may have been marked as read it turns that switch off and tells you. It never sends, writes or deletes anything in WhatsApp. Message text stays in memory until the next pass, which filters it as described above; DayTrace's database only keeps hashed references (and the name of a chat you marked "No leer este chat", while it stays blocked). "Disconnect" closes the session and deletes the profile folder; remove "DayTrace" from Linked devices on your phone as well.
Voice messages from WhatsApp (optional, off by default). If you turn on "transcribe voice messages", DayTrace downloads the voice notes of WhatsApp chats you have already read (chats that show no unread messages), through the WhatsApp Web session running on your computer. Only voice notes that arrive after you turn the option on, and at most from the last 3 hours, are downloaded. It does not open those chats and does not click anything: it reads which voice notes arrived from WhatsApp Web's own storage in DayTrace's browser profile, without changing it, and asks WhatsApp Web to download each file from WhatsApp's servers. Voice notes in chats you have not read yet are not downloaded until you read the chat on your phone. DayTrace does not use WhatsApp's audio player, and it does not use the WhatsApp Web function that asks your phone to send an expired file again: a voice note that is no longer available stays without text. If anything that could mean the chat was read or the voice note was played changes on the page while it is being downloaded, DayTrace turns the feature off and tells you. The audio is decoded and transcribed on your own computer with a local speech-recognition model (Whisper, run by transcribe.cpp) and is not sent anywhere. DayTrace itself does not write the audio to disk. The WhatsApp Web page it runs may keep a copy of downloaded files in its browser storage, which lives inside DayTrace's own data folder and is deleted when you disconnect WhatsApp in DayTrace. Only the resulting text, after the same filters designed to remove passwords, PINs, codes, long numbers such as account or phone numbers (also when spoken as words), email addresses and links, can be included in the request to the AI service, like any other message; the app log records only how many voice notes and how long they were, never their text. The speech-recognition engine and model are downloaded from their public sources (GitHub and Hugging Face) only when you press the download button, which shows their size and license first and verifies each file after downloading. No Google user data is involved.
If you connect Todoist, DayTrace reads your tasks through the Todoist API and keeps them on your computer. Only when you ask it to from the app, it can also complete a task, reopen it, change its date or time, create a task, edit its name, description, priority, labels or list (for example when you drag a task to another project's column in Plan › Projects, which changes the project code at the start of its name, a label or its list), delete a task it has just created (to undo it), turn a task into an event or an event into a task, and, when you create a project in DayTrace, create a label with that project's code in your Todoist (only if you don't have it yet; DayTrace first reads your labels to check); it never does it on its own. Once a day it also reads who you share your Todoist projects with, and keeps on your computer only each person's Todoist id, name and the projects you share. Only when you click, it can create a task assigned to one of them, with a date and no time, in the shared project it belongs to (Todoist notifies that person, and undoing it deletes the task but not that notification), or complete one of their tasks; it never moves or edits someone else's task. If you add a Google Sheets spreadsheet as a source of tasks, DayTrace also creates a task in your Todoist for each open task of that sheet.

Syncing your computers

Only if you turn on "Sync between computers" in Settings › Computers (off by default), each of your computers keeps its files in DayTrace's hidden folder in your own Google Drive, so the others know it is there, when you last used it, what it recorded each day, your list of projects, the facts the assistant remembers and your people.

What travels, for each computer: the name you gave it, whether it is Windows or a Mac and whether it is your main one, its DayTrace version and time zone, the last minute with keyboard or mouse activity, whether it is locked, when sync was turned on there and whether you disconnected it; and, for each Todoist task you gave a duration in DayTrace, only the task's Todoist id, that duration and when it was set or removed (never its title), so both computers show the same length; and the time DayTrace last changed something in your Todoist from that computer (only the time, nothing about the task), so your other computer reads your Todoist again within seconds.
Its time log, one file per day: when each stretch started and ended and whether it was in an app, idle, locked or off; the app and the window title in front; the site's address without its parameters; the project, activity and work type assigned, and how they were decided; and what DayTrace worked out from the window title, the site and the app itself: the code repository, the Nuke script or folder named in the title, the site's domain, the project or timeline the app says is open, the codes of your projects found in them or in a chat name read from the screen (only codes from your own project list) and, in Telegram, the chat name in the title. Windows you marked "Never record", windows whose code repository matches it, and private browser windows travel only as "(private)", without title, address or activity, also when they were recorded before you added them. With it travel, for each minute of that day, how many seconds had keyboard or mouse activity, and the times when you or they were active in Claude Code or Codex on that computer, with the tool and the name of the folder it worked in (for your code, the repository's name); a folder or repository that matches "Never record" travels as "(private)". Never the folder's path, the session, or anything typed to them or answered by them.
The rules you taught each computer and your answers to its notices. For each rule: what it looks at (the app, the window title, the site or its address, the code repository, the folder, the chat or the kind of time), how it compares and the value it looks for, the project, activity and work type it sets, whether it is on, whether you deleted it, and when it changed (never how many times it was used); DayTrace's built-in rules travel only if you changed them, and a rule whose value or activity matches "Never record" doesn't travel. Rules a computer already had when you turned sync on only add what the other one lacks; they never replace one of its rules. For reminders of events and Todoist tasks: a one-way hash of the event's identifier (never the calendar or the event id), its start time, when you closed it and until when you postponed it, with the option you picked. For the questions about your Todoist tasks and DayTrace Assistant's notices: today's and yesterday's answers, with the task's Todoist id, the kind of question, a one-way hash of what was on screen when it was asked (never the words, file, site or repository themselves) and its times; never a task title, and not a notice that is still on screen; and what you undid. When, on one computer, you assign a stretch recorded on the other, that stretch's id there, its start time and the project you chose travel too, and the other computer takes it as your answer.
Your list of projects (Settings › Projects). What travels, for every project in it except DayTrace's own categories (VA, Personal, Break and the like, which travel only if you changed them): its code, its name, its other names (aliases), whether it is a production or a Wanka project, its color and whether it is closed, each with the time it was set on that computer; when you change a project's code, the old code with the new one; and which projects you created in DayTrace. Never the order of the list, the color of Inbox, the context DayTrace copied from LGA Assistant for the AI service, anything read from the screen, or any Todoist or Flow id. For each of those details, the most recent change wins. What a computer already had the first time it ran this version of DayTrace, and the projects it imports later from LGA Assistant, only add what the other computer lacks (a project, or other names it doesn't have and you didn't remove there); they never replace what is set there. A code change is applied on the other computer only if nothing uses that code there either (recorded time, rules, open questions, unanswered suggestions or open Todoist tasks); otherwise that project keeps its code there. A color that arrives changes only DayTrace on the other computer: that computer never changes Flow (through PipeSync) or Todoist because of it; only the computer where you chose the color does, as described above. Projects that arrive are used like your own: in your rules, in Today, Week, Plan and Review, and in the list of projects that DayTrace sends to the AI service as described above.
If "Show notices only on the computer I'm using" is on (it is by default), while you use one computer the other keeps its notices hidden and shows them when you come back to it, so unanswered notices follow you to the computer you are using; it decides with the keyboard or mouse activity each computer shares (to the nearest ten seconds), and it never hides anything on a computer you touched in the last 30 seconds, so if you use both at once you see them on both. The notice of a meeting that starts within five minutes or is under way shows on both. If the other computer goes quiet, each one shows everything as before. When you answer or postpone a notice on one computer, the other closes or postpones it within seconds.
The message suggestions are made only on your main computer (Settings › Computers tells you if none is running them), also while you are using another computer that says, in its encrypted presence file, that it can receive them; they travel, encrypted like everything else, to your other computers, so you can answer them on the one you are using. For each suggestion not answered yet, what travels is what the notice shows and what it needs to act: who wrote, the chat or subject, the suggested task or event and its title, the sentence used as evidence (up to 200 characters), the place, a note, the project, the day and time, the meeting or map link, the id of the Todoist task or calendar event it refers to, and, for a task, the id of the Todoist list and, for a teammate's task, that teammate's Todoist user id; for a request from a chat or a promise of yours, also a mark of whether you missed it or said you were on it. The calendar of that event never travels by its id (for your main calendar that id is your email address): it travels as "primary" or as a one-way fingerprint (SHA-256) of its id, which the other computer matches against its own list of calendars. All this text first goes through the same filters as what is sent to the AI service, on the computer that sends it and again on the one that receives it: lines that talk about passwords, codes, keys or tokens are dropped, and email addresses, long account or ID numbers and phone numbers are replaced. Phone numbers are recognised when they start with "+" or have the shape of an Argentine number with its area code (for example "+54 9 11 5555-1234", "(011) 4555-1234", "11 5555 1234" or "15-5555-1234"); a short local number written without its area code, such as "4555-1234", is not replaced. The references to the messages themselves (Gmail, Telegram or WhatsApp ids) and the conversation never travel. With them travel your answers to suggestions from the last three days (which answer, when, and the id of what it created), what you postponed and what you undid. Suggestions that DayTrace closed on its own because a day passed or the task was already closed do not travel; but when the main computer sees that you already replied in the chat, or that what you were waiting for arrived, it closes the suggestion and your other computers close it too. Whatever an answer writes to Todoist or Google Calendar is written by the computer where you clicked, only when you click, and the other computer only takes note. To avoid adding the same task or event twice when you answer on both computers within seconds, before writing it fetches what the other computer answered (waiting up to five seconds if a sync is under way); a task created from a suggestion carries a short reference at the end of its Todoist description ("DayTrace ref: dt-" followed by twelve letters and digits, which is not sent to the AI service), and before creating one DayTrace reads your open Todoist tasks (up to 2,000) to look for that reference; and an event created from a suggestion gets an id derived from that suggestion, so Google Calendar refuses a second one in your main calendar. Two clicks on both computers within a second or two can still create two. A suggestion that came from another computer doesn't offer "No leer este chat" (the chats are read on your main computer). Suggestions received from another computer are kept in that computer's DayTrace data folder, like its own; after seven days DayTrace forgets which computer an answered one came from.
Text read from the screen (including the WhatsApp chat or Spark subject read from it and anything else mentioned on screen), the folder Explorer shows, screenshots, your keys, your Google and Todoist access, your tasks and events (other than those durations and the reminder and answer marks above) and messages (other than the message suggestions just described) don't travel.
Each computer keeps a copy of the other computers' time logs in its own DayTrace data folder, apart from its own, and shows them in a separate row in Today and Week. Your hours in Today, Week, Review and the day report add up both computers minute by minute: when only one was in use, that one counts; when both were, the one with more keyboard or mouse activity that minute (if neither, your main computer). Nothing recorded is changed, except when you reassign, on one computer, a stretch recorded on the other: the time that doesn't count on a computer is shown striped. When you come back to a computer after ten minutes or more away, it doesn't ask about the time you spent on the other one: it checks the folder right away and, if the other computer was in use meanwhile, checks again every twenty seconds, for up to two minutes, until its log arrives. If Google Drive asked DayTrace to wait, or DayTrace closes in the meantime, it asks as before about the time it can't account for. The activity of Claude Code or Codex on the other computer is shown in the Agents row, without adding hours. The other computers' logs don't go into your rules or AI requests. Rules that arrive from your other computer are used like your own to assign this computer's time; neither they nor your answers are sent to the AI service. If you join a different group of computers with another sync code, that copy is deleted from the computer.
Before anything leaves your computer, DayTrace encrypts it (AES-256, with an integrity check) with a key that only your computers have. The key is created on your first computer and you copy it to the other one yourself, as a sync code; each computer keeps it encrypted, like your other keys. Google stores only unreadable files, their sizes and dates, and names made only of a random computer id, the file's type and, for a day's log, its date. Neither Google nor I can read them.
Each computer checks the folder every minute while you use it and every five minutes otherwise, and right after you come back from ten minutes or more away, and uploads the current day's log when it changed (while you're away, a log that only grew longer is uploaded at most every fifteen minutes). In between, every ten seconds (every minute when neither computer was used in the last five minutes, or while it is locked), it asks Google Drive only whether any file in DayTrace's hidden folder changed, and reads what changed: so each computer knows within seconds which one you are using and what you answered on the other. If Google Drive doesn't allow that question, each computer reads the other's presence file directly instead. When you come back to a computer, it uploads its presence right away. When you turn sync on, each computer also uploads its earlier days once, in batches every fifteen seconds until it catches up. If Google Drive doesn't answer or asks DayTrace to slow down, it waits longer each time (one minute, two, four, then five minutes, or whatever Google asks for). Without a connection, each computer keeps working on its own and catches up later.
The facts the assistant remembers and your people. For each fact you asked the assistant to remember (on a computer or on the iPhone): an id, its text and when it was written; for each one you delete, only its id and when. For each person, organization or jargon term in Settings › Personas: an id, the name, up to three nicknames, what they do, whether they are work or personal and the project codes of the Todoist work lists you share with them, with when it changed; for each one you delete, only its id and when. On a computer the id is a one-way SHA-256 summary of the fact's text or the name when it was first saved (so the same entry on two computers is one); on the iPhone it is random. Each device uploads only what was created, changed or deleted on it (at most its 30 most recent facts), and for each entry the most recent version wins, so a deletion reaches your other computers and your iPhone, which delete it too; what a computer already had when you turned sync on only adds what the others are missing. The rules used to keep a fact are checked again before uploading and after downloading: a fact that names a password, a PIN, a code, a card or an account with its value, or contains an email address, a link or a long number, never travels, and a name, nickname or description that the filters described above would change (a phone number, an email address, an id or a secret), or that contains invisible control or formatting characters, is left out. A person's Todoist id (each computer links people to Todoist by name on its own), phone numbers, email addresses, WhatsApp or Telegram chats and the chats you marked "No leer este chat" never travel. What arrives is used exactly like what you entered on that computer, including in the assistant's requests to the AI described above, with the same limits and filters. The log records only how many arrived, never their text.
Nothing from this folder is sent to the AI service, except the projects, facts and people that arrive from your other devices: they join your own list of projects, facts and people, which are sent only as described above.

DayTrace for iPhone

The iPhone app shows your day (your Todoist tasks and your Google Calendar events), reminds you of them and lets you talk to the assistant. It does not record what you do on the phone and it does not read your messages.

Google Calendar. If you connect your Google account in the app, it asks Google for the same two permissions as the computers: to see your list of calendars (calendar.calendarlist.readonly) and to see and change events (calendar.events). It uses its own iOS sign-in with Google (with PKCE, and no client secret on the phone). It reads your calendars and their events (from yesterday to eight days ahead for Today, and month by month as you scroll the Calendar tab): title, time, place, meeting link, whether it has guests (not who they are), whether it repeats, who organizes it and its pop-up reminders. Only when you ask it to (a tap, a drag or a sentence to the assistant), it can create an event, move an event you own that has no guests and is not part of a series (as on the computers, without notifying anyone), and delete an event the app itself created (to undo it). It never changes an event with guests, someone else's event or an event that is part of a series.
Todoist. With the Todoist token you paste in the app's Settings, it reads your open tasks, your projects, your labels and your Todoist user (to tell your tasks from someone else's). Only when you ask it to, it can create a task (always in your own Inbox, never in a shared project), complete it, reopen it (to undo it), change its day, time or duration, and delete a task the app itself created (to undo it). It never completes or moves a task that belongs to someone else.
Apple Reminders. Only if you turn on "Move to DayTrace" in the app's Settings, and with the Reminders permission iOS asks for, the app reads the incomplete reminders in your default Reminders list (the one Siri uses) and moves only those created after you turned it on. Each one becomes a task in your Todoist (its title, its date and time, its notes as the description) and is then marked as completed in Reminders; the app never deletes a reminder and does not touch your other lists, older reminders or repeating ones. Nothing from Reminders is sent to the AI. The phone keeps the ids of the reminders it already moved for 60 days so it never moves one twice. Turning the switch off stops it; you can also remove the permission in the iPhone's Settings.
The assistant (Anthropic). Only when you speak or write to the assistant, the app sends one request directly to Anthropic's Claude API with your own API key (Claude Sonnet by default, or the Claude model you choose in the app's Settings); it does not go through any server of mine. Nothing is sent to the AI in the background. Each request carries what you just said; the last three exchanges of today's conversation; up to five things you told it today about what you are doing, with their time; the date, time and time zone; your project codes and names; up to 200 open Todoist tasks (title, project, day or time, duration, and whether it repeats or belongs to someone else); up to 100 Google Calendar events of the next 14 days (title, time and whether it can be moved); the facts the assistant remembers (the 20 most recent, up to 2,000 characters, checked again against the rules for keeping a fact); and, only when what you just said or one of your three previous sentences names someone or talks about assigning, up to 20 of your people (name, nicknames, what they do, whether work or personal, and the codes of the work lists you share with them). Places, descriptions, guests, email addresses, meeting links and Todoist or Google ids are never sent: the AI sees short handles instead of ids. Everything goes through the same filters as on the computers, which cut links, email addresses and ids and remove passwords, codes and keys; if what you said gives a password, a PIN, a code or an account number with its value, the request is not sent at all and the app asks you to say it without the number, and that turn is not sent later as part of the conversation either.
Voice. To turn your voice into text the app uses Apple's speech recognition. It asks for recognition on the phone itself whenever the iPhone supports it for your language, and then the audio does not leave the phone; if the iPhone has no on-device recognition for that language, the audio is sent to Apple's servers to be transcribed, as iOS explains when it asks for the permission. The app does not keep the audio. The voice that reads the answers aloud is the iPhone's own (AVSpeechSynthesizer) and runs on the phone. The Action button and the Lock Screen control open the app, and what you say after that is heard by the app. Siri and Shortcuts can also run three actions without opening the app, and only while the iPhone is unlocked: "Tell DayTrace" passes what you said to the assistant exactly as if you had typed it in the app (same filters, same request to Anthropic); "Add to DayTrace" creates a Todoist task or a Google Calendar event from your phrase, understood on the phone without the AI; and "What's on DayTrace" builds a summary of your remaining events and tasks for today or tomorrow on the phone. With these actions it is Siri that turns your voice into text and reads the answer aloud, and that answer includes the titles and times of your events and tasks; Apple processes this as described in its Siri privacy terms. On iPhones with Apple Intelligence, Siri can also choose these actions by itself when you ask for something about your tasks or calendar without naming DayTrace; the app only tells Siri, in a fixed text, which action does what. Siri's request and DayTrace's answer are then handled by Apple's models, on the phone or in Apple's Private Cloud Compute, under Apple's terms. Apart from the requests to Anthropic, Todoist and Google described here, DayTrace sends nothing else anywhere because of them.
What stays on the phone. Inside the app's own storage (shared only with its widgets): a copy of your tasks and events to show them without a connection, today's conversation and what you told the assistant today (both discarded the next day), the reminders you postponed (removed when they are due), your notice settings, the ids of what the app created (so that undo deletes only that), what the widgets show and, if you joined the iPhone to your computers, the facts the assistant remembers and your people. These files use iOS data protection. Your Anthropic key, your Todoist token and your Google access are kept in the iPhone's Keychain, only on that device: they are not included in iCloud backups or moved to another phone. "Disconnect" (Google) and "Remove" (Todoist) in the app's Settings delete them; if Google revokes the access, the app deletes it too. Reminders are local iPhone notifications, with no notification server. Deleting the app deletes its files. iOS may keep Keychain items after an app is deleted, where no other app can read them; if you install DayTrace again, the first time it opens it deletes any keys left from the earlier installation. To have the keys gone right away, use "Disconnect" and "Remove" before deleting the app.
What leaves the phone. Only the requests to Google, Todoist and Anthropic described here. The app has no analytics, no error reporting of its own and no third-party code. Crash reports are the system's: iOS keeps them on the phone and sends them to Apple only if you share analytics with Apple in the iPhone's Settings. The app's log never contains titles, tokens or the text of the conversation.
Syncing with your computers. Only if you join the iPhone to your computers with your sync code, it uses the same hidden DayTrace folder in your Google Drive (the drive.appdata permission, which only sees files DayTrace itself created) and the same encryption: every file is encrypted and signed on the phone with your sync code before it is uploaded, so Google only stores data it cannot read. The iPhone reads your computers' presence (which computer you used last, and when) and your project list. It uploads only three kinds of files: your answers to its reminders (a reminder closed, snoozed or undone, identified by a one-way SHA-256 summary of the calendar event or Todoist task, never its title, calendar or id), the time you told it you spent on something (start, end and project code, never the words you said), and the facts you ask its assistant to remember, change or forget (an id, the text and when; for a forgotten one, only its id and when), checked against the same rules as on your computers before uploading. It also reads, from your computers, the facts the assistant remembers and your people, organizations and jargon (as described under "Syncing your computers"), keeps them on the phone and uses them in its assistant, with the same limits as on your computers, and as hints for the speech recognition when you dictate (which, as described under "Voice", runs on the phone whenever the iPhone supports it for your language). Your computers check every file against a fixed list of fields and discard anything else. What you told the iPhone is shown in a separate "iPhone" row in Today and Week and counted in your totals only for the minutes when no computer had keyboard or mouse activity (on a day when a computer recorded no such activity at all, its own time counts instead); it is never sent to the AI and never uploaded again by your computers. The iPhone does not upload a presence of its own, your rules, your people, message suggestions or anything you say to the assistant other than the facts you ask it to remember, and nothing is ever deleted from your Drive. Until your computers run a version of DayTrace that checks these files, the iPhone uploads nothing.

What DayTrace does not do

It does not sell or rent your data, and it does not share it with anyone other than the services named on this page.
It does not use your data for advertising.
It does not use data received from Google APIs to develop, improve or train AI or machine learning models.

Google API Services User Data Policy

LGA DayTrace's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to show you the suggestions described above: it is not used to train AI models, not sold, not used for advertising, and not transferred to anyone except the AI request described above.

Disconnecting and deleting your data

Turn off "Sync between computers", or click "Disconnect this computer" (which also tells your other computers), in Settings › Computers at any time: DayTrace stops reading and writing its hidden folder, and nothing is deleted. To remove DayTrace's files from that folder for good (it has no trash), open Google Drive's settings, choose Manage apps and, for DayTrace, Delete hidden app data.
Disconnect your Google account from the app's Settings at any time. DayTrace then deletes the access it had stored.
Remove a spreadsheet from DayTrace's sources of tasks at any time: DayTrace stops reading it and writing to it.
Turn off "Read new messages", or disconnect Gmail, in Settings › DayTrace Assistant at any time: DayTrace stops reading your messages.
Delete any fact the assistant remembers in Settings › DayTrace Assistant › Memoria, or in the iPhone app, and any person, organization or jargon term in Settings › Personas, at any time. If you sync your computers, the deletion travels to your other computers and your iPhone, which delete it too.
You can also remove DayTrace's access from your Google Account at myaccount.google.com/connections.
Turn off "Write a report of each day" in Settings › Day report at any time: DayTrace stops writing day reports. The reports already written are ordinary files that stay where they are until you delete them; DayTrace never deletes them.
On the iPhone, disconnect Google or remove the Todoist token in the app's Settings at any time: the app deletes them from the Keychain. Deleting the app deletes the files it kept on the phone; do the above first if you want the keys gone right away, since iOS may keep Keychain items after an app is deleted (a new installation of DayTrace deletes them the first time it opens).
To delete everything DayTrace stored, uninstall it, delete its data folder (%APPDATA%\LGA\DayTrace on Windows, ~/Library/Application Support/LGA/DayTrace on a Mac), delete the day reports if you chose another folder for them and, if you turned on sync, delete its hidden data in Google Drive as described above.

Changes

If what DayTrace does with your data changes, this page is updated before that version of the app is released, with a new date.

Contact

Questions about this policy: info@lega.com.ar