Privacy

What we collect

Your account

You sign in with Google. Google gives us your name, your email address, a link to your profile picture, and whether the email is verified. Google also returns sign-in tokens; we store them encrypted and never use them to read anything else in your Google account.

Your sign-in sessions

Each session records when it started and when it expires, and the IP address and browser it signed in from, to keep your account safe. A session lasts 30 days from your last visit. Signing out ends it.

Your profile

Your role, seniority, the tools you use and how well you know them, time zone, reminder time, practice days, session length, focus areas, and theme. Also where you first found us, as a short name like “google” or “linkedin”, when your browser told us.

Your practice

The tasks you were given; your answers (the text, your choices, the lines you cited and the time you spent); their grades and feedback; grades you disputed and the reviewer's reply; your ratings and comments on tasks and reports on cards; your takeaways and card reviews; and your skill ratings, levels, self-ratings and streak.

Your work log

The lines you write about your day. The text is stored encrypted; the skill tags on it are stored as plain text.

Reminders

If you turn on reminders, we store your browser's push address and keys, and when a reminder last reached you.

Payments

Payments are not switched on yet. When they are and you subscribe to Pro, Razorpay takes the payment. We store only the subscription id and its status, with the plan (monthly or yearly) and the end of the paid period. We never see or store your card or bank details.

Messages to us

What you send from the contact page: your email, your name if you give it, the topic and the message.

The demo

You can try one task without an account. That answer is graded and not saved. To limit the demo and the contact form, we keep a scrambled code made from your IP address, never the address itself.

How we use it

• To run your daily sessions: pick tasks that fit your role and level, grade your answers, and show your progress.
• To send the reminders you turn on.
• To answer your messages and review grades you dispute.
• To keep dayjobreps working and safe: limit abuse, fix errors, and check that grading is fair and accurate.

We do not use your data for ads, and we do not sell or rent it to anyone.

AI grading

Written answers are graded by an AI model from OpenAI. We send the task, its rubric and your answer, and nothing that names you: no name, email or account id. We also send your work log lines to OpenAI to suggest skill tags for them; when the model is not available, a keyword match tags them instead. Quick checks and some drills are graded by fixed rules on our own servers, and code drills run your code in your own browser.

Your answers and work log are never sent to analytics.

Who else sees it

• The people who run dayjobreps. They can read your answers to review a grade you dispute and to check grading quality, and they read the messages you send us. In dispute review your email is shown masked.
• Services we use to run dayjobreps, only for that: Google to sign you in; OpenAI to grade answers and tag work log lines; Railway, where our servers and database run, so your data may be stored outside India; Razorpay to take payments once they are switched on; and your browser's push service (for example Google's for Chrome) to deliver reminders.
• Authorities, when Indian law requires it.

Nobody else. No advertisers and no data brokers.

Analytics

We count visits to our public pages ourselves, on our own servers: per day, the page and where the visit came from (a short name like “google”, or “direct”). No cookie, no visitor id, no IP address and no browser details are stored for this, and signed-in pages send nothing. There are no third-party trackers and no ad pixels.

When something breaks, we record the error and the page it happened on, with anything that looks like an email address, a key or a long number removed, so we can fix it.

Cookies and browser storage

• One cookie keeps you signed in. While you sign in with Google, a second cookie that lasts five minutes checks that the sign-in started here.
• Your browser stores your theme and code display settings, drafts of answers you have not sent, small markers so we do not show you the same note twice, and, for our visit counts, the dates of your first and last visit and where you first came from. So the app opens when you are offline, it also keeps copies of pages you visited. All of this stays on your device, except where you first came from, which is sent once when you create your account.

There are no advertising or tracking cookies.

How long we keep it

We keep your data while you have an account, and we do not delete quiet accounts on our own. When your account is deleted, we keep a record of the AI grading calls made for it (the model, its size and its cost) that no longer points to you.

Export and delete

In Profile, under Account, Export my data downloads a copy of your data as a file. Delete account removes your profile, answers, grades, skill ratings, self-ratings, work log, reminders, plan, the messages you sent us with your account's email, and your sign-in. It cannot be undone. If you pay for Pro, the subscription is cancelled first.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can:

• Access a summary of your data and who we share it with. Export my data gives you a full copy; ask us for anything else.
• Correct it. Change your profile in Profile at any time, and ask us to fix anything else.
• Erase it. Delete your account in Profile, or ask us to.
• Withdraw consent. Turn off reminders in Profile, or delete your account to stop everything.
• Nominate someone to use these rights for you if you die or cannot act yourself.
• Complain. Write to us on the contact page with the topic “Privacy or data request”. We reply within 7 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Age

dayjobreps is for people aged 18 or older. Do not use it if you are younger. If we learn that an account belongs to someone under 18, we delete it.

Security

Your data travels over encrypted connections (HTTPS). Our practice service is not public: only our own app can reach it. Work log text and Google sign-in tokens are encrypted at rest. No system is perfectly secure: if a breach affects your data, we tell you and the Data Protection Board of India, as the law requires.

Changes to this page

When we change this page, we update the date at the top. If a change affects how we use your data, we tell you before it applies.

Contact

Write to us from the contact page. We reply within 7 days.