Privacy policy

The data controller is OKSoftware Oskar Kumor, based in Poland. For any matter concerning your data, write to [email protected] — we reply within 30 days at the latest. The Polish version of this document is the binding one.

Only what the app needs in order to work:

• Account: your email address or the sign-in identifier from Apple or Google, your language and time zone.
• Content you create: tasks, goals and steps, dates, notes, and the history of conversations with the assistant in text form.
• Profile, if you fill it in: your name, the hours your day starts and ends, the style of replies, proper names that help speech recognition, the assistant voice you chose.
• Subscription: plan, status and renewal dates. We never see your card details — payment is handled by the app store.
• Usage: the number of conversations and their length, needed to account for plan limits.
• Diagnostics: crash reports, without the content of your tasks.
• Usage statistics — only with your consent, which you can switch off with one toggle in settings.

Voice: during a conversation the sound from your microphone is streamed live to the speech recognition and speech synthesis provider so that the assistant can understand you and answer. We do not keep recordings on our servers; we store the text of the conversation, which you can clear at any time.

• To provide the service: keep your account, save tasks, hold the conversation, send reminders (Art. 6(1)(b) GDPR — contract).
• To keep the service safe and working: abuse detection, limits, crash diagnostics (Art. 6(1)(f) GDPR — legitimate interest).
• To understand how the app is used — only with consent (Art. 6(1)(a) GDPR).
• To meet tax and accounting obligations related to payments (Art. 6(1)(c) GDPR).

We do not sell data, show ads or use the content of your tasks for marketing profiling.

We use providers that process data on our behalf under data processing agreements:

• Google Ireland Ltd. (Firebase) — database, sign-in and server functions. Data is stored in the European Union.
• ElevenLabs — speech recognition, the live conversation and the assistant voice.
• Anthropic — the language model that organises what you type in.
• RevenueCat, Apple and Google — subscriptions and payments.
• Sentry — crash reports.
• PostHog — usage statistics, only after consent.

Some of these providers are based outside the European Economic Area. Data is then transferred on the basis of standard contractual clauses approved by the European Commission.

• Tasks, goals, profile and settings — until you delete the account.
• Conversation history — until you clear it or delete the account.
• Crash reports — up to 90 days.
• Billing data — for the period required by tax law.

Deleting the account is immediate and irreversible: tasks, history and profile are gone.

You have the right to access your data, rectify it, erase it, restrict processing, port it and object, as well as the right to withdraw consent at any time.

• Deleting the account and all data: Settings → Delete account.
• Clearing the conversation history: Settings → Clear conversation history.
• Withdrawing consent to statistics: Settings → Anonymous usage statistics.

Send any other request to [email protected]. If you believe we process data unlawfully, you may lodge a complaint with the supervisory authority — in Poland the President of the Personal Data Protection Office (UODO) — or with the authority in your country.

Saylight is not intended for people under 16 and we do not knowingly collect their data. If we learn that such an account exists, we will delete it.

Connections are encrypted, only the owner of an account can access its data, and provider keys never reach the app on your phone. No system is fully immune, however — we will inform you without undue delay about a breach that could affect you.

When we change how data is processed, we will update this document and the date at the top. We will announce significant changes in the app.