Privacy and security
Daily Three is a free app for daily goals and reflection. This page explains, in plain words, what the app keeps, who can see it, and how it's protected.
What we keep
- Your account: your name, and the email from Apple, Google or the email you signed up with. With Apple, you can choose to hide your email.
- What you write: daily goals, takeaways, the "grateful for" line, weekly reflections, bigger goals and your bio.
- Photos you choose to add: your profile picture and story photos.
- Reminders: your reminder times, time zone, and a notification address for your phone if you turn notifications on.
We don't sell your information, show ads, or use tracking or advertising tools.
Who can see it
- Only you, unless you join or lead a team.
- Your team sees your name, picture, bio and progress percentages, plus only what you choose under "What your team can see": everything, today's goals only, or days and reflections. When you change it, your teammates' apps update right away.
- Stories are shared with your team for 24 hours, unless you save them to a highlight.
How it's protected
- Everything travels over an encrypted connection (HTTPS).
- Apple and Google sign-ins are checked with Apple and Google before you're let in.
- Email passwords are never stored. We keep only a salted, slow hash, so even we can't read them. Repeated wrong guesses are blocked for a while.
- Password reset links work once and expire after 30 minutes.
- Changing your password, or choosing "Sign out of all other devices", signs out every other phone or computer.
- Signing out removes your account and entries from that phone. They stay safe in your account.
Your choices
- Download a copy any time from Settings → Backup.
- Change what your team sees, or leave a team, from the Team tab.
- Delete your account from Profile → Edit profile, or Settings. This erases your account, entries, photos, cloud history and team links from our server for good.
Services we use
Daily Three runs on Cloudflare (the app) and Convex (accounts and syncing). Sign-in uses Apple and Google. Password reset emails are sent through Resend. The optional daily verse comes from the ESV API. These services only get what they need to do their job.
Last updated November 2026.