Privacy policy
Last updated 17 October 2026
What My Summer Days collects, why we collect it, who it’s shared with, and your choices.
The short version
- We collect what you give us to plan trips, and little else. No ads, no analytics, no tracking, and we never sell your information.
- If you sign in with Apple, Google, Microsoft or Facebook, we get your name and email address from it, and nothing else we use.
- On a protected trip, addresses, booking references, notes and files are encrypted on your devices, and we can’t read them.
- Daydream sends your request and your trip’s plan to OpenAI in the United States, only after you agree. It leaves out the addresses and booking references saved on your trip, but not what you write into requests, titles or notes.
- Your data is stored in Japan and in Cloudflare’s Oceania region, and some of the companies we use are in the United States.
- You can see, correct and delete your information, and delete your account in Settings at any time.
1.Who we are
My Summer Days is run by Webnify Limited, a New Zealand company (company number 8181724). We’re responsible for the personal information described here.
Our privacy officer is our director. Write to them at support@mysummerdays.app with “Privacy” in the subject line.
2.What we collect
Your account
- Your name and email address.
- Your password, stored only in a scrambled form that can’t be read back.
- If you sign in with Apple, Google, Microsoft or Facebook, the name and email address that account shares with us, and an id it gives us for you. Apple lets you hide your email address, and then we get an address Apple forwards to yours. Anything else the company sends, such as a link to your profile picture, is kept with your sign-in but not used.
- Which version you have: when your trial started and ends, and whether you bought the full version or we gave it to you.
- Which version of our terms you accepted, and when, and that you confirmed you’re 18 or older.
- Your settings, such as your home currency, and whether you’ve agreed to Daydream sending requests to OpenAI.
Your trips
Everything you add: trip names, dates, places, plans, notes, addresses, booking references, to-dos, budgets and expenses, packing lists, and files such as tickets, photos and PDFs. This can include information about other people, such as who’s travelling with you.
Photos often contain information your camera stored, such as where they were taken. We keep files as you upload them, so people on the trip who open a photo can see that information too.
People we give the full version to
If we give someone the full version before they have an account, we keep the email address we gave it to, so it applies when they sign up.
The people you plan with
When you invite someone, we keep the email address you invited and email them the invite, with your name and the trip’s name. Everyone on a trip can see the names and email addresses of the others on it, and the trip’s history shows who changed what.
Daydream
Your requests, the details you pick (such as dates, who’s going, children’s ages, access needs, pace and budget), your conversations with Daydream, and the drafts and changes it suggests.
Purchases
Whether you bought the full version, where, and the payment’s reference, and your credit balance and history. For purchases on the website, Stripe gives us the payment’s reference, amount, currency and date. For purchases in the iPhone app, Apple gives us its transaction reference and a code that links the purchase to your account. For purchases in the Android app, Google Play gives us the order number, the purchase token and the same kind of code. We never see your card details.
Your devices
- The iPhone and Android apps keep the trips and files you save for offline use, your settings and your encryption keys on your phone.
- The website keeps your settings, unsaved edits and encryption keys in your browser.
- If you turn on notifications, we keep your phone’s notification token so we can tell you when Daydream finishes, and so that when someone changes a trip you’re on close to its dates, your phone can update its reminders. That second message carries the trip’s id and nothing else.
- Trip reminders are worked out and scheduled on your phone, from the trips on it. Nothing about them is sent to us.
When something goes wrong
If an error happens, we record a report with your account’s id (not your name or email), your device type, operating system, app version and the page you were on. Our hosting and database providers keep request logs, including IP addresses, for a short time to keep the service secure.
We don’t use analytics or advertising tools, and we don’t track you across other websites or apps.
3.How we use it
- To run the service: storing and syncing your trips, showing them to the people you share them with, and running the checks.
- To sign you in and keep your account secure.
- To run Daydream when you ask it to.
- To give your account the version it has, to sell you the full version and credits, and to keep your balance.
- To send emails about your account, such as confirming your address, resetting your password, telling you three days before your trial ends, and telling you about important changes.
- To send you news about My Summer Days, only if you ask for it. Every news email has a link to stop them, and so does Settings.
- To find and fix faults, and to prevent abuse.
- To keep the records the law requires, such as tax records.
We don’t sell your information, rent it out or use it for advertising, and we don’t use your trips to train AI.
We don’t look at what’s in your trips unless you ask us to help, we need to investigate a fault or abuse, or the law requires it. We can’t read the protected details on a protected trip at all.
4.Daydream and OpenAI
Daydream only sends anything to OpenAI after you agree. You can withdraw that agreement in Settings at any time.
- What’s sent: your request and the details you pick, including any children’s ages and access needs you add. To change a trip, its plan: places, dates, titles, times and ideas, and its notes unless the trip is protected. Recent messages in the same conversation go too, which on a shared trip can include what others wrote.
- What’s left out: the addresses, map coordinates, booking references, expenses and to-dos saved on your trip, and the names and email addresses of your account and the trip’s members. What you write in a request, a title or a note is sent as you wrote it, so leave out anything you’d rather OpenAI didn’t see. We send a scrambled form of your account id that OpenAI can’t trace back to you.
- At OpenAI: it processes requests in the United States, doesn’t use them to train its models, and may keep them for up to 30 days to check for abuse. We ask OpenAI to delete its copy of each reply once we’ve collected it.
- Looking up places: to suggest places, we look up the city you’re going to with Geoapify (OpenStreetMap data), Wikidata, OpenAI’s web search, Apple Maps and Viator. These lookups carry place and city names, never who you are.
On a shared trip, everyone on it can see the trip’s conversation with Daydream.
6.Sending information overseas
We’re in New Zealand, our database is in Japan, and several of the companies above are in the United States. We only use companies that protect your information in ways comparable to New Zealand’s Privacy Act 2020 and, for people in Europe and the UK, the GDPR. Where needed, they use safeguards such as standard contractual clauses or the EU–US Data Privacy Framework.
7.How long we keep it
| What | How long |
|---|---|
| Your account and settings, including your version and trial | Until you delete your account |
| An email address we gave the full version to before it had an account | Until that person signs up, or we end the gift |
| Trips, files and packing lists | Until you, or the trip’s owner, delete them. Deleted files are removed from storage within a day |
| A trip’s history | As long as the trip exists. The last 40 versions can be restored |
| Daydream requests, conversations and suggestions | 30 days after each request finishes. Drafts you don’t save, 30 days |
| At OpenAI | Up to 30 days, to check for abuse |
| Invitations | They expire after 14 days and are deleted 30 days after that |
| Purchase records | 7 years, as New Zealand tax law requires, even after you delete your account |
| An account restricted for breaking the terms | Its email address and the reason, until we lift the restriction, even after the account is deleted, so the address can’t be used to sign up again |
| Error reports and alerts | Up to 90 days in Sentry, and up to a year in Slack |
| Database backups | Up to 7 days |
| Hosting logs | A few days |
8.Deleting your account
You can delete your account in Settings on the website or in the app. When you do:
- each shared trip you own passes to someone still on it, and the trips only you are on are deleted, with their files;
- your packing lists, credits, full version, keys, settings and Daydream messages are deleted;
- your name is removed from the history of trips other people keep, which show “A former member” instead;
- purchase records stay for tax, no longer linked to your account here, though Stripe, Apple and Google keep their own records of the payment;
- copies in our backups are gone within 7 days.
Deleting from the app also clears what that phone kept. Other phones keep the trips and files saved on them for offline use until you remove the download from the trip, or delete the app. Signing out doesn’t remove them, but the app only opens them for your account.
If you sign in with Apple, you confirm the deletion with Apple, and we ask Apple to remove My Summer Days from your Apple account too. If you sign in with Google, Microsoft or Facebook, you can remove My Summer Days from that account’s security settings, so it stops treating us as connected.
9.Your choices and rights
- You can see, change and delete most of your information yourself, in your trips and in Settings.
- You can ask us for a copy of the personal information we hold about you, or to correct it. Email support@mysummerdays.app.
- You can withdraw your agreement to Daydream, turn notifications or news emails off, and stop sharing a trip or turn off its public link at any time.
In New Zealand
Under the Privacy Act 2020 you can ask to see and correct your information. We’ll reply within 20 working days. If you’re unhappy with how we handle your information, tell us first, and you can also complain to the Office of the Privacy Commissioner.
In the European Union and the United Kingdom
You have the right to access, correct, delete, restrict and move your information, and to object to how we use it. We rely on these legal grounds:
- Our contract with you, to run the service you signed up for;
- Your consent, for Daydream, including any access needs you choose to share with it, which you can withdraw at any time;
- Our legitimate interests, to keep the service secure, fix faults and prevent abuse;
- The law, to keep tax records.
You can complain to the data protection authority where you live.
In California
We don’t sell or share personal information for advertising. We don’t track you across other sites, so we treat browsers the same whether or not they send a Do Not Track signal.
11.Security
Everything travels over encrypted connections and is encrypted where our providers store it. Protected trips go further: their protected details and files are encrypted on your devices, and we can’t read them. Access to our systems is limited and protected.
No system is perfectly secure. If a breach is likely to cause you serious harm, we’ll tell you and the Privacy Commissioner, as New Zealand law requires, and the authorities that other laws require us to tell.
12.Children
My Summer Days is for people 18 and over. Adults planning a family trip may add their children’s names or ages. If you think someone under 18 has an account, tell us at support@mysummerdays.app and we’ll close it.
13.Changes to this policy
If we change this policy in a way that matters, we’ll email you at least 30 days before the change takes effect. The date at the top shows when it last changed. The Terms and conditions explain what happens if you don’t agree.
14.Contact us
Email our privacy officer at support@mysummerdays.app, or write to Webnify Limited, 27 Lynton Road, Mount Wellington, Auckland 1060, New Zealand.