Privacy

Service notice · Updated 12 October 2026

This notice covers Dayroom’s website, browser and desktop apps, accounts, workspaces, conversations, imports, calls and connected apps.

Start with non-sensitive test conversations. Use fictional people and messages while evaluating Dayroom. Do not import counselling conversations, client records, health information or other confidential case material. Dayroom is in evaluation. Its account-erasure procedure and arrangements for confidential or regulated use have not been fully verified.

Who operates Dayroom

Dayroom is operated by Oluwafikayomi Adeleke in Lagos, Nigeria. Contact fikkyfresh81@gmail.com for privacy questions, access, correction or deletion requests. Describe the request and the account or workspace involved; do not email private conversations, passwords or identity documents in your initial message.

Information the service uses

Dayroom stores account and sign-in details, profile and character choices, workspace membership, preferences, messages, replies, reactions and uploaded files. Imports can include historical sender names, phone numbers, timestamps, conversation text and attachments belonging to people who do not have Dayroom accounts.

Calls can produce microphone excerpts, transcripts, summaries and action items when transcription is available and notes are on. Companion questions, answers and source references are stored. Connected apps supply the information requested through the permissions you grant. The service also uses session, security and operational records to authenticate requests, prevent abuse and operate the service.

Why it is processed

The service uses this information to run accounts and workspaces, deliver conversations and files, show presence, search accessible history, support imports and connected apps, generate AI answers and meeting notes, and maintain security. AI features can also extract tasks from conversation content automatically; processing is not limited to questions you type to the companion.

Who can access conversations

Room history is available to members with access to that room. Direct messages use conversation membership checks. Workspace owners manage membership and room lifecycle; being an owner is not a promise of access to every private conversation through the app.

Messages and attachments are not end-to-end encrypted. Dayroom’s server receives readable content and uses it for storage, search and AI features. People with authorized access to service infrastructure or backups may therefore be able to access that content. App permissions do not make it unreadable to the service operator.

People who can read content may copy or download it. Dayroom cannot erase copies they keep outside the service. Inviting someone to an imported group can give them access to its historical conversation, not only new messages.

Imports and historical identities

Only import conversations you are authorized to share with the intended members. Review the group and its history before inviting people. Choosing which historical sender represents you changes your personal view; it does not verify authorship for everyone or change another member’s view.

An imported export becomes a separate Dayroom copy. Deleting the original export or disconnecting Google Drive does not delete the imported room. A later export can update matching messages, but absence from an export is not treated as deletion.

AI and external services

Companion features can send relevant conversation text, attachments, connected-app results and your question to a configured AI provider. The implementation supports OpenAI and Google Gemini, with fallback between configured providers. Microphone transcription and supported audio/video processing can send media to Gemini. Answers and task records can retain information derived from these sources.

Optional organization model accounts and hosted agents introduce additional destinations. Review the destination and information involved before using them. External actions require review and approval; approval of an action is separate from AI processing needed to prepare an answer or draft.

The hosted service runs on Fly.io, with its current database volume in Amsterdam, Netherlands. That volume is encrypted at rest; provider tokens also have application-layer encryption. OpenAI and Google Gemini are configured for AI processing, including fallback. Twilio is configured to relay calls when needed. The public website uses Sites hosting on Cloudflare and its database services. These services may process information outside Nigeria. Provider-specific processing locations and contractual transfer arrangements have not been fully verified; do not infer that all processing stays in Amsterdam or that these are end-to-end encrypted services. Before confidential or regulated use, obtain the applicable processor and transfer arrangements. See OpenAI’s policy, Google’s policy, Twilio’s policy and Cloudflare’s policy.

Connected apps

Connecting an app grants the permissions shown by that provider. Depending on the app and permission, the companion can retrieve mail, documents, calendar events, file metadata, code-hosting records, customer records or listening activity. A personal connection does not automatically share its entire contents with teammates; information you post or include in shared outputs becomes visible there.

For a Drive import, you pick the export and Dayroom downloads it to process the import. Optional music sharing displays listening activity in the workspace and can be switched off.

Disconnect in Apps & connectors to remove the saved connection for that service and workspace. You can also revoke Dayroom’s access in the provider’s own settings. Disconnecting does not erase previous messages, AI answers, imports or backups. Provider credentials are stored encrypted; this does not mean all workspace content is end-to-end encrypted.

Canva, Figma and Fireflies

Canva access is limited to design metadata: titles, links, update dates and page counts. Dayroom does not read design contents, edit or export designs through this connector. Figma reads an explicitly selected file’s overview and recent comments; it does not modify that file. Fireflies reads meeting transcripts and summaries that the connected account can access. Connecting Fireflies does not make Dayroom start a recording or invite a meeting bot.

Browse results are retrieved on demand. When you ask the companion about connected information, relevant results can be included in its AI request and saved answer. Provider access remains subject to your permissions. Fireflies’ own zero-day-retention claims do not extend to Dayroom’s stored conversations or AI processing. You can use a connector’s private browser without posting its results to a shared room.

Call notes

“Take notes in every call” is on by workspace default; the workspace owner can switch it off. Notes require a configured transcription service. Calls display a Notes on indicator when active, including to people joining later.

Choose “Don’t transcribe me” to stop capture of your microphone for transcription and discard unsent excerpts. That choice survives a rejoin of the same call, can be reversed, and resets for a new call. Muted microphones are not captured for transcription. Opting out does not erase excerpts already sent or transcripts already stored.

Summaries are delivered to people who joined the call and identify participants who were not transcribed. A summary can still mention a person discussed by someone else.

Retention and deletion

Active and archived rooms retain their history. Muting only changes your notifications. Archiving makes a room read-only; it does not delete its content.

The workspace owner can delete a room after confirming its name. It disappears from normal access and can be restored as an archived room for 30 days. After that window, the maintenance process removes its stored messages, files and related records. This depends on successful cleanup; it is not a promise that every backup or external copy disappears on day 30. The last active room cannot be deleted or archived.

Temporary import files use separate cleanup rules, which depend on the upload path and maintenance workers. Imported history and retained import metadata are not temporary simply because the original upload has finished.

Accounts, active or archived conversations, retained imports and saved AI records do not currently expire automatically just because they are old. They remain until removed through the available controls or an applicable operator deletion process. Provider tokens remain until disconnected or removed; failed authorization attempts expire after ten minutes and are cleaned up when subsequent connection requests run. Application error records use a 30-day cleanup rule. Hosting and other providers may keep separate operational records under their own terms. The current Fly volume uses automatic snapshots with seven-day retention. An older snapshot can contain a record removed from the active database until the snapshot expires. Signing out, leaving a workspace or disconnecting an app is not complete deletion. A complete self-service account-erasure process and suppression of deleted records after a backup restoration have not been verified.

Access, correction and deletion requests

Email fikkyfresh81@gmail.com to request access to your information, correction, deletion, or to raise an objection or restriction request. Shared records can also contain other people’s information, so the scope and your authority must be checked before disclosure or removal. Do not assume that removing your account removes everyone’s shared history.

Requests are handled by the operator, who checks the requester’s identity and authority, identifies the affected account, shared records and providers, and explains the available action and any legal or technical limits. The complete erasure process and backup-restoration handling remain subject to verification; we do not promise immediate erasure of all copies. This does not limit rights or response obligations under applicable law. In Nigeria, you can also contact the Nigeria Data Protection Commission about a privacy concern.

Website storage and activity

The website optionally saves your chosen character in browser local storage. Clear it through your browser’s site settings. A character passed to the app travels in the link’s fragment rather than website analytics.

When enabled, website analytics stores daily totals for visits, browser opens, download interest and character changes, without an analytics cookie or third-party tracking script. It honors Do Not Track and Global Privacy Control. Requests still pass through the hosting service.

Abuse prevention uses a keyed network-address digest that changes daily and short-lived counters. Raw network addresses and request contents are not saved in the website analytics database. Expired digests are removed as later requests arrive and may remain while the site is idle. This describes website analytics, not all service logs.

Earlier waitlist details remain stored unless removed. You can request their removal using the contact above. The app also records account and workspace activity for the builder’s restricted analytics; those records are distinct from anonymous website totals.

Your choices and rights

You can disconnect optional providers, stop sharing music and use the call transcription controls described above. You may request information, access, correction, portability, deletion or restriction, and object to processing or withdraw consent where applicable. Withdrawing optional consent does not make earlier processing unlawful. Contact the operator or the Nigeria Data Protection Commission about concerns. Core account processing is necessary to provide the service you request; optional provider access follows the permissions you grant, and security records support operating and protecting the service. Applicable legal obligations can also require retention or disclosure.

Before sensitive use

Ask for the confirmed processor and country list, retention schedule, deletion procedure and applicable service agreement before bringing confidential work into Dayroom. A counselling team should complete its own confidentiality and data-protection review first. Removing names alone may not make a real case conversation anonymous.