Privacy Policy
Last updated: June 18, 2026
SallyRally ("we," "us") provides Daily Plan at sallyrally.com — a day-planning app that combines Google Calendar and Google Tasks in one daily view, with optional Maps-based drive-time estimates. This policy describes how Daily Plan accesses, uses, stores, and protects your information.
Scope of this product
Daily Plan is limited to calendar and tasks planning. It does not access Gmail, Google Drive, Google Fit, or other Google services. Only the features visible in Daily Plan on sallyrally.com are in scope for this policy.
At launch, Daily Plan requests read-only Google OAuth permissions only. The app displays calendar events and tasks; it does not create, edit, or delete calendar events or tasks through Google APIs.
Google OAuth permissions Daily Plan requests
If you choose Sign in with Google, Daily Plan requests exactly these two Google OAuth scopes:
https://www.googleapis.com/auth/calendar.readonly— see your calendarshttps://www.googleapis.com/auth/tasks.readonly— view your tasks
Google Calendar — read (calendar.readonly)
- Data accessed: timed events from your primary Google Calendar (title, start/end time, location, and event identifiers) within the date range Daily Plan displays.
- Why: to show your schedule and to calculate when you should leave for events that have a location.
- How used: displayed in the Daily Plan calendar column and used only for commute-time estimates. We do not modify your calendar events.
Google Tasks — read (tasks.readonly)
- Data accessed: your Google Tasks lists, task titles, due dates, notes, and completion status for items shown in Daily Plan.
- Why: to show tasks due today next to your calendar.
- How used: displayed in the Daily Plan tasks column. We do not create, edit, complete, or delete tasks in Google Tasks.
Data accessed (Google user data)
When you sign in with Google, Daily Plan accesses only:
- Calendar: event title, start/end time, location, and identifiers for events in the visible date range.
- Tasks: list names, task titles, due dates, notes, and completion status for tasks shown in the app.
Daily Plan does not access email, contacts, Drive files, fitness data, or any other Google user data beyond the two scopes above.
How we use Google user data
- Display your day: calendar events and tasks are shown together in Daily Plan so you can plan your day.
- Commute estimates: for events with a location, we use event location data (already in your calendar) with the Google Maps Distance Matrix API on our servers to estimate drive time and suggest when to leave. Maps is not a Google sign-in scope.
- No secondary use: we do not use Google user data for advertising, creditworthiness, profiling, or training AI/ML models.
Commute time (Google Maps — not a Google sign-in scope)
Drive-time minutes use the Google Maps Distance Matrix API on our servers when you provide an optional home or default origin address in Daily Plan. That address is stored for your account so we can estimate leave-by times. Maps requests use event locations already shown in your calendar; they are not shared with other customers.
Other information we collect
- Subscription email — from Stripe checkout if you subscribe ($2.99/mo). Used for billing and support only.
- Service logs — basic technical logs (errors, timestamps) to keep Daily Plan reliable. OAuth tokens are not written to application logs.
Data sharing
We do not sell Google user data. We do not share Google Calendar or Tasks content with advertisers, data brokers, or analytics resellers.
Google user data is not shared with third parties except service providers that host or bill the product (for example, Railway and Stripe) solely to operate Daily Plan, under our instructions and without independent use of the data.
Data storage and protection
- Google OAuth tokens — stored in secure HTTP-only cookies for your browser session on sallyrally.com until you disconnect or the session ends.
- Calendar and task snapshots — short-lived server cache so the app stays fast when Google is slow. Not a permanent backup of your Google account.
- Home / origin address — stored while you keep it set in Daily Plan for commute estimates.
- Transport security — Daily Plan is served over HTTPS. OAuth client secrets remain on the server only.
Data retention and deletion
- Cached calendar and task snapshots roll off automatically as the app refreshes.
- When you disconnect Google, session tokens on sallyrally.com are cleared.
- Revoke Daily Plan anytime in Google Account → Third-party access.
- To delete hosted caches, your saved home address, or billing records, email support@sallyrally.com. We respond to deletion requests within a reasonable time.
Google API Services User Data Policy
Daily Plan's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements:
- Google user data is used only for user-facing Daily Plan features described above.
- We do not use Google user data for ads, credit, or resale.
- Humans do not read your calendar or tasks except for security, legal compliance, or support you request.
Security
Report suspected account issues to support@sallyrally.com.
Children
Daily Plan is not intended for users under 13.
Changes
We will update this page and the date above if our use of Google data changes. New scopes or uses require an updated policy and, where Google requires it, your renewed consent.