Security and privacy
Your notes are yours. Full stop.
DayCarp is where you write what you really think about your day. So it’s built to keep your notes private, encrypted, and never for sale.
-
Private by default
Only you can see your notes. Nobody at DayCarp reads them, and there’s nothing to share by accident.
-
Encrypted
Notes, meetings and images are encrypted at rest with 256-bit keys, and everything travels over HTTPS.
-
Never sold, never trained on
We don’t sell your notes or personal information, show you ads, or use your notes to train AI models.
-
Audio stays on your device
Transcribe meetings on your own computer or phone. The audio never leaves it, and DayCarp never keeps a recording.
-
Your AI, your choice
Use DayCarp AI, bring your own API key, or connect a model you or your company host.
-
Leave anytime
Export everything to PDF or Markdown. Delete your account yourself, and your notes go with it.
Your notes
- Encrypted at rest and in transit. Your notes, meeting transcripts and images are stored encrypted with 256-bit keys, and every connection uses HTTPS. Images are sealed one by one with XChaCha20-Poly1305 and kept in private storage.
- Nobody at DayCarp reads your notes. The admin tools we use to run DayCarp are built without access to note text, transcripts or images: they see counts and dates, never what you wrote.
- Walled off from every other account. Row-level security in the database means each request can only reach the account that’s signed in.
- Never sold, never used for ads or AI training. Not by us, and not by the AI providers we use.
Meetings and audio
- Transcribed on your device. The speech model runs on your own computer or phone, so the audio never leaves it.
- No recordings, ever. DayCarp saves the transcript, encrypted with your notes. The audio isn’t stored anywhere.
- No bot in your meeting. DayCarp listens to your computer’s sound only while you capture. It never joins your call or starts listening on its own.
- You tell the room. With no bot in the call, nobody is notified automatically, so say you’re taking notes. Our guide to recording consent covers the rules in the US and Canada.
AI, on your terms
- Only what a request needs. When you ask for a summary or ask a question, only that text goes to the AI model, and only when you ask.
- DayCarp AI (on Pro and Ultimate) runs through the business APIs of providers such as OpenAI and Anthropic, which don’t use that data to train their models.
- Bring your own key. Connect your own OpenAI or Anthropic API key, so your requests go to your own account with that provider. Your key is encrypted separately and never shown again.
- Or keep AI in-house. Point DayCarp at a model your company provides, or one you host yourself (Ollama, LM Studio, vLLM or any OpenAI-compatible server), and your notes go only to that server.
- AI apps get read-only access. If you connect Claude or ChatGPT, you approve it on a DayCarp page, it can read but never change your notes, and you can disconnect it at any time.
Your account
- Strong sign-in. Passwords are hashed with Argon2id, and you can turn on two-factor sign-in with an authenticator app.
- Guarded against guessing. Sign-in attempts are rate-limited per address and per account.
- See where you’re signed in, and sign out any device from Settings.
- Payments by Stripe. We never see or store your card number.
Where your data lives
- Hosted in the United States on DigitalOcean (New York), by DayCarp, a Canadian company.
- Few hands. We share data only with the providers that run the service for us, under contract, and only as needed. They’re listed in our Privacy Policy.
- Export whenever you like, to PDF or Markdown. Nothing is locked in.
- Delete your account yourself in Settings. Your notes, meetings and images are deleted right away, and the subscription is cancelled.
Security questions
Can DayCarp employees read my notes?
No one at DayCarp reads your notes. Our admin dashboard is built without access to note text, transcripts or images, and our rules forbid looking at anyone’s content.
Do you use my notes to train AI?
No. We don’t train models on your notes, transcripts or images, and the AI providers behind DayCarp AI don’t either: their business APIs don’t use the data sent to them for training.
Is my meeting audio stored anywhere?
No. Transcription runs on your device, so the audio never leaves your computer or phone, and DayCarp saves only the transcript.
Do I need permission to capture a meeting?
Often, yes. In Canada and most US states one participant’s consent is enough, but some states need everyone’s, and businesses have privacy duties too. Our guide to recording consent for meeting notes explains the rules and what to say at the start.
Can I use DayCarp without sending notes to an AI company?
Yes. AI features only run when you ask for them, so you can simply not use them. Or, on Pro and Ultimate, connect a model your company provides or one you host yourself, and your notes go only to that server.
What happens to my data if I delete my account?
Deleting your account (Settings → Account) immediately deletes your account, notes, meetings and images from our live systems, and cancels any subscription. Backups expire on their own schedule. Export your notes first if you want to keep a copy.
Found a security issue?
Please tell us. We read every report, reply quickly, and fix what we find. Email us the details and how to reproduce it, and give us a chance to fix it before sharing it.
Give your next day of notes a safe home.
7 days of Ultimate. No credit card. A free notebook to keep.