Privacy notice

What we process

Only what the product needs in order to work and to charge you. Nothing is collected “for later”.

• Your email address and sign-in credentials, handled by the authentication provider.
• The days you record: date, client, engagement, activity type, the place you type, notes, and the resulting pay.
• The documents you upload, where your subscription includes them.
• Minimal technical data for syncing: device identifier, app version, outcome of each operation.

Why, and on what legal basis

Every processing operation has a purpose and a legal basis under Article 6 of Regulation (EU) 2016/679. These are they, and there are no others.

• Running the product and giving you what you subscribed to — recording days, computing pay, syncing devices, answering you when you write: performance of the contract.
• Charging you, issuing tax documents and keeping them for as long as the law requires: legal obligation.
• Keeping the service standing and protecting it — minimised diagnostics, abuse prevention, backups: legitimate interest. The interest is that your record is not lost and that the service is not used against you, and the processing is the least that achieves it.
• The features you switch on yourself — reading a receipt you photograph, place memory on the phone, and in future connecting Google Calendar: consent, which you can withdraw at any time without losing the rest.

If you signed up early, before we opened

While Giornata is not yet open to everyone, the public page collects only your name and your email address, and it collects them with your consent, which is the legal basis: the box is not pre-ticked, and there is no way to leave your details without ticking it.

They serve one purpose: writing to you when you can open your account. They go into no newsletter, they are sold or shared with nobody, and they are combined with nothing. The request arrives as a message to the controller and is kept in no store inside the product: once the invitation has gone out, the message is deleted and your details with it.

You can ask to be removed at any time, by replying to that same email or writing to the address below. You do not have to explain, and you lose nothing.

What we do NOT process

Giornata operates no cloud timeline of your location. Place-memory features live only in the device’s private storage: they are stored in no Giornata table, in any environment, and never appear in analytics, logs, crash reports, backups, exports or support tooling.

We do not profile, advertise, sell your data, or hand it to anyone for their own purposes.

No automated decisions about you

Giornata makes no automated decisions producing legal effects concerning you or similarly significantly affecting you, and does not profile you.

Reading a receipt automatically and suggesting a work day propose, and nothing more: they fill in fields you can see and correct, and those become a fact only when you confirm them. No pay is ever computed from a value you have not confirmed.

Who processes it for us

Only these providers, each under contract and with a defined role. No others.

• Supabase — database, authentication and document storage.
• Vercel — hosting for the site and the web application.
• Resend — service email delivery.
• Purelymail — the mailboxes we answer you from: if you write to us, your message and your address pass through it.
• Backblaze B2 (EU Central, Amsterdam) — database backups and the deletion journal.
• Stripe — payments on the web.
• RevenueCat, Apple, Google — purchases made inside the apps.
• Cloudflare Turnstile — the anti-bot check when you create an account, on the site and in the app. It receives the technical signals of the device you are signing up with and, from our server, the IP address and a one-time token: no name of yours, no email address, no Giornata data, because the account does not exist yet at that moment. The service is United States based, so those signals leave the European Union. It plays no part when you sign in to an account you already have, or when you sign in with Google.
• Anthropic — reading a receipt you photograph. It receives one photograph at a time plus the codes of your expense categories, and nothing else: no work day, no pay, no document, no name of yours and no address. The service is United States based, so that single image leaves the European Union. The reading itself keeps no copy: the photograph passes through the request and is written to no table, no log and no attachment. If you then choose to attach that same photograph to the expense as its receipt, that copy stays, in your document space. You can take it off the expense whenever you want; the file is not deleted at that moment — it follows Giornata’s retention rules and is removed when the period that applies to it ends, unless a retention obligation requires it to be kept for longer. At Anthropic the transmitted copy is kept for 30 days and is not used to train their models — verified in the provider’s console on 29 August 2026.
• Google Calendar — not active yet: the feature is not available, so no data reaches Google today. When it arrives it will be only if you connect it, and outbound only.

When data leaves the European Union

The database, authentication and your documents stay in the European Union. Two things leave it, and we name both.

In both cases the transfer rests on the standard contractual clauses approved by the European Commission, which are part of each provider’s data processing agreement. You can ask us for a copy of the safeguards in place by writing to the address above.

• The photograph of a receipt you choose to have read: one image at a time, to a United States provider.
• Backups, which sit in Amsterdam but with a United States company: the bytes do not leave Europe, the company does, so US law can reach it.

For how long

Your work data stays as long as your workspace exists: it is your record, and deleting it on our own would destroy your economic history.

Technical diagnostics have a short, fixed life: 35 days when tied to a workspace, 90 days for anonymous aggregates. No content from your days goes there.

When you ask for your account to be deleted, the deletion is recorded in a journal that lives outside the database, so restoring a backup cannot bring back what you deleted.

The records of your subscription and your payments are the exception: when the workspace is deleted they stay, kept apart from everything else, for 10 years from your last payment or billing event, and are then deleted. Nothing about your work is in them.

Where it lives

The database and your documents are in the European Union. Backups are in Amsterdam with a United States provider, so US law may reach that provider — a deliberate choice we would rather state than bury.

What stays in your browser and on your phone

Giornata uses no analytics, profiling or advertising cookies, and hosts no third-party tracker. There is nothing to accept, which is why we ask you nothing. The only outside service a page loads is Cloudflare Turnstile’s anti-bot check, and only on the page where you create an account: it is there to stop automated sign-ups, not to follow you.

What stays is technical and is what keeps you signed in: your session and your interface preferences live in the browser’s local storage or in the phone’s keychain, and the days you record stay on the device so the app works without a network. When you sign out, the session goes.

Your rights

You can ask to see your data, correct it, export it, restrict or object to its processing, and delete your account. Write to the address above: we answer within one month.

You may lodge a complaint with your national supervisory authority — in Italy, the Garante per la protezione dei dati personali.

You may also withdraw at any time a consent you gave us, without affecting what was done before the withdrawal.

And exporting your data is never priced and never depends on your subscription: reaching your own record is a right, not a feature to sell. It holds during the trial, after it, and until the last instant before a deletion.

Security

Every row is protected at row level: another workspace cannot read yours even knowing the right identifiers. Uploaded documents are never public and never have a shareable link: every access is authorised at the moment it happens.

If something goes wrong

If a data breach is likely to put your rights at risk, we notify the supervisory authority within seventy-two hours of becoming aware of it.

If the risk to you is high we write to you directly, not on a page you would have to think of re-reading: what happened, what it touches, what we are doing and what you can do.

Not a service for minors

Giornata is a work tool and is not intended for anyone under sixteen. We do not knowingly process children’s data, and if we find that an account belongs to a minor we close it.