Your day is yours. So is the data behind it.

Cupkey is a day planner operated from Chennai, India, at cupkey.io. Where this page says “we” or “Cupkey”, that is who it means. Where it says “you”, it means whoever holds the account.

For anyone in the UK or the European Economic Area, Cupkey is the data controller for everything described here. For anyone in India, we handle personal data in line with the Digital Personal Data Protection Act, 2023.

Cupkey plans a day against real hours, so nearly everything we hold is either work you wrote down or time you have left.

We do not ask for government ID numbers, health information, or anything else in a special category, and we would rather not have them. Please keep that sort of thing out of your task titles.

To run the product: packing tasks into the hours you actually have, warning you at the cap, timing what you start, closing the day, producing the Friday sheet, and keeping your streaks honest.

To bill you, if you are on a paid plan, and to tell you when a payment failed or a price is about to change.

To email you about the service itself, and separately, only if you asked for it, product news you can unsubscribe from in one click.

To see in aggregate which parts of Cupkey get used, so we build the right things next, and to keep accounts secure, investigate abuse and meet our tax and legal obligations.

Our legal bases, where that language applies: performing our contract with you for anything the planner needs to work, legitimate interests for analytics and security, consent for optional cookies and marketing email, and legal obligation for accounting records.

Cupkey only works if it knows which hours are already gone, which is why it reads your calendar. That access is read-only by default. We do not create, move or delete events, and nothing is written back unless you switch on two-way sync yourself in settings.

We read event titles, start and end times, and your attendance status, for one purpose: blocking out time so your tasks land in gaps that genuinely exist. Calendar data is never used for advertising, never sold, and never used to train any AI model.

Cupkey’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect a calendar at any time in settings, or revoke access from your Google or Microsoft account directly. When you do, we stop reading it and delete the events we had cached.

If you never connect a calendar, Cupkey still works. You just enter your working hours by hand.

Cupkey’s AI features turn work you have already finished into something readable: a summary for an appraisal, a record of a role for an interview, a recap you can post. They belong to the Pro plan and are not live yet.

When they are, this is how it will work. The task titles and timing records needed for the specific summary you asked for are sent to our AI provider through its commercial API. Only the fields that summary needs go, and nothing goes at all until you ask for one. Under those commercial terms the provider does not use your data to train or improve their models, and does not keep it beyond returning the result.

Free accounts are never sent to an AI provider.

We do not sell personal data and we do not share it for anyone else’s advertising. It reaches four kinds of third party and no others.

Companies that run parts of Cupkey for us. Hosting and databases, payment processing, product analytics, email delivery, and AI summaries once Pro ships. Each is under contract to process data only on our instructions.

Services you connected yourself. Google Calendar, Outlook, and anything else you authorise later. You control these and can revoke them.

Authorities, where the law requires it. We check that a request is valid and narrow before answering it, and we tell you it happened unless we are legally barred from doing so.

A buyer, if Cupkey is ever sold or merged. You would be told before your data moved, and this policy would keep applying until you were given a new one to accept.

If you are on a team plan, whoever administers it can see that your seat is active and any timesheet you choose to share. They cannot read tasks you have not shared.

Cupkey’s databases are hosted on cloud infrastructure run by our hosting provider. Because some of our service providers operate elsewhere, your data may be transferred outside the country you live in. Where that involves the UK or the European Economic Area, those transfers are covered by Standard Contractual Clauses or an equivalent safeguard. Where it involves India, they are made in line with the Digital Personal Data Protection Act, 2023.

While your account is open we keep your data, because a planner without your history is not much of a planner. The point of the Friday sheet is that last Friday is still there.

When you delete your account, deletion is scheduled 30 days out. During that window you can change your mind and get all of it back. After it, your tasks, timing records, cached calendar events and profile are permanently removed from our live systems, and from backups within a further 7 days.

Two things outlive that. Invoices and payment records, which we are required to keep for 8 years for tax purposes, and anonymised usage counts that can no longer be tied back to you.

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or hand it over in a portable file. You can object to processing we do on legitimate-interest grounds, ask us to restrict it, and withdraw any consent you gave. Export and delete are both buttons in settings, so you do not have to email anyone to use them.

If you would rather ask us directly, write to hello@cupkey.io. We answer within 30 days and we do not charge for it, and we will not treat you differently for asking.

In the UK or the EEA you can also complain to your local supervisory authority. In India, to the Data Protection Board of India. We would rather you came to us first, but it is your call.

In California you have the right to know, delete, correct, and opt out of sale or sharing. We do neither, so there is nothing to opt out of, but we honour Global Privacy Control signals as an opt-out of optional analytics cookies anyway.

Data is encrypted in transit with TLS and at rest on our databases. Access to production is limited to the people who need it, protected by multi-factor authentication, and logged. Calendar tokens are stored encrypted and scoped to the least permission the integration can work with.

No system is perfectly secure and we are not going to claim otherwise. If there is ever a breach affecting your data, we will tell you and the relevant regulator without undue delay, and within 72 hours where that deadline applies to us.

Essential cookies keep you signed in and keep the app working. They cannot be switched off, because without them there is no session.

Analytics cookies (Google Analytics) tell us which pages get visited and which features get used. They are on when you arrive, and you can switch them off anytime from the cookie settings link in the footer.

Marketing cookies from Google Ads and YouTube, Meta, LinkedIn and X tell us which videos and posts brought you here, and let us show Cupkey ads to people who have visited before. They are off until you say yes, and you can change your mind from the same link.

Cupkey is built for people with a working day and is not directed at children. You need to be at least 16, or older where that is the age of digital consent, to hold an account. If we discover we are holding a child’s data, we delete it.

When this policy changes we update the date at the top. If a change actually affects you, meaning new data, a new purpose or a new recipient, we email you and show a notice in the app at least 14 days before it takes effect. We will not quietly broaden what we collect.

Questions, requests or complaints about any of this go to the same address as everything else. A person reads it.

Cupkey (cupkey.io), Chennai, India.