Privacy — the plain version

Short, honest, and written to be read.

The public site

Everything outside My Toolkit works with no account, no cookies, no trackers, and no analytics. When you use the “Not sure where to start?” questions without signing in, nothing you tap is saved or sent anywhere. It runs entirely on your phone.

What we store if you make a Toolkit account

• Your email address.It is used for sign-in links and — only if you turn them on — the reminder emails listed below under “Emails we send.” We will never email you anything you didn't ask for.
• What you choose to save. Your items, people, links, lists, plan, and settings. We store the what, never the why — there is no field anywhere that asks you to explain yourself.
• When you last opened your toolkit.A date, nothing more. It is how we keep the 12-month promise under “Accounts that go quiet.”
• A short log of the emails we sent you.The kind of email and the date — not the message itself. Each entry is deleted after 400 days (about 13 months). You can see the log under “Export my data.”

That's it. A real name is never required. There is no tracking and no analytics behind login.

Three optional details, and exactly what they do

• Your ZIP code— used for one thing: sorting meetings closest-to-you first and showing the distance. If you use your phone's location instead, that happens on your phone only — coordinates are never stored or sent to us or anyone.
• Your testing color— used for one thing: telling you whether your color is on today's list. It appears only in the colors emails you asked for. We never share it with anyone else.
• Your court— used for one thing: showing your court's links and probation phone on your dashboard.

Each one is optional, each can be cleared in My Profile in one tap, and all of them are erased by “Delete everything.”

The no-browsing pledge

We do not read, browse, analyze, sell, or share what you save. Ever. The database is locked row by row so that your account is the only one that can read your rows. Your toolkit is yours.

Who handles the data

Three companies do the technical work. Each sees only what its job needs:

• Supabase runs the database and the sign-in system.
• Resend delivers the emails we send and keeps a delivery log.
• Cloudflare serves the website and runs the morning email job.

Like any email, the ones we send you can be read by your own email provider. Nobody else touches your data — no ad networks, no analytics companies.

Deleting everything

My Profile has a “Delete everything” button. One confirmation, then your account and every row of your data are permanently deleted, immediately. No waiting period, no soft delete, no backup copy we quietly keep. You can also download everything first with “Export my data.”

Accounts that go quiet

If your toolkit sits unopened for about 11 months, we email one warning. If it is still unopened at 12 months, we permanently delete it. We don't keep data around that nobody is using. A sign-in you started but never finished — you asked for a link and never opened it — is removed after 12 months with no warning email, because there was never an account to warn.

Emails we send — the complete list

• Sign-in links— every time you ask to sign in. That's how login works; there is no password.
• Calendar reminders— only if you turn on “Email me my calendar reminders” in My Profile, and only for items where you checked a reminder box: the evening before (around 6 pm) and/or the morning of (around 7 am), Detroit time.
• Sunday week-ahead— only if you set your schedule email to “Sundays”: one email Sunday evening listing your next 7 days. If your week is empty, we skip it — no email.
• Morning testing colors— only if you turn on a colors email. You choose: every morning, or only on mornings your color is called. Either way it arrives around 6 am with that day's colors and hours (or inside your 7 am daily email, if you chose one). If we can't verify the day's colors from the source, we say exactly that — we never show old colors as fresh, and we send that warning even if you picked “only when my color is called,” because on a morning we can't verify, your color might be on the list. If the color you saved doesn't exactly match a color on the list — a typo, say — we never guess: we email you to check the full list yourself. And if we ever discover the morning email got your called-or-not answer wrong, we send one correction the moment we catch it — wrong information never stands.
• Daily morning email— only if you set your schedule email to “Every morning”: ONE email around 7 am with colors on top (when enabled) and your day's calendar below. It replaces the separate colors and morning reminder emails so your inbox stays quiet. If we can't verify the day's colors, that warning sits at the top of this 7 am email — you won't get a separate 6 am email.
• One goodbye warning— if your account sits unopened for about 11 months, we email exactly once to say it will be deleted at 12 months unless you sign in. That's the “Accounts that go quiet” promise above, kept automatically.

That is the whole list. No newsletters, no marketing, no “we miss you.” Every one of these emails has a link to turn it off — except sign-in links, which only ever arrive when you ask for one.

Discreet by default

Unless you turn discreet mode off, every email subject line is exactly “Your 42DAY update” — nothing about recovery, courts, or appointments. What someone sees on your lock screen is a plain, boring subject.

The suggestion box

The “suggest a testing location” form is anonymous unless you choose to add contact info. Submissions can't be read back from the website by anyone. We keep them so a person can read and act on them. They are not tied to any account, so “Delete everything” doesn't touch them — to have your contact info removed, email us at the address below.

Questions

Email fix@42day.org. A person reads it.

Last updated September 9, 2026.