Privacy Policy
How we collect, use, and protect your information.
The international website uses Cloudflare to host its pages and store waitlist email addresses and signup times outside mainland China. These records are separate from application accounts and are used only to notify you when Sortday opens. Short-lived hashed IP identifiers and request counts help prevent abusive submissions. You can request deletion using the contact details below.
Your privacy matters to us. This Privacy Policy explains how Sortday ( https://sortday.com , referred to below as “we”) collects information when you use the Service, how we use and protect it, and what rights you have.
Last updated October 22, 2026.
Information we collect
If you join the website waitlist, we save the email address you submit and the time you join, solely to notify you when Sortday opens to users. Joining the waitlist does not create an app account. You can ask us to delete this record using the contact details below.
Account information: your email address, nickname, and login credentials provided when you register (passwords are stored in encrypted form; we cannot view them in plain text).
Content you create: tasks, lists, events, notes, and other data you record in Sortday. We use this content only to provide the Service to you.
Third-party calendar data: if you choose to connect a third-party calendar, such as Google Calendar, we sync calendar events within the scope of your authorization so you can view and manage your schedule in Sortday. You can disconnect it at any time.
Log information: to help protect the Service and troubleshoot issues, our servers automatically record access logs, such as IP address, access time, and browser type.
How we use this information
We use the information we collect only to provide and improve product features, protect account and service security, and contact you when needed (for example, for verification emails or notices about important changes).
We will never use your tasks, notes, schedule content, or synced third-party calendar data for advertising or user profiling, and we will not sell it to any third party.
Data storage and security
Your data is stored on servers we operate. We take reasonable security measures to protect it, including encryption in transit (HTTPS), salted password hashing, and encryption of third-party authorization credentials at rest.
No method of internet transmission or storage is completely secure. We recommend setting a strong account password and keeping your own backups of especially important information.
Sharing information
We do not provide your personal information to third parties except in these cases: essential service providers needed to provide the Service (such as email delivery services used only for verification codes and notification emails); third-party model providers involved when you use AI features (see “AI Features and Third-Party Model Providers” below); or when required by laws and regulations or by a lawful request from a judicial or administrative authority.
AI Features and Third-Party Model Providers
Sortday’s AI features, such as the AI agent, rely on third-party large language models. When you use an AI feature, your prompts and related content (such as task text or selected content) are sent to large language models provided by DeepSeek or Xiaomi, solely to generate the result you requested.
These model services all process data within the People’s Republic of China, and no data is transferred outside the country. We will not use your content for any other purpose beyond what is necessary to generate your result.
To keep improving the AI experience, Sortday provides a “Help improve AI” toggle under Settings → AI Features (on by default). When it is on, content you enter and generate through AI features may be used to improve AI service quality. You can turn it off at any time; after you do, we will no longer collect your content for this purpose.
Website analytics
We use our self-hosted Umami analytics to understand website visits, page views, referring websites, device and browser types, approximate region, and successful waitlist signups, so we can evaluate and improve the website. Website analytics do not use cookies or link to login accounts, and email addresses or task content you submit are not sent as analytics event data. Query parameters and fragments are removed from the current page URL before analytics are recorded.
Cookies and local storage
We use cookies and browser local storage to maintain your signed-in state and remember your preferences, such as theme and language. This data is not used for cross-site tracking. Disabling cookies may prevent you from signing in to and using the Service normally.
Your rights
You can access, edit, or delete content you create in the product at any time, and you can also close your account. After account closure, we will delete your account information and all content data, except where otherwise required by law. To export your data or exercise other rights, contact us using the details below. We will handle your request within a reasonable time.
Protection of minors
The Service is intended for users with full civil capacity. Minors under 14 must use the Service under a guardian’s guidance.
Changes to this Policy
We may update this Policy from time to time. When we do, we will change the “Last updated” date at the top of this page. We will notify you appropriately within the product if there are material changes.
Contact us
If you have any questions, comments, or complaints about this Policy or how your personal information is handled, email us at [email protected] .