Privacy policy

DayBy is owned and operated by Rubicon Microproducts Inc. (info@rubiconmp.com). It is an attention-monitoring platform for families, schools and clinics: interactive attention tests, stored results, and progress charts for the people you monitor.

For questions about this policy, contact us at info@rubiconmp.com.

Account data: the name and email address you use to sign up, and the spaces (family, school or clinic organizations) you create or join.

Monitored profiles: the first name or label, birth year and notes you enter for each person you monitor, plus their test sessions: dates, scores and detailed trial data such as reaction times and errors.

Operational records: timestamps and error summaries used to keep the service running, and feature requests you send us.

Community and collaboration data: posts, comments, reactions, reports of inappropriate content, space memberships, invitations and profile-sharing permissions. Clinician profiles include the name, credentials and specialty the clinician chooses to enter.

Tests taken without an account are not stored: the result is shown on screen and discarded when you leave the page. We only count that a trial test was started or finished, with a random browser identifier, to understand usage.

To run the service: store test results, show progress charts, and share a monitored profile with the care team you choose.

To keep the platform working and secure: monitor failures, prevent misuse, and enforce plan limits.

To manage subscriptions, renewals and support requests, and to understand trial usage, sign-ups and active spaces through aggregate usage statistics. Trial counting records the test identifier, whether it started or finished, and a random browser identifier, not the trial results.

We do not sell your data, and we do not use it for advertising or profiling. Test data is never used to train third-party models.

When you explicitly request an AI summary and confirm your authority to share the child's information, your entered results and observations, plus saved test measurements if selected, are processed by our AI service provider. This is optional and intended only to prepare a non-diagnostic draft for discussion with a clinician. Profile names, account identifiers and raw trial data are not included automatically. Do not enter identifying details in free-text fields.

The model endpoint used for summaries has zero data retention and requests disable model-side storage. Gateway operational records are subject to the workspace's privacy and retention settings. Draft inputs and outputs are not saved by DayBy to the child's history or care-team feed. A copied or downloaded summary remains under your control. AI summaries may contain errors and must be reviewed before sharing.

DayBy is used by adults to monitor people in their care, who are often children. Accounts are created by adults; a monitored child does not sign in and does not interact with us directly.

The adult or organization that creates a monitored profile is responsible for having the authority to do so. Schools and clinics must follow their own consent and privacy obligations when adding students or patients.

Forum posts and comments are public, can be read without signing in and may be indexed or copied by search engines and other visitors. The forum displays authors by role rather than name. This does not make your words anonymous: do not include names, private results or identifying details about a child or anyone else. We retain the account association needed for moderation and abuse prevention.

Space feeds are available to the space's members; care-team feeds and shared child profiles are available to people with access to that child. Clinician names can appear on connected care-team posts and in reports. Accepting a staff invitation joins the relevant space. Sharing a child with a school or clinic grants access to that space's authorized members, not just the person who sent the link.

When you download a PDF report or copy a summary, you control how that copy is stored and shared. Removing access in DayBy cannot delete copies already downloaded by recipients. Keep invitation and sharing links private and only send them to intended recipients.

Rubicon Microproducts Inc. uses cookies and browser storage to keep you signed in, keep your space secure and remember your language. A random browser identifier is also used to count trial usage as described above. Stripe may use its own cookies or similar technologies when you open payment or billing services; its privacy notice explains those practices.

On dayby.ca we use Google Analytics only if you choose Allow in the cookie notice. It counts visits and pages viewed with shortened IP addresses; no test results, child details or care-team content are sent. If you choose No thanks, it never loads. We do not use advertising cookies.

Paid plans use Stripe for secure payments. When you buy or renew a subscription, Stripe collects the details needed to take payment and meet tax rules: name, billing email, billing address and country, payment card or wallet details, and the tax identifiers you choose to enter.

Card and payment details are entered with Stripe and are never held by us. From Stripe we receive the information needed to run your subscription: the plan bought, its status and renewal dates, the billing email, country and a receipt or invoice reference. Stripe's privacy notice is available at https://stripe.com/privacy.

We keep subscription and customer references, the associated space, payment environment, plan, status, paid-period end and cancellation state to apply the correct access limits and reconcile billing. The Billing page is available to the space's owner. Subscription cancellation is not an account or profile deletion request. Our Terms explain CAD pricing, taxes, automatic renewal, changes at renewal and the 30-day money-back guarantee.

Rubicon Microproducts Inc. relies on performance of our contract with you to create and run your account, provide the platform, and manage your subscription and billing through Stripe; on our legitimate interests to keep the platform secure and reliable and prevent misuse or fraud; and on legal obligation where tax, accounting or other law requires us to keep or disclose records.

We apply technical and organizational measures appropriate to the data we hold: encryption in transit, encryption of data at rest with our hosting provider, access limited to the people who need it for their role, and per-organization separation of monitored profiles enforced in the database.

No system is completely secure, so we also keep the amount of personal data we hold to the minimum the service needs.

We use service providers to host the application and its database. They process data only to provide those services to us.

We share billing information with Stripe for subscription management, payments, tax compliance and invoicing.

Inside the platform, monitored profiles are shared only with the spaces you explicitly choose. Optional AI processing is described above. We may disclose information where the law requires it. We do not sell your personal data.

Rubicon is a Canadian business. Hosting, payment and optional AI providers may process information in other countries, where privacy laws can differ from those where you live. Contact us for information about processing locations and the arrangements relevant to your data.

Account data and monitored profiles are retained while your account is active, and deleted or anonymized within a reasonable period after your account closes unless you ask us to export them first. Billing and subscription records are kept for as long as tax and accounting law requires, then deleted.

Cancelling or downgrading a subscription retains your profiles and test history; additions beyond the free limit are paused once paid access ends. Community content, moderation records and operational records may have different retention needs. Legal obligations, dispute handling and security investigations may require some records to be retained after an account closes. Copies in backups may remain until the applicable backup cycle ends.

You can edit or delete monitored profiles and their test history inside the platform, and you can ask us at info@rubiconmp.com to correct, export or delete the data associated with your account.

Depending on the law that applies to you, you may have rights to access, correction, deletion, portability, restriction or objection, and to withdraw consent for optional processing. To exercise a right or raise a privacy concern, contact info@rubiconmp.com. We may need to verify your identity and authority over a child's information before responding. Some requests are subject to legal exceptions, including required billing-record retention. You may also complain to your local privacy authority.

We will update this page when our handling of information changes, and we will note the date of the change here.