Privacy policy

Who is responsible

Qorinx OÜ is the controller of the personal information used to operate Dayvia. Our Estonian registry code is 17422930 and our address is Sepapaja tn 6, Lasnamäe linnaosa, Tallinn, Harju maakond, 15551, Estonia. Contact [email protected] for privacy questions or requests.

Information the app uses

Account information includes your account identifier, email address, display name, sign-in method and account creation date. Firebase Authentication handles sign-in. If you use Apple or Google sign-in, we receive the identity information that provider shares with your permission, which can include an Apple private relay email address. You can optionally add a profile photo; the app removes embedded photo metadata before uploading a resized copy to private storage.

Travel information includes the flight dates and local times, selected cities or airports, time zones, trip names, usual bedtime and wake time, preparation and caffeine preferences, and guidance actions you mark complete. Plans are stored on your device and synchronized with your account through Cloud Firestore. Dayvia does not connect to HealthKit or Health Connect, measure your sleep, or ask for a medical diagnosis.

Purchase information includes store product and transaction identifiers, credits, access status, subscription expiry and refund information. Apple or Google processes your payment, and RevenueCat helps verify purchases and access. We do not receive your full payment-card details. We also receive the content and contact details you choose to send in a support message.

Notifications may use a device messaging token and locally scheduled reminder times. Reliability and security diagnostics can include errors, app and operating-system versions, device characteristics and an account identifier. Optional app analytics records screen views and feature interactions after you allow it. Analytics may include a device or app-instance identifier and approximate location derived by the provider; these records are not described as anonymous.

Location is optional

If you choose Use my location, Dayvia asks for foreground location permission to suggest nearby cities and airports. Coordinates are used on your device for that lookup and are not sent to our app server or stored as location history. The city or airport you select is saved with your trip. There is no background location tracking. You can search manually and revoke location permission in your device settings.

Why information is used

Account and trip details let us create, save and synchronize your plan and answer support requests. Purchase records let us grant access and handle refunds without granting a credit twice. Security and error information helps protect accounts and repair failures. The suggestions are generated from your itinerary and preferences; they do not decide your eligibility for employment, insurance or other legal rights.

For account, planning and purchase services, we rely on performing our agreement with you. Optional analytics uses consent. Security, fraud prevention and essential diagnostics serve our legitimate interests in operating a reliable service. Records needed to meet legal duties are processed on that basis. Essential account and itinerary details are needed to provide the corresponding feature; optional photos, location, notifications and analytics are not required. Device permissions can be revoked in settings.

Service providers and sharing

Google Firebase supplies authentication, account and trip storage, private photo storage, messaging, analytics and security services. RevenueCat verifies purchases and manages access information. Apple and Google handle store purchases and any sign-in you choose. Qorinx operates its Sentry diagnostics service at sentry.qorinx.com. Cloudflare and our website hosting provider handle website delivery and security. Our email provider processes messages you send us.

Providers receive the information needed for their role. App stores and identity providers also process information under their own privacy policies. We may disclose information to comply with a lawful requirement, investigate fraud or protect users. A transfer of the business may involve relevant records subject to applicable safeguards and notice. We do not sell your personal information or use your trip and routine details for advertising.

Website analytics and cookies

The website stores your privacy choice in your browser. Google Analytics, delivered directly or through Google Tag Manager, loads after you allow analytics. It measures page visits, language choices, preview interactions, navigation and app-store link clicks. Our custom events exclude message contents, email addresses, trip details and URL query parameters. Google can also process browser and device information, cookie identifiers and approximate location. The app has a separate optional analytics choice in Settings.

Choose Privacy choices in the footer to change website consent, or use the app’s analytics setting for app consent. Rejecting analytics does not prevent normal use. Your browser preference remains until you change it or clear site storage. Analytics cookies may remain until they expire, are cleared by your browser or are removed when you withdraw consent. Hosting and security services can process IP addresses and request information to deliver the site. Email links only open a draft in your email application; you decide whether to send it. We do not run session replay.

Retention and deletion

Account, profile, routine and cloud trip data is kept while needed to provide your account, unless you remove it or request deletion. Request account deletion in Settings or email [email protected] from your account address. If an in-app request cannot be completed, use email. An accepted in-app scheduling request gives you a deletion date 30 days after the request; cleanup follows that date. We can help with an earlier deletion request by email. Profile photos are included in account cleanup. Deleted or replaced photo copies may remain in restricted storage for seven further days before that storage removes them. Offline copies on other devices remain until cleared there.

Account deletion does not erase every record held by a store or service provider. Limited transaction records are retained for payment reconciliation, refunds, fraud prevention and legal record-keeping. A limited account identifier and deletion record are retained where needed to prevent deleted accounts being recreated by old requests. Support records are retained while resolving your request and any related dispute; security and diagnostic records while needed to investigate failures or abuse. Retention depends on unresolved transactions, applicable legal duties and whether the identifying information is still necessary. Backups and provider records can have separate deletion cycles. We assess removal requests for these records as well and explain any exception that applies. Ask us for the status of your request or the retention period applicable to a particular record.

Your choices and rights

You may ask to see, correct, export or delete your information, restrict processing or object to processing based on legitimate interests. Withdraw analytics consent in Settings or Privacy choices; withdrawal does not undo earlier lawful processing. Email [email protected] to exercise your rights. We may need to verify account ownership. Where GDPR applies, we respond within one month and explain any permitted extension. You can complain to Estonia’s Data Protection Inspectorate at aki.ee or your local supervisory authority.

You can edit your profile and trips, manage device permissions and request deletion without reinstalling the app through our deletion page. Deleting Dayvia or your account does not cancel an Apple or Google subscription. Manage renewal separately in your store account. Do not send a password or full payment-card information with a privacy request.

Security and international processing

Dayvia’s Firestore database and profile-photo bucket are located in the Netherlands. This does not mean that all processing stays there: authentication, purchases, diagnostics, email and infrastructure providers may process information in other countries. Applicable international-transfer safeguards can include an adequacy decision or approved contractual clauses. Contact us for information about the safeguards relevant to your data. We use account-based access controls and secure connections to our app services. No system can guarantee complete security.

Adults and policy updates

Dayvia is intended for adults aged 18 and over. We do not knowingly offer accounts to children; contact us if a child has supplied personal information so we can investigate and arrange removal. We update this policy when our practices change and show the revision date above. We will give additional notice or request new consent where required.