Privacy Policy
Your journal stays on your phone. We run no service that can receive it. An account exists only so that your name and settings survive a new phone.
Dailylet (“感恩日记”) is made by Max, an independent developer in Hangzhou, China (“we”). This policy explains what the app keeps on your device, what our servers hold, and what you can do about it.
What stays on this phone, and only this phone
Everything you write or record in Dailylet lives in the app’s own storage on your device: your journal entries and moods, your photos, wish walls and wish lists, breathing sessions, the things you love, the places you save (including their coordinates), your saved affirmations, and your badges.
We do not operate any service that can receive this content — there is no endpoint for it to go to. It is not backed up to us, not readable by us, and not shared with anyone. If you delete the app or lose your phone without a device backup of your own, we cannot restore it.
What your account holds
To sign in you give us a phone number or an email address. We store it encrypted, together with a one-way hash used to find your account. Alongside it we keep:
- what you choose to put in your profile: nickname, a line about yourself, pronoun, birthday, city and avatar;
- your app settings: reminder time, default breathing mode, sound and haptics, and which feature guides you have seen;
- basic device and session information — a device identifier generated by the app, device model, system version, app version, and a hash of your sign-in token — needed to keep you signed in and to let you sign out everywhere.
This exists so that a new phone can restore who you are and how you like the app set up — not to store what you wrote. Verification codes expire within minutes and are then discarded.
What we measure
We collect usage events, such as which screens are opened and that a breathing session of a given length finished. Each event carries the app’s device identifier and, while you are signed in, your account ID. Events are checked against a fixed list of allowed names and fields, and anything outside it is discarded before it is stored.
We never collect the text you type, your photos, your location, or which mood you recorded on which day. Usage events are deleted after 180 days.
Like any server, ours sees your IP address when the app connects. We use it to limit abuse (for example, too many verification-code requests) and it appears in short-lived server logs kept for security and troubleshooting.
Who else handles your data
We do not sell your data, show ads, or include any third-party advertising or analytics SDK. We rely on two service providers, who process data only to deliver their service to us:
- Alibaba Cloud — hosts our servers and avatar images, and delivers verification-code text messages to your phone number;
- Resend (United States) — delivers verification-code emails. Your email address is passed to it for that purpose only.
We may disclose information if the law requires it.
Where your data is stored
Our servers are located in mainland China. If you use Dailylet from elsewhere, the account information described above is transferred to and stored there. Your journal is not transferred anywhere.
Permissions the app asks for
- Photos (add only) — to save a wish wall to your library. When you add pictures to your journal, the system picker hands the app only the ones you choose; the app cannot browse your library. Pictures stay on your phone; only an avatar you choose is uploaded.
- Location (while using the app) — to mark a place you want to remember. The coordinates are saved on your phone only.
- Notifications — for the nightly reminder, which is scheduled on your device.
Each is optional, and you can change them at any time in iOS Settings.
Deleting your account
You can delete your account from inside the app (Me → Delete account). Doing so immediately signs out every device and removes your profile, avatar and settings; your account record is erased within seven days, and your account ID is detached from any remaining usage events.
The journal on your phone is yours to keep or clear — the app has a separate option to erase all local data, and deleting the app removes it too.
Your choices and rights
You can view and edit your profile in the app, and delete your account at any time. Depending on where you live, you may also have the right to request a copy of the account information we hold, to have it corrected, or to object to how it is used. Contact us and we will respond within 30 days.
Children
Dailylet is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change what we collect or how we use it, we will update this page and its effective date before the change takes effect.
Contact
Questions or requests about your data: reach us through the support page.