Back to Home

Privacy Policy

Last updated: January 1, 2025

1. Introduction

Welcome to Daelo ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our habit tracking application.

Data Controller

The data controller responsible for processing your personal data is:

Daelo
Contact email: contact@daelo.app

Data Processing Agreements (DPAs)

We use vetted service providers to deliver the Service (e.g., payment processing, hosting, and email delivery). We have Data Processing Agreements in place with our processors where required by law. A copy of our Data Processing Addendum is available on request at contact@daelo.app.

You can also review a summary on our DPA page.

2. Information We Collect

Personal Information

We collect information that you voluntarily provide to us when you:

  • Register for an account (name, email address)
  • Use our services (habit data, mood entries, journal highlights)
  • Subscribe to a paid plan (payment information processed by Stripe)
  • Contact us for support at support@daelo.app

Sensitive Personal Information

Some information you choose to store, such as journal entries or mood data, may contain sensitive personal information. This data is only processed to provide the intended functionality of the application and is not analyzed for advertising or profiling purposes.

Automatically Collected Information

When you access our application, we may automatically collect:

  • Device information (browser type, operating system)
  • Usage data (pages visited, features used)
  • IP address and approximate location

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our services
  • Process your transactions and manage your subscription
  • Send you important updates about your account
  • Improve our application and develop new features
  • Respond to your inquiries and provide customer support
  • Ensure the security of our platform

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

  • Performance of a contract: To provide core functionality such as habit tracking, journaling, and account management.
  • Consent: Where required, such as for optional features, analytics cookies, or communications.
  • Legal obligation: To comply with applicable laws and regulations.
  • Legitimate interests: To improve our services, ensure security, and prevent fraud, while respecting your privacy rights.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service Providers: Third-party vendors who assist us in operating our application (e.g., Stripe for payments, hosting providers)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Current subprocessors we use include:

  • Stripe: Payment processing
  • Vercel: Analytics

6. International Data Transfers

Some of our service providers, such as payment processors and hosting providers, may process data outside the European Economic Area. When this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Data Breach Notification

If we become aware of a personal data breach, we will notify the relevant supervisory authority and affected users as required by law.

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

10. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Portability: Request transfer of your data to another service
  • Objection: Object to processing of your personal data
  • Restriction: Request restriction of processing
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time

You can download your data and delete your account from the Settings page in the app. For any other requests (access, correction, restriction, or objection), contact us at contact@daelo.app. We respond within 30 days.

11. Cookies

We use cookies and similar tracking technologies to enhance your experience. These include:

  • Essential Cookies: Required for the application to function properly (authentication, security)
  • Preference Cookies: Remember your settings (e.g., theme preference)
  • Analytics Cookies: Help us understand how you use our application. These are only used where permitted by law and, where required, with your consent.

We ask for analytics consent through a cookie banner and store your choice in your browser. If you decline, we do not load analytics cookies. You can withdraw consent by changing your browser settings or clearing local storage.

You can manage or withdraw your consent at any time through your browser settings. Disabling certain cookies may affect the functionality of our application.

12. Data Retention

We retain your personal information only as long as necessary for the purposes described:

  • Account data: Stored while your account is active.
  • Deleted accounts: Removed from active systems within 30 days.
  • Backups: Purged on a rolling basis within 30–90 days.
  • Security and access logs: Retained for up to 90 days.
  • Payment records: Handled by Stripe and retained as required by law.

You can delete your account in Settings at any time, which initiates the deletion timelines above.

13. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at contact@daelo.app.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Daelo
Email: contact@daelo.app