Your Privacy is Our Priority

1. Information We Collect

Personal Information

When you create an account, we collect:

• • Email address (required for account creation and login)
• • Name (optional, for personalization)
• • Password (encrypted and stored securely)
• • Timezone and email preferences (for delivering insights at optimal times)

Journal Data

Your journal entries and related data:

• • Written journal entries
• • Voice recordings, including audio from Call Dayora. We keep the audio itself, not only the transcript, so we can check the quality of what Dayora heard and said. It is never sold and never shared. You can play a voice note back on the entry it came from; call audio has no playback screen in the app yet, so in practice only our own team can reach it. Deleting your account deletes it, and for a call you can also delete the recording yourself by choosing "let it go" when the call ends or by deleting the call's thread from Reflect.
• • Mood and energy level tags
• • Mood and energy tracking data
• • AI-generated insights and summaries

Usage Data

We automatically collect certain information about how you use Dayora:

• • App usage patterns and feature interactions
• • Device information (browser type, operating system)
• • IP address and general location (for security and service optimization)
• • Error logs and performance data

2. How We Use Your Information

2.1. AI Training and Model Improvement

This is the section to read carefully, because it is the one people assume they can skip.

Your journal entries are used to train AI models. Not by us, but by OpenAI, and with our agreement. Here is exactly how that works.

• • What is sent, and where: when you save an entry, write in Reflect, record a voice note, or call Dayora, that content goes to OpenAI's API so your reflection, reply, or transcript can be generated. There is one exception, and it is the only one: if you choose to upload a selfie, that photo is sent to Google's Gemini API to draw your illustrated avatar, because it does that job several times faster. Your writing is never sent to Google, and your selfie is never sent for any purpose other than drawing that avatar. The selfie is optional and you can skip it.
• • What OpenAI may do with it: we take part in OpenAI's data-sharing programme, which means OpenAI may use the content we send, your entries included, to train and improve its models.
• • What we get for it: a daily allowance of free usage from OpenAI. That allowance is part of how the free core stays free. We think you should know what the free version is paid for with.
• • What we do not do: we do not build or train a model of our own on your writing, we do not sell your entries to advertisers or data brokers, and we do not share them with anyone besides OpenAI, apart from the selfie exception above.
• • Memory is per account: the facts Dayora remembers about you are stored against your account and used only to answer you. They never cross between accounts, and you can view, edit, and delete them.

What this means in practice. Your journal is not a sealed room. It is read by a third party who may learn from it. That is a real trade and we would rather you make it with your eyes open than find out later: if it is not a trade you want, you can export everything in JSON, PDF, or Word and delete your account in one tap, and we will not ask you to justify it.

Our own access. Separately from the above, our team can read entries, voice notes, and call recordings for support, safety, and quality checks: answering a question you email us, investigating a bug, and reviewing what Dayora heard and said on a call. Section 3 covers how that access is limited, and the security page describes the audio side in full, including what we do and do not encrypt.

3. Data Storage and Security

We implement industry-standard security measures to protect your data:

• • All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• • Access to your data is restricted to authorized personnel for development, safety monitoring, and support
• • Regular security audits and monitoring
• • Secure data centers with physical and digital protections

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We may share data only in these limited circumstances:

• • Service Providers: With trusted third-party services that help us operate Dayora, including hosting (Vercel), analytics (Google Analytics), advertising (Google Ads), payment processing (Stripe, or Apple for a subscription bought in the Dayora iPhone app, used only if you subscribe to Dayora Plus), email delivery (Resend), and error tracking (Sentry)
• • Legal Requirements: When required by law or to protect our rights
• • Business Transfers: In the event of a merger or acquisition (with notice to users)
• • Consent: When you explicitly consent to sharing (e.g., accepting cookies for analytics and advertising)

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our marketing website (www.dayora.ai) to enhance your experience, analyze site usage, and for advertising purposes.

Essential Cookies

These cookies are necessary for the website to function and cannot be switched off:

• • Authentication cookies (keep you logged in)
• • Security cookies (prevent fraud and attacks)
• • Cookie consent preferences (remember your cookie choices)

Analytics Cookies

We use Google Analytics to understand how visitors use our website. These cookies help us:

• • Track page views and user interactions
• • Analyze traffic patterns and popular content
• • Improve website performance and user experience

Analytics cookies are only used on our marketing website, not in the journaling app itself. You can opt out of analytics cookies by clicking "Decline" in the cookie banner.

Advertising Cookies

We use Google Ads to show you relevant advertisements. These cookies allow us to:

• • Measure the effectiveness of our advertising campaigns
• • Show you relevant ads based on your interests
• • Track conversions and ad performance

Advertising cookies are only used on our marketing website and require your consent. You can opt out at any time by clicking "Decline" in the cookie banner or adjusting your preferences.

6. Email from Dayora

An account comes with the emails that are part of how Dayora works, and occasionally news about the product itself:

• • Journaling emails: your daily reflection, weekly patterns, letters to your future self, and follow-up questions
• • Account emails: sign-in links, receipts, and changes to your plan
• • Occasional product news, such as a new feature announcement

Every non-essential email can be turned off individually in Settings, and every one carries an unsubscribe link. We do not send third-party offers, and we never share your address.

7. Your Rights and Choices

You also have the right to:

• • Access your personal data
• • Correct inaccurate information
• • Restrict processing of your data
• • Object to certain uses of your data
• • Turn off any email category in Settings, at any time

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• • Journal entries: Until you delete them or close your account
• • Account information: Until you delete your account
• • Usage data: Up to 2 years for analytics and improvement
• • Marketing data: Until you unsubscribe or delete your account

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for any international transfers.

10. Children's Privacy

Dayora is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through the app. Your continued use of Dayora after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us: