What happens to what you write

• Your account: email address, name if you give one, time zone and preferences. A password, if you set one, is stored only as a one-way hash. If you sign in with Google or Apple, we receive the name, email address and account identifier they share, never your password.
• What you put into Dayora: entries, moods, conversations, voice notes and call recordings, photos (including a selfie, if you add one), the people in your Circle, letters, and what Dayora writes back to you. Dayora also keeps short notes about you that it remembers between conversations; you can see, edit and delete them.
• How you use the app: which parts you use, device and browser type, IP address and approximate location, error reports, and anonymous page-speed measurements.
• Payments: if you subscribe, a record of what you bought. Card details go to the payment processor (or Apple, in the iPhone app) and never reach Dayora.

Dayora is built on AI models from third-party AI providers, and it uses several of them, sometimes more than one for the same task. Everything you put into Dayora, including your entries, conversations, voice notes, calls, photos and what Dayora writes back, may be sent to these models. They use it to run Dayora: to write its replies, turn speech into text, run calls, understand photos and paint portraits, and to read, sort, tag and route what you write and decide what Dayora shows or asks you next. Dayora also sends content to AI models to test, compare and check the quality of the service, and to build and improve its features.

Which models and providers Dayora uses changes as better or more suitable ones become available, and Dayora may try new ones alongside the ones it already uses. Everything on this page applies to whichever models and providers Dayora uses at the time.

In the newer version of the app, Settings has a switch that turns AI off. While it is off, nothing you write, record or say is sent to an AI provider.

If someone asks you a Between Us question and you answer from their link, without an account, Dayora sends the question and both answers to an AI model to write one short line about what the two answers share, which you both see when they open. The page says so before you seal your answer. As with everything in Dayora, an AI model may also read the question, both answers and that line to check Dayora's quality and safety. Nothing else you write there goes to an AI model.

It can be. Dayora may use your information, including your entries, conversations, recordings and photos, to train, fine-tune, test and improve the AI models and features that power Dayora.

The AI providers Dayora uses may also use what Dayora sends them to train and improve their own models. Some of Dayora's agreements with providers work this way: the provider may learn from the content, and Dayora gets free or reduced-cost usage in return, which helps keep the core of Dayora free.

Dayora never sells your entries to advertisers, data brokers or anyone else.

In practice, your journal is not a sealed room. If that is not a trade you want, you can export everything and delete your account at any time (see deleting your account). What has already been used to train or improve a model cannot be taken back out of it.

• You can.
• The Dayora team. Authorised people working for Dayora can access and review everything in your account: your entries, moods, conversations, voice notes and call recordings, photos, the people in your Circle, letters, and what Dayora writes back. They do this to check and improve the quality of Dayora, to test and build it, to keep it safe and secure (for example to protect you or someone else, or to prevent or investigate misuse, fraud or a security incident), to give support, and to meet legal obligations. They see it in Dayora's admin tools, in copies sent to the team for quality review, and in working copies of the database they use to build and fix Dayora.
• Nobody else who uses Dayora can see it, unless you choose to send or share something yourself, such as a post on Horizon, which shows your words without your name unless you choose to show it. There is no public profile.

Dayora never sells, rents or trades your personal information. It shares data only with:

• AI providers, as described above.
• Service providers that run Dayora: hosting and file storage, the database, email delivery (some emails quote a line you wrote, and the email service tells us when an email is opened or a link is clicked), error monitoring (which may record a replay of part of a visit, with the text on screen hidden), product analytics (which knows your account, email address and first name, never what you write), payment processing, and a weather service that receives your city's location, never your exact place.
• Google, for analytics and advertising on Dayora's public website (and, if you came from one of Dayora's ads, the short reports described under cookies), subject to your cookie choice (see cookies), and to confirm who you are if you sign in with Google. Apple, if you sign in with Apple or subscribe in the iPhone app, and, once, to learn whether an Apple Ads campaign brought an iPhone install.
• When the law requires it, or to protect people's safety or our rights.
• A buyer, if Dayora is ever sold or merged, with notice to you.

There are no ads in the app. Dayora advertises itself on Google, and never sends what you write to an advertiser. What Google receives about people who came from an ad is described under cookies.

• When a voice note is saved as a recording, or you talk to Dayora on a call, we keep the audio itself, not only the transcript, so the team can check what Dayora heard and what it said back. When your speech is only turned into text for you to edit before saving, the recording is not kept.
• Recordings are kept with no time limit.
• You can play back a voice note on the entry it came from. Call audio has no playback screen yet, so only the Dayora team can reach it, along with the AI providers that transcribe speech and run the call. It is never sold.
• Deleting your account deletes all your recordings. Choosing "let it go" at the end of a call, or deleting the call's conversation, deletes that call's recording. Deleting a single entry does not delete the voice-note recording behind it; to remove recordings without closing your account, email human@dayora.ai.

• Every connection to Dayora uses HTTPS, and browsers are told to use nothing else.
• Every request for your journal is checked against your account.
• Sign-in, sign-up and other sensitive requests are rate limited.
• You can sign in with a password, a link emailed to you, or Google or Apple. A sign-in lasts 7 days, or 30 if you ask Dayora to remember you.
• Your email account is the key to your Dayora account, so protect it with a strong password and two-factor authentication, and do not forward sign-in links.

No system is perfectly secure. If you notice anything unusual, or find a vulnerability, write to human@dayora.ai.

Dayora uses the cookies it needs to keep you signed in and secure, and to remember your cookie choice. On the public website it also uses Google Analytics and Google Ads. Neither runs inside the app, and the app loads no advertising cookies, though Dayora's servers tell Google Analytics when an account is created in the Android app. Whether they start straight away on the website depends on where you are:

• In the European Economic Area, the United Kingdom, Switzerland, Turkey, Quebec, Washington State and Nevada, nothing from Google loads until you choose “Accept”.
• In Connecticut, Google Analytics runs by default and Google Ads waits until you choose “Accept”.
• Everywhere else, both run by default and the cookie notice says so. Choosing “Decline” turns them off.

A Global Privacy Control signal is treated as a decline for advertising, wherever you are. Ad personalisation signals are off, except on Dayora's home, pricing and download pages where Google Ads runs for you: there, Google may add you to a list so Dayora can show you its ads elsewhere. Choosing “Decline” turns this off. The Google Ads tag does not load on pages about topics such as anxiety, grief or trauma.

If you arrive from one of Dayora's ads, we record which campaign and search brought you, wherever you are. If Google may run for you, we also keep the click identifier Google adds to the link, and later report a signup, your first entry, a Plus purchase (with its amount), or that you came back and wrote in Dayora again within your first week, so we can tell which ads work and show Dayora's ads to more people likely to use it. Those reports say only that you wrote, never what. If you signed up from an ad on or after 3 November 2026, they also carry a hashed copy of your email address, which Google can match to a Google account.

The Dayora iPhone and Android apps show no cookie notice. When it is installed, the Android app asks Google Play once where the install came from (the campaign, and the click identifier when a Google ad led to it), and the iPhone app asks Apple once for an attribution token, which Dayora sends back to Apple to learn whether an Apple Ads campaign brought the install, and which. When a Google ad brought you to the Android app, Dayora reports the same things to Google Ads as it does for the website, except that a Plus purchase through Google Play is reported without its amount, under the same rule for where you are: where Google waits for “Accept”, nothing is reported from the app. Nothing you do in the iPhone app is reported to Google, and Apple receives only the token it issued. Choosing “Decline” deletes the click identifier from your browser, so nothing more is reported to Google; closing the notice without choosing does not. Your entries, your moods and anything you write are never sent to Google.

Separately from Google, and wherever you are, Dayora and its hosting provider count visits: the page, the website that sent you, your country, the type of device and which signup buttons were pressed. These counts set no cookie and are not sent to Google or any advertiser. To remember where a visit began, the website also keeps a note in your browser: a random code until you close the tab, and for up to 30 days the website or campaign that sent you. If you sign up, that note is saved with your account.

Your account comes with the emails that are part of how Dayora works (your daily reflection, weekly patterns, letters to your future self, follow-up questions), account emails (sign-in links, receipts, plan changes), and occasional product news. Every non-essential email can be turned off in Settings and carries an unsubscribe link. We never share your address or send third-party offers. If you ask Dayora to email someone for you (a letter, or a Between Us question), Dayora uses their address only to deliver it (and, for Between Us, one reminder), the Dayora team gets a copy for quality review as it does of most Dayora emails, and every such email lets them stop email from anyone on Dayora for good.

You can download everything at any time from Profile, then Account & data: the full archive as JSON, or your entries as a PDF or Word document.

You can delete your account in the same place. It happens straight away and cannot be undone. Before it goes, Dayora asks why you are leaving, and the reasons you give are sent to the Dayora team with your name.

• What deleting removes: your account, every entry, mood and conversation, your voice notes and call recordings, your photos and portraits, and the text of every request Dayora sent to an AI provider about you.
• What stays, without your words: a note that emails were sent to your address, security records of sign-in attempts, the count and cost of AI requests, and usage records.
• What deleting cannot reach: emails already in your inbox, copies already sent to the team for quality review, what AI providers keep under their own terms, models already trained or improved with it, and working copies of the database on the team's computers.
• If you only remove your photo in Profile, the file is kept for safety review until you delete your account. Some older photos on entries were stored in a way that does not show whose they are; deleting your account takes them out of your journal, but their files can stay in storage until you ask us to remove them.

You can ask to access, correct or restrict the use of your personal information, or object to how it is used, by writing to human@dayora.ai. You can also export and delete it yourself at any time, as above.

Dayora keeps your information for as long as you have an account, and deletes it as described above when you delete your account. Your information may be processed in countries other than your own, by Dayora and the providers it uses.

Dayora is not for children under 13. If we learn that we hold information from a child under 13, we delete it.

In the iPhone and Android apps you can choose to find people in your phone's contacts who are on Dayora. Only when you start it, and only with your permission, the app reads the email addresses in your contacts on your phone. Each address is turned into a code (a one-way hash) on your phone, and only the codes are sent to Dayora, where they are compared with the members who turned on "People who know my email can find me" and then discarded. Dayora does not keep your contacts or the codes, does not contact anyone in them, and does not use them for anything else. The names in your contacts never leave your phone. Dayora keeps only a count of how many addresses were checked, to stop the feature being misused.

If you turn on "People who know my email can find me", someone who has your email address in their contacts can see the name and portrait on your card and ask to link with you. They never see your email address. It is off unless you turn it on, and you can turn it off at any time.

Horizon is a board inside Dayora where you can post a worry, a hope or good news for other members to read, without your name. A post shows your words and a picture. The picture is one Dayora's AI paints from your words, one of Dayora's own paintings, or, if you choose, a photo of yours that Dayora's AI paints in its style, or a painting you already have, such as your portrait. If you choose, a post also shows your first name, your profile picture (with or without your name), roughly where you are (your country, or only your part of the world while few members there use Horizon) and how you felt that day. You choose for each post, and nothing about you is shown unless you turn it on. If you choose, the people you are linked with in Circle and your support person see a post as yours, with your first name, and are told when it goes up. Everyone else sees it without your name, unless you turned your name on. A post never shows your email, or anything else from your profile beyond what you turn on. Others can respond only with a few set reactions, never with replies, and only you see how many people reacted to your post. Nobody sees who. When you respond on Horizon, the person who posted sees which part of the world responses came from, never who. Horizon is not shown to anyone who may be under 18.

You can also share how you are today: your portrait, one of your celebration portraits, or a new photo of yourself, which an AI model first checks is a real photo of a person before Dayora's AI paints it faithfully; or only your mood, with a line if you like. The Dayora team does not look at it before it goes up: an AI model reads it first, unless you turned AI off. Others can only send support, and it is gone by the end of your day.

If you turn on sharing how you are by itself, each mood you log goes up there on its own. It shows only the mood, never your words, and your portrait only if you choose. The Dayora team does not look at a mood shared by itself before it goes up. You can take it down or turn it off at any time.

To help you post, Dayora's AI reads your recent entries and what you said in your chats with Dayora, and suggests posts drafted from them, with names, places, workplaces and dates taken out. After you post, it reads what you write in your journal and in conversations with Dayora to suggest an update on how it went. Suggestions are shown only to you, and nothing goes up until you choose to post it, after seeing exactly what will be shown. If you turn AI off, Dayora does none of this. If you tell Horizon that prayer is part of the support you would like, your posts can welcome prayers, and you can change that answer at any time in Horizon settings.

Before anyone else sees a post, an update or how you are today, an AI model reads it to keep Horizon safe. The Dayora team does not look at it first. Anything the model is unsure about, or cannot read, still goes up, and the Dayora team is told so it can read it and take it down if needed. If you turned AI off, no AI model reads it: it goes up, and the Dayora team is told so it can read it. A post that reads as a crisis is never posted, and Dayora offers you support instead. Members can report a post, and a post reported by several members is held until the team has read it. A post leaves the board after 7 days, or after 14 if nobody has reacted to it yet. You can take yours down at any time, and deleting your account deletes your posts. While Horizon is new, the Dayora team is sent a copy of each post and share once it is up, with the account it came from, to keep Horizon safe.

Some posts, reactions and shares on Horizon may be simulated for testing purposes. They are made by Dayora, not by members, with made-up people and pictures, and are never taken from anyone's journal. Simulated reactions can appear on your posts and be counted among the people who reacted to yours. Which kinds of post appear follows counts of what members write about, never their words. Dayora may also respond to what you share, and those responses are counted too.

If this policy changes in a way that matters, we will tell you by email or in the app.

Dayora is run by Crafted in Context Pty Ltd (ACN 694 376 853), Victoria, Australia, the data controller. Write to human@dayora.ai with any question about your privacy or to report a security problem. We usually reply within 48 hours.