Privacy Policy

Effective from: 18 July 2026

This Privacy Policy explains how Aronor ("we", "us") handles information in the Daylo mobile application ("Daylo", the "App"). This policy applies when you use Daylo.

1. Summary

Daylo stores your tasks, lists and journal entries on your device by default. An account is required for secure sign-in. Ads and optional Google Calendar sync involve limited data described below.

2. Information we handle

• Your content (on device): tasks, lists, reminders and journal entries are stored locally on your device. We do not receive or store this content on our servers. If Daylo introduces an optional cloud-content feature, we will update this policy before that feature becomes available.
• Account information: when you sign in, our authentication provider processes your email address, name and a secure identifier so you can have an account. Password-based accounts store only a securely hashed password.
• Advertising data: if ads are shown, our ad provider may collect a device advertising identifier and related data to serve and measure ads. You can remove ads with a one-time purchase.
• Purchase data: when you make an in-app purchase, it is processed by Google Play. We receive confirmation that a purchase occurred, not your payment details.
• Calendar data (optional): if you turn on Google Calendar sync, Daylo uses your permission to create and update calendar events for your tasks. Daylo only accesses the calendar data needed for this feature.
• Device calendar (optional): if you grant calendar access on your device, Daylo can display your events alongside your day. This is read on your device and not sent to us.

3. How we use information

• To provide the App's features (tasks, reminders, journal).
• To let you sign in and keep an account.
• To show and measure ads (unless you have removed ads).
• To sync your tasks with your calendar, only if you enable it.
• To respond to support requests.

4. Third-party services

Daylo relies on the following providers, each with their own privacy policy:

• Supabase (authentication) - supabase.com/privacy
• Google (sign-in, Google Play billing, AdMob ads, Google Calendar API) - policies.google.com/privacy

5. Legal bases and your choices

Where required (for example under the GDPR), we process data on the basis of your consent and to provide the service you request. You can withdraw consent by disabling the related feature or by not using the App. If you are in a region with specific rights (such as the EEA, UK, or California), you may request access to, correction of, or deletion of your personal data.

6. Data retention and deletion

Content stored on your device is removed when you delete it or uninstall the App. Account data is retained while your account is active. You can request deletion of your account and associated account data through our Account deletion page or by emailing contact@aronor.com. We will action deletion requests within 30 days.

7. Children

Daylo is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from children.

8. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure.

9. Changes

We may revise this policy when our practices, the App or our legal obligations change. Every revised policy will state its effective date. Changes apply from that effective date and do not limit rights you already have under applicable law. Where required by law, we will provide additional notice or request consent before a change takes effect.

10. Contact

Questions or requests: contact@aronor.com.