Daily App Privacy Policy, GDPR Notice and EULA

Privacy Policy

Controller. Snakez S.R.O, Vysokoškolákov 8556/33B, 010 08 Žilina, Slovakia, EU.

Privacy contact. info@snakez.sk.

No Google login. Daily does not ask for a name, email address, Gmail access or Google profile. Firebase Authentication creates a random anonymous user identifier so shared-list access can be authorised. This is a technical app identity, not a conventional user account.

Data kept on the device

Regular notes, non-shared shopping lists, membership cards, alarms, app preferences, the chosen weather location and cached weather results are stored locally on the device. Alarm details may also be held by Android's notification scheduler. Earthquake and radiation feeds are fetched for display and are not persistently saved by Daily.

Optional Live Share

Live Share is optional. When it is enabled for a shopping list, Daily sends the following data to Google Firebase:

• a random Firebase anonymous user ID and a random Daily installation ID;
• the shared-list title, items, checked state, item notes and timestamps;
• membership records, owner status, random invite codes and their use or expiry status.

An invite code is a bearer secret: anyone who receives a valid unused code can join that list. Codes are intended for one use and expire after 24 hours. Do not put passwords, health information, financial details or other sensitive information in a shared list.

The number shown by Daily is the number of joined anonymous app installations recorded for that list, not a count of people currently watching. The same installation joining the same list again does not create another membership. A reinstall or another phone may appear as another installation because Daily does not identify people.

List owners, joined installations and authorised Snakez S.R.O administrators with Firebase console access may be able to read shared-list content. Administrators access it only when reasonably needed for security, support, maintenance or legal compliance.

Location and external feeds

If GPS is enabled, Daily requests Android location permission and uses the resulting coordinates to request relevant data. A manually selected location can be used instead. Weather and air-quality requests are sent to Open-Meteo, earthquake requests to the U.S. Geological Survey, and radiation requests to Radmon. These providers and network intermediaries may receive coordinates, IP address, request time and ordinary connection metadata under their own terms.

Purposes and legal bases

• Provide requested features and perform the app service: local storage, alarms, forecasts and optional list sharing.
• Legitimate interests: secure Live Share, prevent abuse, diagnose faults and maintain the service.
• Consent or device permission: optional GPS access and user-triggered sharing.
• Legal obligation: information that must be kept or disclosed under applicable law.

Processors and international transfers

Google Firebase provides Anonymous Authentication and Cloud Firestore for Live Share and acts as a service provider or processor for those functions. Snakez S.R.O. uses a scheduled Amazon Web Services cleanup task only to identify and delete expired Firebase shared-list records; Amazon Web Services acts as a service provider or processor for that task. Google states that some Firebase services, including Authentication, operate from the United States. Where personal data is transferred outside the EEA, safeguards described in Google's Data Processing and Security Terms and the AWS Data Processing Addendum, including applicable standard contractual clauses, may apply. Google Play and Android may separately process store, installation, security and diagnostic information under Google's terms.

Retention

• Unused invite codes expire after 24 hours; used or expired invite records are removed when their shared list is deleted.
• A shared list with no update for 60 consecutive days is scheduled for automatic deletion from Firebase, including its items, memberships and invite records. Cleanup runs daily, so deletion normally occurs within about 24 hours after the 60-day threshold.
• When the owner's app next connects after automatic deletion, its last on-device copy is retained as an ordinary local list. Other joined installations lose access.
• The owner can stop sharing or use the deletion control sooner. A member can leave a list, which removes that installation's membership.
• Local content remains until the user removes it, uses the local deletion option, clears app storage or uninstalls the app. Uninstalling alone may not immediately delete a cloud list, which remains subject to the controls and inactivity period above.

Delete all data control

Settings includes Delete all data. The app sends the deletion request directly to Firebase using the current anonymous identity. It recursively deletes every shared list owned by that identity, revokes invite codes it generated, removes its memberships from lists shared by others, and deletes that anonymous Firebase Authentication identity. An internet connection is required and an interrupted request can be retried. Lists owned by the user are retained on the device as ordinary local lists unless the local option is selected.

The sub-option Also remove local data additionally clears Daily's local notes, shopping lists, membership cards, alarms, cached environmental and weather data, and other Daily app storage. It cancels scheduled Daily alarms and resets weather to Snakez S.R.O HQ, Vysokoškolákov 8556/33B, 010 08 Žilina (49.2101053, 18.7601747).

Security

Daily uses Firebase Authentication, membership-based Firestore rules, one-use expiring invite codes and encrypted HTTPS transport. No system can guarantee absolute security. Keep invite codes private and shared-list content non-sensitive.

GDPR Notice

Under applicable data-protection law, you may have rights to information, access, correction, erasure, restriction, portability and objection, and the right to complain to the Office for Personal Data Protection of the Slovak Republic or your local supervisory authority.

To erase Daily data without giving us a name or email address, open Daily > Settings > Privacy and data > Delete all data, optionally select Also remove local data, and confirm. The app uses the anonymous identity already on that installation to remove its cloud lists, invite codes and memberships. Keep the app open and connected until completion; retry the same action if the request is interrupted.

Most Daily content can be viewed, corrected, exported or deleted directly in the app. Because Daily deliberately does not collect a name or email for Live Share, Snakez S.R.O may be unable to connect a support request to an anonymous identifier without information from the requesting device. Contact info@snakez.sk for a privacy request. We may ask for limited information needed to verify the request without collecting unnecessary identity data.

Daily does not sell personal data, use shared-list content for advertising, or make decisions that produce legal or similarly significant effects through automated profiling.