Privacy Policy
Last updated 12 August 2026
This policy explains what Daysly does with your information. The short version: by default, nothing leaves your phone. Every feature that involves a server is off until you turn it on, and each one is described separately below.
1. Who we are
Daysly (“we”, “us”) publishes the Daysly mobile application for Android, distributed through Google Play under the package identifier com.daysly.app. For anything in this policy, contact igdarksy@gmail.com.
2. The default: no account, no collection
Installed and used as-is, Daysly collects nothing. Your travel history — countries, entry and exit dates, and any notes you write — is stored in a database on your device and nowhere else. We operate no analytics, no advertising, no crash-reporting SDK, and no third-party trackers in this mode.
In this default state the app makes no network requests, which means it also functions with no connectivity at all. There is no profile of you on our systems, because there is no request from which to build one.
3. Optional cloud backup and sync
If you choose to enable backup, you sign in with a one-time code sent to your email address. We never ask for or store a password.
Once signed in, the following is stored on our behalf:
- Your email address, used solely as your account identity and to send sign-in codes.
- Your travel entries — country, entry and exit dates, whether a stay is ongoing, and any note you added.
This data is hosted with Supabase. Row-level security policies restrict every row to the account that owns it, so one user's records are not readable by another. Data is encrypted in transit using TLS and encrypted at rest by the hosting provider. We do not claim end-to-end encryption: because sync must reconcile records across devices, the service can process your entries in order to store and return them.
Your device remains the source of truth. Signing out, or losing connectivity, does not affect your ability to use the app.
4. Optional household sharing
Household sharing lets a partner, family member or colleague see your compliance status. It shares only computed figures: days used, days remaining, whether you are over the limit, and your must-leave-by date.
It never shares the underlying list of your trips — not the countries, not the dates, not your notes. You publish this status explicitly, and you can leave a household at any time.
5. Optional AI features
The assistant and the import tools are the only parts of Daysly that send your content to a third party, and only when you have switched AI features on in Settings.
When enabled, the following may be transmitted for processing:
- Questions you type, together with figures calculated on your device.
- Text you paste for import, such as a booking confirmation.
- Voice recordings you make for spoken trip entry.
- Photographs you select for import, such as a passport page or boarding pass.
Processing is carried out by Groq (text and speech) and Google Gemini (images). We do not use this content for advertising, and we do not use it to train models. Those providers handle data under their own terms, which we encourage you to read.
You may instead supply your own API key in Settings, in which case requests go directly from your device to the provider and never touch our infrastructure. Keys you provide are held in your device's secure storage and are never synced or transmitted to us.
6. Device permissions
Each permission is requested only at the moment you use the feature that needs it, and can be revoked in your device settings at any time.
- Calendar — read-only, to look for planned trips. Events are examined on your device; calendar content is not uploaded.
- Photo library — to attach evidence to a trip. Capture dates are read from the image on your device. Attachments stay local unless you have enabled cloud backup.
- Microphone — for spoken trip entry, and only while you are recording.
- Notifications — to deliver reminders that are scheduled and generated entirely on your device. There is no push server.
7. Purchases
Subscriptions and one-time purchases are processed by Google Play. We never see or handle your card or payment details. Entitlements are managed through RevenueCat using an anonymous identifier tied to your Google Play account, which is why buying and restoring Pro requires no Daysly account and no email address.
8. Your rights and choices
- Access and portability — your ledger is on your device, and Pro can export a dated PDF dossier of it.
- Correction — edit or delete any trip in the app.
- Deletion — uninstalling removes all local data. If you enabled backup, deleting your account from within the app removes the cloud copy.
- Withdrawal of consent — turn off AI, sync, or any permission at any time; the core app continues to work.
Depending on where you live you may have additional statutory rights, including under the GDPR. Write to us and we will honour them.
9. Retention
Local data persists until you delete it or uninstall the app. Cloud data persists while your account exists and is removed when you delete it. We keep no separate backups of your travel entries beyond what the hosting provider maintains for disaster recovery.
10. Children
Daysly is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us with information, contact us and we will delete it.
11. International transfers
If you enable cloud features, your data may be processed on servers outside your country, including by the providers named above. We rely on those providers' contractual safeguards for such transfers.
12. Changes to this policy
We may update this policy as the app changes. The date at the top always reflects the current version, and any material change will be announced in the app before it takes effect.
Questions about this document? Email igdarksy@gmail.com.