Privacy policy

Counting your days and generating reports — your explicit consent when enabling location (revocable; automatic counting stops if you revoke it). Storing your encrypted backup — consent and performance of the contract. Billing and support — performance of the contract and legal obligations. Analytics and improvement — anonymous, cookie-free statistics under legitimate interest (they write nothing to your device and cannot identify you); the cookie that recognises repeat visits, only with your consent. We do not make automated decisions with legal effects on you, and we do not use your data for advertising or sell it.

For as long as your account exists: the multi-year history is the whole point of Daywhere in the event of an audit of past years. If you delete your account, we erase your data and backup within 30 days at most, except what the law requires us to retain (invoices, for example).

No one, by default. We use data processors (hosting and payments) located in the EU under GDPR-compliant contracts. We will only disclose data to authorities when required by law, and we will notify you unless legally prohibited.

Access, rectification, erasure, objection, restriction and portability: from Settings → Data and privacy, or by writing to dpo@daywhere.app. We respond within 30 days at most. If you are not satisfied, you can file a complaint with the AEPD (aepd.es).

AES-256 encryption at rest and TLS in transit, per-user keys, and internal access under least privilege. If a breach posing a risk to you were to occur, we will notify you and report it to the AEPD within 72 hours.

If a change affects how we process your location or your proof, we will ask for your consent again; for everything else, we will give you 30 days' notice in the app and by email.