Privacy Policy

Effective Date: February 10, 2026

Last Updated: April 25, 2026

Welcome to Daisy's Dailies. Your privacy is critically important to us. This Privacy Policy explains how Sibert Strategy Group ("we," "us," or "our") collects, uses, and shares information through the Daisy's Dailies mobile application.

1. Information We Collect

A. Information You Provide to Us

Account Data: When you create an account, we collect your email address and display name. If you sign up with Apple or Google, we receive your name and email from that provider.

User Content: We store the task and errand data you input into the app, including flowers, petals, items, appointments, and address book entries.

Device Contacts (Pro Only): If you use the contacts import feature (Pro subscription only), we read your device's address book to display your saved contacts. You select which contacts you want to import into the app. We import and store only the contact name and address that you explicitly select. The imported contact data is synced to our servers and stored in your account. You can delete any imported contact at any time, which removes it from both the app and our servers.

Calendar Data: If you choose to import calendar events, we read your device calendar to display events for selection. Only the events you explicitly select are copied into the app. We do not store or transmit calendar data you have not selected.

Support Requests: When you contact us through in-app support, we collect your message, the support topic you select, and device information (device model, operating system version, and app version) to help us diagnose and resolve your issue.

B. Automatically Collected Information

To ensure app stability and manage subscriptions, we automatically collect:

Device Identifiers: Firebase user ID and RevenueCat customer ID, linked to your account for authentication and subscription management.
Technical Data: IP addresses, operating system versions, device model, and app crash logs (via Sentry).
Crash & Performance Data: Crash reports, stack traces, and performance metrics are collected by Sentry in production builds. Session replays may be captured to help diagnose errors. Your user ID and email are attached to crash reports for attribution.
Push Notification Tokens: If you enable push notifications, we store your device's push token to deliver assignment alerts and daily summaries. Tokens are automatically removed if unused for 30 days.

C. Location Information

Daisy's Dailies requests access to your device's Fine (exact) and Coarse (approximate) location.

Purpose: We use this data strictly to help you search for nearby places, bias search results to your current area for convenience, and display your location on a map when planning routes.

Usage: Location data is only accessed while you are actively using the location-based features of the app. We do not track your location in the background, nor do we use your location for advertising purposes.

2. How We Use Your Information

We use the collected data to:

Provide, maintain, and improve the Daisy's Dailies service.
Authenticate your identity and manage your account.
Process subscriptions and in-app purchases via RevenueCat.
Monitor and analyze app performance and stability (via Sentry).
Deliver push notifications for task assignments and daily summaries.
Import calendar events you select into the app.
Import device contacts you select (Pro feature only) and store them in your account for easy reuse when creating petals and appointments.
Respond to your support requests and troubleshoot technical issues.
Optimize your route order using AI (Pro feature, opt-in only) — stop names, GPS coordinates, and scheduled times are sent to Google Gemini only when you explicitly activate AI route optimization.

3. Third-Party Services

We use trusted third-party service providers to help run the app. These include:

Google Firebase: For authentication, database hosting (Firestore), and cloud functions.
Sentry: For crash reporting, error tracking, performance monitoring, and session replays.
Google Maps & Places API: To provide mapping and location search functionality.
Google Gemini: For AI-powered route optimization (Pro feature, opt-in only). When you explicitly activate AI route optimization, stop names, GPS coordinates, and scheduled times for your selected stops are sent to Google's Gemini API. No data is sent unless you choose to use this feature.
RevenueCat: To manage in-app subscriptions and purchase validation.
Expo: For push notification delivery.
SendGrid: For routing in-app support ticket notifications to our support team. Your email address, support message, topic, and device information are transmitted via SendGrid when you submit a support request.

These services may collect and process data according to their own privacy policies:

4. Data Retention and Deletion

We retain your information for as long as your account is active. You can delete any imported contacts at any time, which permanently removes them from our servers.

Automatic Data Cleanup: Appointments are automatically deleted 30 days after their scheduled date. Push notification tokens are automatically removed if unused for 30 days.

Account Deletion: You have the right to delete your account and all associated personal data at any time through the Settings menu within the app. Upon account deletion, your data will be removed from our active databases immediately and permanently deleted from our servers within 30 days.

For detailed instructions on how to delete your data, please visit ourData Deletion Instructions page.

5. Children's Privacy

Daisy's Dailies is intended for users who are 13 years of age or older. We require all users to confirm they meet this age requirement before creating an account. We do not knowingly collect personal information from children under 13.

Family Members: The app includes a family sharing feature. All family members who access the app must create their own account and independently confirm they are 13 or older. Children are not added to families without their own account — they join by accepting an invite, which requires completing the age-confirmed signup flow.

EU Users: If you are located in the European Union, you must be at least 16 years of age to create an account, in accordance with GDPR Article 8. Some EU member states permit a lower age of 13 with parental consent; however, we apply the 16-year threshold uniformly across all EU countries for simplicity.

If we discover a violation: If we become aware that a user under the applicable minimum age has created an account, we will promptly delete that account and all associated personal data. Parents or guardians who believe their child has registered may contact us atDaisysdailies@sibertstrategygroup.comto request immediate account deletion.

6. Security

We implement industry-standard security measures (such as Firebase's secure authentication and encrypted data transit) to protect your information. However, no method of electronic transmission is 100% secure.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

The right to access your personal data
The right to correct inaccurate data
The right to delete your data
The right to withdraw consent
The right to data portability

To exercise any of these rights, please contact us using the information below.

8. European Union Users (GDPR)

If you are located in the European Economic Area (EEA), your personal information is processed in accordance with the EU General Data Protection Regulation (GDPR). This section explains our lawful basis for processing and your enhanced rights.

A. Lawful Basis for Processing

We process your personal data only where we have a lawful basis to do so. The table below sets out the legal basis for each category of processing:

Data / Processing Activity	Lawful Basis
Account registration (email, display name)	Contract — necessary to provide the service
User content (flowers, petals, items, appointments, contacts)	Contract — core function of the service
Device identifiers, technical data, crash logs	Legitimate Interests — maintaining app stability and security
In-app support messages	Legitimate Interests — responding to user enquiries
Location data	Consent — requested via device permission prompt
Push notification tokens	Consent — requested via device permission prompt
Calendar data	Consent — you choose which events to import
Device contacts (Pro feature)	Consent — you explicitly select which contacts to import from your address book
Sentry session replays	Consent — opt-in toggle in Settings → Privacy
AI route optimization (Google Gemini)	Consent — you explicitly activate this feature

B. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15): Request a copy of all personal data we hold about you, including via the data export feature in Settings.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
Right to Erasure (Art. 17): Request deletion of your data. You can do this at any time via Settings → Delete Account, or by contacting us.
Right to Restriction (Art. 18): Request that we restrict processing of your data while a dispute is resolved.
Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format via the export feature in Settings.
Right to Object (Art. 21): Object to processing based on legitimate interests. We will cease unless we can demonstrate compelling grounds.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time (e.g., revoke location permission in your device settings, disable session replay in Settings → Privacy).

C. International Data Transfers

Our service providers (Firebase, Sentry, RevenueCat, SendGrid, Google Gemini) are based in the United States. Transfers of personal data from the EEA to these providers are covered by Standard Contractual Clauses (SCCs) as provided by each processor's Data Processing Agreement.

D. Right to Complain

You have the right to lodge a complaint with your local data protection supervisory authority. A list of EU data protection authorities is available atedpb.europa.eu.

E. Data Retention (GDPR)

We retain your data only as long as necessary for the purpose it was collected:

Account data: Retained until account deletion
User content (flowers, petals, items): Retained until deleted by you or account deletion
Imported contacts: Retained until deleted by you or account deletion
Appointments: Auto-deleted 30 days after scheduled date
Push notification tokens: Auto-deleted after 30 days of inactivity
Support messages: Retained up to 2 years for customer service purposes
Transaction records: Retained as required by law (typically 7 years)
Crash logs (Sentry): Retained per Sentry's 90-day default retention

10. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights regarding your personal information:

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Opt-Out of Sale: You have the right to opt out of the sale of your personal information. See our statement below.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA rights.

We do not sell your personal information. Daisy's Dailies does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. We share data only with the service providers listed in Section 3 of this policy, solely for the purpose of operating the app on your behalf.

To exercise your rights under the CCPA, please contact us atDaisysdailies@sibertstrategygroup.comwith the subject line "California Privacy Request." We will respond within 45 days of receiving your request.

11. UK Users (UK GDPR)

If you are located in the United Kingdom, your personal information is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You have the same rights as EU users described in Section 7 of this policy, enforceable under UK law. These include the right to access, correct, delete, restrict processing, port your data, and object to processing.

To lodge a complaint about our data practices, you may contact the UK Information Commissioner's Office (ICO) at ico.org.uk.

For any UK-specific data enquiries, please contact us atDaisysdailies@sibertstrategygroup.com.

12. Australia and New Zealand

Australia — Australian Privacy Act 1988

Daisy's Dailies complies with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy constitutes our APP Privacy Policy as required under APP 1.

You have the right to access the personal information we hold about you and to request corrections if that information is inaccurate, out of date, incomplete, or misleading. To make such a request, please contact us atDaisysdailies@sibertstrategygroup.com.

Notifiable Data Breaches: In the event of an eligible data breach that is likely to result in serious harm to any affected individuals, we will notify the Office of the Australian Information Commissioner (OAIC) and all affected users within 30 days of becoming aware of the breach. Notifications will describe the nature of the breach, the information involved, and the steps we are taking in response.

New Zealand — Privacy Act 2020

Daisy's Dailies complies with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs). In the event of a notifiable privacy breach that poses a risk of serious harm, we will notify the New Zealand Privacy Commissioner and affected individuals as soon as practicable. New Zealand users may direct privacy complaints or access requests to us atDaisysdailies@sibertstrategygroup.comor to the Office of the Privacy Commissioner atprivacy.org.nz.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Sibert Strategy Group
Email: Daisysdailies@sibertstrategygroup.com

For information on how to delete your data, please see ourData Deletion Instructions. See also our Terms of Service.