Privacy Policy

Last updated October 24, 2026

DayDump ("we", "us", or "our"), operated by DAYDUMP LLC, provides a social journaling application that lets you share daily posts with friends. This Privacy Policy describes how we collect, use, and share information when you use the DayDump app and related services (the "Services").

Controller: DAYDUMP LLC, 8110 W Union Hills Dr Ste #430, Glendale, AZ 85308, USA. Contact: contact@daydump.life.

Information We Collect

  • Account information: phone number, SHA-256 hash of your phone number (used for contact matching), date of birth (used only to verify you meet our minimum age of 13), display name, username, and profile photo.
  • Legal acceptance records: the version of the Terms of Service and Privacy Policy you accepted, and the timestamp of acceptance.
  • Content:posts ("flicks") including front and back camera images, captions, comments, likes, reposts, and tags.
  • Location on flicks (optional): when enabled, precise latitude and longitude attached to each flick.
  • Alarms: hour, minute, label, and weekdays for any post-reminder alarms you configure.
  • Push tokens: the Apple / Google push token, the platform, and the last time the token was used.
  • Reports: report reason and any free-text details when you report a user or flick.
  • Social graph: friend connections, friend requests, and blocked users.
  • Contacts (optional): if you enable contacts access, your device hashes each phone number with SHA-256 and sends only those hashes to our server — never raw phone numbers, names, or contact metadata. Hashes are discarded after the match.
  • Notifications: in-app notification records (type, title, body, read status, day bucket).
  • Audit events: deletion request, unlock, contacts upload, data export, and legal acceptance.
  • Usage and device information: app interactions, IP address, device model and OS, app version, and diagnostic / crash logs.

Device Permissions

  • Camera — to take the front and back photos that make up a flick.
  • Photo library (read) — to import images when you pick a profile photo.
  • Contacts — to match your contacts against DayDump users at onboarding.
  • Location (when in use) — to attach coordinates to a flick when Location visibility is enabled.

How We Use Information

To create and manage your account, deliver core features (posts, feeds, friends, notifications), help you find friends already on DayDump, communicate about updates and support, monitor and secure the Services, and enforce our Terms of Service.

Service Providers (Sub-processors)

  • Stytch, Inc. — phone authentication and SMS one-time codes.
  • Amazon Web Services — media storage (S3) and content delivery (CloudFront).
  • Upstash, Inc. — rate-limit cache (anonymized fingerprints only).
  • Functional Software, Inc. (Sentry) — crash and error reporting. Session replay is disabled in production.
  • Expo (650 Industries) — push-notification delivery.
  • Vercel Inc. — application hosting.
  • PostHog, Inc. (US-hosted) — product analytics, hosted in the United States and used only after you consent. Receives usage events tied to a random identifier — never your phone number, contacts, or message content.

Cookies and Analytics

Our website uses essential cookies that are required for the site to work. Optional analytics (PostHog, US-hosted) runs only after you accept it in the cookie banner; if you reject, or if your choice can't be read, analytics stays off. You can change your choice at any time via "Cookie settings" in the footer. In the app, analytics is off by default and can be turned on in Settings → Privacy.

Other Sharing

We do not sell your personal information or share it for cross-context behavioral advertising. We share with friends and users you interact with (per each feature's visibility); when required by law; and in connection with a merger, acquisition, or asset sale.

Advertising: DayDump does not currently show ads or include any advertising SDK. If we introduce advertising after launch, we will update this Policy first, and users under 18 will never receive personalized ads.

Your Choices

  • Account visibility: all accounts are friends-only by default.
  • Location visibility: toggle in Settings → Privacy.
  • Contacts:manage in your device's system settings.
  • Data export (portability): Settings → Privacy → Download my data.
  • Account deletion: Settings → Privacy → Delete account (30-day grace period).

Data Retention

Account and content data are retained for as long as your account is active. Requested deletions complete within 30 days. In-app notification records are deleted after 90 days. Diagnostic logs in Sentry are typically retained for 90 days.

Age Requirement

DayDump is not directed to children under 13. We refuse account creation for anyone under 13. Contact contact@daydump.life if you believe a child under 13 provided us with personal information.

California Residents (CCPA/CPRA)

We do not sell your personal information. You have the right to know, delete, correct, and limit use of sensitive information. Exercise these rights via the in-app controls or by emailing contact@daydump.life.

European and UK Residents (GDPR / UK GDPR)

Our lawful bases are (a) performance of our contract with you, (b) your consent (for contacts and location), and (c) our legitimate interests in securing and improving the Services. You have the right to access, correct, delete, export, restrict, and object to processing, and to withdraw consent at any time.

EU / UK Representative: Where required by Article 27 GDPR / UK GDPR, an EU/UK representative will be designated. Until then, contact contact@daydump.life for all data-protection inquiries.

Supervisory authority: You may lodge a complaint with your local data protection authority.

International Transfers

Our servers and most sub-processors are located in the United States. For transfers from the EU, UK, or Switzerland to the US, we rely on Standard Contractual Clauses with each sub-processor as the transfer mechanism.

Security

We use industry-standard measures including encryption in transit (HTTPS) and at rest, signed, short-lived URLs for media, and server-side access controls. Report vulnerabilities to security@daydump.life.

Changes to This Policy

We may update this Policy. If changes are material we will notify you in-app or by other means.

Contact

Questions or requests? Email contact@daydump.life. Security issues: security@daydump.life.