Privacy Policy

This policy explains what information Day Garden ("we", "us", "the app") collects, why, and what rights you have. It's written to be readable — if anything is unclear, please contact us.

1. Who we are

Day Garden is operated by Bodanius, the data controller responsible for your information. For any privacy question you can reach us at [privacy@daygarden.app].

2. Who this app is for

Day Garden is designed to be created and controlled by an adult (a parent or guardian) on behalf of a child. The child uses the app to follow a daily routine, but the account, the settings, and the data all belong to and are managed by the adult. We do not knowingly allow children to create their own accounts or provide information to us directly, other than tapping to complete tasks within a routine an adult set up.

3. What we collect

Information the parent provides

• Parent contact: an email address, used to sign in (via a secure one-time link) and to reply to support requests.
• Child profile: a first name (or nickname), an optional date of birth or age, and a chosen avatar. We ask for a birth date only to tailor age-appropriate content; you may leave it out.
• Routine setup: the tasks, times, hints, and rewards you configure.

Information created by using the app

• Progress data: which tasks were marked done or undone, when, whether on time, stars earned, and streaks. This is what lets the app work and lets you see progress.
• Device connection: a random token stored on each connected device so it stays signed in, plus a device label you choose.

Information collected automatically

• Basic technical data needed to deliver and secure the service (for example, a server request log with an IP address). We keep this to a minimum and do not use it to build advertising or behavioural profiles.

We do not collect precise location, contacts, photos, microphone or camera data, or use any advertising identifiers.

4. How we use information

• To provide the app: save routines, sync progress across devices, and show it back to your child and to you.
• To give the parent insight into how the routine is going.
• To keep accounts secure (sign-in links, connecting and revoking devices).
• To respond to your questions and support requests.
• To fix problems and improve the app.

We do not use your data for advertising, and we do not sell or rent it to anyone.

5. Our legal basis (UK/EU GDPR)

• Performance of a contract — to provide the app you signed up for.
• Legitimate interests — to keep the service secure and working, balanced against your rights.
• Consent — where required, including a parent's consent for processing a child's information. You can withdraw consent at any time.

6. Children's privacy

We take children's privacy seriously and design for it. A child's information is provided and controlled by their parent or guardian. We collect the minimum needed to run a routine, we show no ads, we do no behavioural profiling or tracking, and we never sell children's data. A parent can review, change, or delete their child's information at any time from the parent area or by contacting us. If you believe a child has provided us information without a parent's involvement, please contact us and we will delete it.

Depending on where you live, laws such as the UK Children's Code, the EU GDPR, and the US COPPA may give you and your child additional protections. We aim to meet them.

7. Who we share it with

We don't sell your data and we share it only where necessary to run the service:

• Hosting & storage — the provider that runs our servers and database.
• Email delivery — the service that sends sign-in links and replies.
• Legal — if required by law, or to protect the rights and safety of users.

These providers act as our processors under contract and may only use the data to perform their service for us.

8. Cookies & on-device storage

We use only what the app needs to function, no advertising or third-party tracking cookies. Specifically: a secure sign-in cookie or token to keep you and your child's device connected, and local storage on the device to cache the routine so it loads quickly and works offline. You can clear these at any time in your browser or device settings.

9. How long we keep it

We keep your account and routine data for as long as your account is active. Progress history is kept so you can see trends over time; you can clear it or delete the whole account whenever you like. When you delete an account, we remove the associated personal data within a reasonable period, except where we must keep something to meet a legal obligation.

10. Security

We protect your data with measures appropriate to its sensitivity: encrypted connections (HTTPS), passwords and tokens stored only in hashed form, and access limited to what's necessary. No system is perfectly secure, but we work to keep your family's information safe.

11. Where your data is processed

Your data may be processed on servers located in Germany. Where data is transferred across borders, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses) as required by law.

12. Your rights

Depending on where you live, you have rights over your and your child's data, including to:

• access a copy of it;
• correct it if it's wrong;
• delete it;
• restrict or object to certain processing;
• receive it in a portable form;
• withdraw consent at any time.

To exercise any of these, email [privacy@daygarden.app]. You also have the right to complain to your local data protection authority (in the UK, the ICO; in the EU, your national supervisory authority).

13. Changes to this policy

If we make meaningful changes, we'll update the date at the top and, where appropriate, let you know in the app or by email. Continued use after an update means you accept the revised policy.

14. Contact

Questions, requests, or concerns? Email [privacy@daygarden.app] or use our contact page. We usually reply within 2 working days.