Privacy
Policy.

Daily Standard (the "App") is provided by:

TA Solutions AB
Organisation number: 559542-3517
Formgatan 29, 216 45 Malmö, Sweden
Email: founder@dailystandard.io

TA Solutions AB ("we", "us", "our") is the controller of the personal data described in this Privacy Policy within the meaning of Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"). We have not appointed a data protection officer, as we are not required to do so. For any question about this policy, or to exercise any of your rights, write to founder@dailystandard.io.

This policy applies to the App on iPhone and Android. The current version is always in the App, under Settings, with the date of the latest update at the top. It should be read together with our Terms of Service.

• You can use the App without an account. When you first open it, we create an anonymous guest account so that your saved quotes, habits and streak work immediately. You may later add an email address, or sign in with Google or Apple.
• We store what you do in the App — what you save, your habits and your streak — so that the App works and so that your data follows you to another phone if you sign in.
• We do not sell your personal data, we do not show advertising, and we do not use advertising identifiers. The App contains no usage-analytics tool (such as Firebase Analytics).
• We do collect crash reports and measurements of how well the App runs. You can turn both off in Settings, under Share crash reports.
• You can delete your data at any time in Settings. What is stored on our servers is then deleted permanently, and we cannot restore it.

3.1 Your account

• User ID. Every installation receives a unique user ID, including guest accounts. Everything in section 3.2 is stored under it.
• A name, if you give one. The App asks for a first name when you start using it, and you can change or remove it later in Settings. It is optional, it can be anything you choose, and guests are asked for it in the same way.
• Sign-up and sign-in details. If you add an email address to your account, that address. If you sign in with Google or Apple, we receive the email address the provider gives us and, from Apple, your name if you choose to share it. Passwords are handled by Firebase Authentication; we never see or store them.
• Preferences. The topics you choose when you start using the App or later in Settings, and whether you have been through those first steps.

3.2 Your activity in the App

The following is stored on our servers under your user ID, whether you are a guest or signed in:

• Saved quotes, and when you saved each one.
• Quotes you have seen, so that the feed does not repeat itself.
• Quotes read per day, to apply the free daily allowance.
• Habits you create: any title, description and reminder wording you write, the time you set a reminder for, the category, difficulty and length you choose, the days of the week you schedule, the day you started, the days you mark them as done, and your running totals.
• Your streak: current and longest streak, the date you last opened the App, and the total number of days you have opened it.
• Audio playlists you create: the name you give each one, and which tracks are in it.
• Account merges. If you move from a guest account into an account you already had, a record naming the guest account the data came from, so that the same data is not copied in twice.

Please do not write sensitive information — for example about your health — into habit titles, descriptions or reminder wording. If you do, it is stored like any other text you enter and used only to show it back to you.

3.3 Data kept only on your phone

The following stays inside the App's own storage on your device and is not sent to us:

• your quote reminder switches and times;
• which notification your phone has assigned to each habit reminder, so that the App can change or cancel it later;
• where you stopped listening to an audio track;
• text size, sound and vibration settings, and a copy of the topics you chose;
• the App's offline copies: content it has downloaded so that it works without a connection, a list of what you have saved, any audio you have played, and the database's own copy of the records described in section 3.2;
• if you have used the App as a guest and not yet signed in, a file holding that guest data, so that it can be moved into an account when you do;
• scheduled reminders, which your phone's operating system holds so that they appear on time. Reminders are created on your phone; we do not send them from a server.

3.4 Technical data collected automatically

• Crash reports (Firebase Crashlytics): information about the error, the device model, operating system and App version, and a random installation identifier. Crash reports do not contain your name or email address.
• Performance data (Firebase Performance Monitoring): App start-up and loading times, network timings, device and network type, and an IP address from which an approximate country is derived.
• App integrity checks (Firebase App Check): your phone confirms to Google (Play Integrity) or Apple (App Attest, or DeviceCheck if App Attest is unavailable) that requests come from the genuine App, to protect our servers against abuse and fraud.
• Messaging registration. The App includes Firebase Cloud Messaging, which may register your installation with Google when the App starts. We do not read or store that registration, and we do not currently send push notifications from a server.

You can turn crash reports and performance data off at any time: Settings → Share crash reports. One switch governs both, and both are on when you install the App. Turning it off stops new reports being collected; it does not delete reports already sent. Crash and performance reports never contain your name, your email address or anything you have written in the App.

3.5 Purchases

Subscriptions are bought through the App Store or Google Play. We never receive your payment card details. We use RevenueCat to know whether your subscription is active. RevenueCat receives your user ID, your purchase and renewal history from the store, and basic device information. We do not send RevenueCat your name or email address.

3.6 When you contact us

If you email us, we process your email address, the content of your message and our reply in order to answer you and handle your request.

3.7 Photo library

If you choose to save a quote as a wallpaper, the App asks for permission to add an image to your photo library. It adds that one image. It does not read, scan or upload anything from your photo library.

3.8 What we do not do

We do not use your data for advertising, we do not build advertising profiles, we do not sell or rent personal data, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects (Article 22 GDPR). Applying the free daily allowance and checking whether you have Premium are automatic, but they only determine which content the App shows you.

Where we rely on legitimate interest, we have weighed our interest against your rights and freedoms. You may object at any time (section 9).

You are not required to give us your email address to use the App. If you do not, you use it as a guest. Some features, such as using the same account on several phones, require an account.

We use service providers that process personal data on our behalf, under our instructions and under data processing terms:

• Google (Google Ireland Limited and Google LLC) — Firebase: authentication, database, file storage, server functions, crash reports, performance data, App integrity checks and messaging registration; and Google Sign-In if you use it.
• RevenueCat, Inc. (United States) — subscription status.
• Apple Inc. — Sign in with Apple if you use it (iPhone only), App Attest and DeviceCheck, and App Store purchases.
• Google Play — Play Integrity and Google Play purchases.

When you buy a subscription, Apple or Google is the seller and processes the payment as an independent controller under its own privacy policy.

We may also disclose personal data where required by law, a court order or a public authority, or where necessary to establish, exercise or defend legal claims. If our business or the App is transferred to another company, personal data may be transferred as part of that transaction; the recipient will be bound by this policy or will inform you of any change.

We do not otherwise share your personal data with third parties.

Our database is hosted by Google in the United States (Firestore multi-region location nam5), our file storage is in the United States (us-east1), and our server functions run in the United States (us-central1). RevenueCat is also based in the United States. Transfers to the United States rely on the EU–U.S. Data Privacy Framework, under which Google LLC is certified, and on the European Commission's standard contractual clauses included in our providers' data processing terms. You may request more information about these safeguards by contacting us.

You can delete your data at any time in Settings. A guest sees Delete my data; a signed-in user sees Delete your account. When you confirm:

• your sign-in account is deleted straight away, and everything stored under your user ID on our servers — profile, saved items, habits, completions, streak, playlists and quote history — is then deleted by an automatic process on our servers. That deletion is permanent: we do not keep a backup of your account data and we cannot restore it;
• the App removes its own copies on that phone: your settings, the list of what you had saved, and any audio it had downloaded. The database's offline copy of the records in section 3.2 is emptied the next time you open the App, which is the one moment nothing is reading it;
• the App starts again as a new guest.

Deletion does not remove:

• The App's offline copy of its own content — the quotes and audio it downloaded so that it works without a connection. That is not information about you, and it stays in the App's storage until you uninstall the App.
• Data this phone is holding for a different account. If you used the App as a guest, then signed in to another account, and some of that guest data has not yet been copied across, it is kept for that account and not for yours.
• Your subscription. It continues until you cancel it with Apple or Google. Apple and Google keep their own purchase records. RevenueCat's record of your purchases is not deleted automatically; see section 7.
• Crash and performance data already collected, which expire on the schedule in section 7.
• Administrator records. If you have ever been given administrator access to the App's content tools, the record of that access and the security log of when it was given or withdrawn. Those are kept as part of our security records.

If you cannot use the App, email founder@dailystandard.io from the address linked to your account, or tell us how to identify your guest account, and we will delete your data for you.

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• rectification of inaccurate data;
• erasure (section 8);
• restriction of processing;
• object to processing based on our legitimate interest;
• data portability — to receive the data you provided to us in a structured, commonly used and machine-readable format, and to have it sent to another controller where technically feasible.

The App does not yet have an export button. To receive a copy of your data, email founder@dailystandard.io and we will respond within one month. This period may be extended by two further months where necessary, in which case we will tell you why. We may need to verify your identity before acting on a request.

Requests are free of charge. We may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive, as the GDPR permits.

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, www.imy.se) or with the supervisory authority where you live or work. We would appreciate the chance to address your concern first.

The App is intended for people aged 16 and over. We do not knowingly collect personal data from anyone under that age. The App does not ask for your date of birth and does not verify your age; the Terms of Service ask you to confirm it. If you believe a child below that age has used the App, contact us and we will delete the data.

Data is encrypted in transit (HTTPS) and stored by Google with encryption at rest. Server-side security rules limit access so that each user can reach only their own data. A small number of our administrators can see account details where needed to provide support and manage content, and changes to who has that access are logged. No method of transmission or storage is completely secure, but we take appropriate technical and organisational measures to protect your data, and we will notify the supervisory authority and, where required, you, if a personal data breach occurs.

We may update this policy from time to time, for example when the App or the law changes. The current version is always available in the App and at https://dailystandard.io/privacy/, with the date of the latest update at the top. If a change materially affects how we process your personal data, we will take reasonable steps to bring it to your attention before it takes effect.

TA Solutions AB
Formgatan 29, 216 45 Malmö, Sweden
founder@dailystandard.io