DayPrivacy policy
Draft. This policy hasn't been reviewed by a lawyer yet, and parts marked [to be completed] are still open. It describes what the app and our server do today.
DaySong makes new songs for your moment. To do that, some information about your moment leaves your phone. This policy says what leaves it, what we keep, who else receives it, and what you can do about it. The most sensitive things — your exact location, raw health readings and other sensor data — never leave your phone.
Who we are
DaySong is made by Trendvidia, which is responsible for your data (the "controller"). [to be completed: Trendvidia's legal name, registration number and address.]
For anything about your data, write to support@daysong.app. Our data protection officer (in Brazil, the encarregado) is [to be completed], at the same address.
What never leaves your phone
- Your exact location, and where your saved places (home, work, gym) are.
- Raw sensor and health readings, such as heart rate, steps and sleep data.
- The email address you sign in with.
- Microphone audio.
What leaves your phone, and why
| What | Why | Kept |
|---|---|---|
| A random install id made by our server, and a public key from your phone's secure chip (Apple App Attest, or Android key attestation) | To know each request comes from a genuine DaySong app, and to stop abuse and runaway costs | As long as our service runs; see Deleting |
| Your moment: the day of the week and hour, whether you're still, walking, running, cycling or driving, your step pace, the mood you tapped, and the word "home", "work" or "gym" when you're at a place you saved | To choose and make songs that fit your moment | With each song request and each play, until you delete your account |
| Your area: your phone's network position rounded to about 11 km, never GPS | To find the weather, the season and your country (for holidays and song language) | Not stored. It stays in memory for 30 minutes. The weather it found (for example "rain") is kept with the play |
| Health levels, only if you turn health on (it's off unless you do): low, usual or high for stress, sleep and recovery, worked out on the phone | To shape the feel and words of songs | With each song request, until you delete your account |
| What you listen to: each song played, when, how long you listened, whether you skipped it, your rating, "fits my moment", and how you changed the volume while it played | To learn which songs fit which moments. A skipped song is how DaySong gets better | Until you delete your account |
| Your choices: liked and saved songs, songs you hid from History, the styles and lyric languages you picked | To keep your library and preferences | Until you delete your account |
| A library search you type in History or Saved | To answer that search | Not stored |
| Your account, if you sign in with Apple or Google: only the provider's id for you, not your name or email | So your songs and choices follow you to your other devices | Until you delete your account |
| Purchases, if you subscribe or buy in the app: the store's ids for the purchase, the product, its state and renewal date, and the store's country. Never your payment details, which only Apple or Google see | To give you what you bought | Until you delete your account |
Songs for a child
In the Kids occasion, a parent sets the child's age band (0–3, 4–6, 7–9 or 10–12) and interests from a fixed list. These are sent with each kids song request, and the age band and interests are kept with the song that was made. A kids song never uses your mood, places or health. Your area, activity, hour and step pace are still sent with kids plays, as with any play. Kids plays send no analytics. DaySong asks for no one's age, and no child signs in.
Analytics, only if you agree
DaySong asks once whether you allow anonymous usage statistics, and you can change your answer in Settings at any time. If you agree, events such as a song played, liked or saved — with its outcome, style, language, your activity, the weather, your mood and the hour — go to PostHog under a pseudonym that can't be turned back into your install or account. Crash reports go the same way. Your place and health levels are never sent to analytics. If you say no, nothing is sent from then on.
Who else receives data
We don't sell your data, and we don't share it for advertising. These services work for us and receive only what they need:
| Service | What it receives | Where |
|---|---|---|
| Fly.io | Runs our server, so every request passes through it | Servers in São Paulo, Brazil |
| Neon | Our database | São Paulo, Brazil |
| Tigris | Stores the song files, which carry no listener id | [to be completed] |
| Anthropic | Writes each song's words, from its theme, style, language, your moment in words (and your health levels in words, if you turned health on) and, for a kids song, the child's age band and interests. No ids, no location | [to be completed] |
| fal and Mureka | Make each song from its style, tempo and words. fal keeps a job's result for 90 days | United States |
| Open-Meteo | Your rounded area, from our server, to look up the weather | [to be completed] |
| PostHog | Analytics and crash reports, only if you agreed | United States |
| Apple and Google | Sign-in, the checks that the app is genuine, and purchases | United States |
Your phone talks directly to Fly.io, Tigris (to download a song) and, if you allowed analytics, PostHog, so they see your IP address as part of the connection. Our own server doesn't record it.
When data goes to a service outside your country, we rely on [to be completed: the safeguards, such as standard contractual clauses].
Deleting your data
If you signed in, you can delete your account in the app, under Settings, Delete account. That removes your listening history, choices, songs made for you, preferences and purchases record from our database, revokes your Apple sign-in when you delete on an iPhone, and asks PostHog to delete your analytics. Our database keeps backups for 7 days, so deleted data disappears from them within 7 days. See Delete your account for the details and what is kept.
If you use DaySong without signing in, you can delete what our server holds for your phone in the app, under Settings, Delete my data. That removes your listening history, choices, songs made for you and preferences, and asks PostHog to delete your analytics. Deleting the app removes what's on your phone itself. See Without an account for what is kept.
Your rights
Depending on where you live, you can ask to know what we hold about you, to get a copy, to correct it, to delete it, to limit or object to its use, and to withdraw a consent you gave. In Brazil, these are your rights under the LGPD, and you can also complain to the ANPD. In the app, tap Settings, Request about my data: it gives you a code. Then write to support@daysong.app with the code. We don't keep your email, so the code is how we find your data. [to be completed: the legal basis for each use, and the response time.]
Changes
When this policy changes, we'll update the date above and, for important changes, tell you in the app.