Privacy Policy

DAY · A Guide to the City
Effective: May 2026

Your data, in plain words. DAY collects only what's needed to run the app — and never sells it.

DATA RESIDENCY 🇸🇦
All user data is stored exclusively on servers located in Riyadh, Kingdom of Saudi Arabia. Your data never leaves the Kingdom.

1. What we collect

When you create an account, we collect: your name, email address, phone number, and password (encrypted). When you use the app, we may also collect: places you save, suggestions you submit, and basic device info for diagnostics.

We do not collect your location unless you explicitly grant permission. We do not access your contacts, photos, or other apps.

2. How we use it

3. Where your data is stored

Your data is stored on servers located in Riyadh, Kingdom of Saudi Arabia, hosted on Oracle Cloud Infrastructure (Riyadh region). No personal data is transferred outside the Kingdom.

4. Who we share it with

Nobody. We don't sell your data. We don't share it with advertisers. We don't use third-party trackers or analytics that profile you.

5. How we protect it

Passwords are encrypted with industry-standard hashing (bcrypt). All connections are encrypted via HTTPS with auto-renewing SSL certificates. Only the DAY founders have admin access to user data.

6. Your rights under PDPL

As a Saudi resident, you have the right to:

To exercise any of these rights, email us at the address below. We'll respond within 30 days.

7. Data retention

We keep your account information for as long as your account is active. If you delete your account, your personal data is removed within 30 days.

8. Children

DAY is not intended for users under 13. We don't knowingly collect data from children.

9. Changes

If we change this Privacy Policy in any material way, we'll notify you in the app.

Questions or want to exercise your rights?
legal@day-ksa.com
DAY Team, Riyadh, Kingdom of Saudi Arabia