Privacy Policy

Daylika app · last updated: November 13, 2026

The essentials: you learn together with others, so the app needs an account. We keep what the app needs to work: your email address, your first name and @username, your age group (not your date of birth), your progress, and what you choose to share (your voice, photos, videos and messages). What you share stays between you and your groups. Only one thing is public: your group's name and photo in the league. And what you send outside the app yourself: your challenge link shows your first name. No ads, no tracking, and we never sell your data.

1. Who is responsible for your data

Yoni Kichenama-Gourouvaya, sole proprietor (entrepreneur individuel), SIREN 853 800 332.
Registered address: 173 rue de Courcelles, 75017 Paris, France
Contact: contact@daylika.com

2. What we keep, and why

Data	Why	Legal basis	How long
Email address, and how you sign in (Apple, Google or a code by email)	To create your account and sign you in. No newsletter without your consent	Performance of the contract	As long as the account exists
First name, @username, color, profile photo (optional)	To show you to the members of your groups	Performance of the contract	As long as the account exists. An old @username stays reserved for 30 days, so nobody can take it to pretend to be you
Age group (under 15, 15 to 17, adult) and the day it changes	To apply the rules for your age (section 7). Your date of birth is used to work it out, then it isn't kept	Performance of the contract; legal obligation (protection of minors)	As long as the account exists
Your answers when you join: why you're learning, and where you're starting from	To better understand our learners. Never shown to others. A religious reason is never sent (section 3)	Legitimate interest	As long as the account exists
Progress: season, episodes done, days, flame, review cards, listening time in the library (per day for 2 years, then per month), stories finished, weekly goal	To take you back to where you left off, and to run groups and leaderboards	Performance of the contract	On the phone: as long as the app is installed. On our servers: as long as the account exists
Your stats (“My stats”): how long each episode took, including episodes you redo, and the time spent in Review, day by day	To show you your week, month and year in “My stats”. Seen only by you, and by your parent if they manage your profile on their phone; never by your groups or in the league	Performance of the contract	Day-by-day detail for 2 years; after that, only monthly totals (episode time, redone episodes, Review time, listening time) and your records (longest episode, longest listening in a day, best week, first day). Completed episodes and finished stories keep their date: that is your progress. Everything is deleted with your account
Groups: the ones you belong to, your role (creator, admin or member), the group's name and photo, its place in the league	To let you learn together	Performance of the contract	As long as you're in the group, or the account exists
Your challenge code (“Challenge 3 people”; for a child, only once their parent has consented): a six-character code, created the first time you challenge someone	To tell whoever opens your challenge link that you're the one challenging them. The link shows your first name, nothing else, to anyone who opens it, even without an account and even if it was forwarded to them. It doesn't put anyone in a group	Performance of the contract	As long as the account exists; deleted with it
Recordings of your voice: your readings aloud, your voice messages	To let you hear your progress. Only you can listen to your readings (“My readings”), unless you choose to let your groups hear them (“Who listens to your readings?”: My groups or Only me); a voice message is heard by the people in the chat	Consent	From age 15: until you delete them (a reading can be deleted in “My readings”; for anything else, write to us), or delete your account. There is no automatic deletion. Under 15: readings likewise, until the child or their parent deletes them, or the profile is deleted; voice messages, 12 months at most, then deleted automatically
Photos, videos, group messages and private messages (text and voice), reactions, your corrections of readings (“Well read”, “Almost”)	To show what you choose to share, to the members of your groups or the person you're writing to	Consent	From age 15: until you ask us to delete them, or delete your account; no automatic deletion. Under 15: photos, videos and voice messages, 12 months at most
Reports, blocks, and your agreement to the community rules (its date and version)	To protect the community, and to know you agreed to the rules before writing	Legitimate interest; performance of the contract	Blocks and agreement: as long as the account exists. Reports: kept for moderation; the ones you made lose your name when your account is deleted
Content that is reported, removed by our team, or “deleted for everyone” by a group admin: a copy (the content, its files, who wrote it and their email address)	To keep evidence in case the authorities ask for it. Nobody can see it in the app	Legal obligation (the law asks us to keep evidence)	Reported content: until our team decides; if there's nothing to remove, the copy is deleted. Content removed or deleted for everyone, including a child's: hidden from everyone, but never deleted straight away; kept for one year, even if its author deletes their account, then deleted
Your phone's notification address, and the app's language	To send you the notifications you've allowed, in your language	Consent (notifications); performance of the contract (language)	Until you log out, or delete your account
Subscription: your account's technical identifier (shared with RevenueCat), the state of your subscription (active or not, plan, end date, product) and Family seats (who holds whose seat, since when)	To know whether your subscription is active, and to open the seats the subscriber gives	Performance of the contract	As long as the account exists
If you sign in with Apple: a token provided by Apple	To cut the link between Daylika and your Apple Account when you delete your account. Nobody can read it from the app	Performance of the contract	Until the account is deleted
Child accounts: the link to the parent's account, and the record of their consent (who gave it, when, and what they chose)	To prove the parent's consent, and let them manage their child's account	Legal obligation (a parent's consent under the age set by the law of the country)	As long as the child's account exists, then one year
If your child asked for your consent: your email address (given by your child), the number of emails sent, your answer (yes or no), the “I am their parent” box ticked, the version of the text you read, and the language	To ask for your consent, and prove your answer. You don't need an account to answer	Legal obligation (parental consent)	As long as the child's account exists, then one year. With no answer within 7 days, or after a no, the child's account is deleted
Technical traces: attempts at group and challenge codes (tied to your account, or to an encrypted fingerprint of your IP address, never kept in clear), our providers' logs (IP address, time)	To prevent abuse, and for security	Legitimate interest	One day for code attempts. Logs: the short period set by each provider
Totals about how the app is used, worked out from the data above, for example: how many accounts and profiles, new ones each day, the episodes and days completed (with their duration and mistakes), the flame, the last time the app was opened, how people sign in, subscriptions by plan, group sizes and the days groups won, the number of readings, messages, shares and blocks (never their content), notifications allowed, parental consent requests, age range, starting point, app language, and why people learn (never a religious reason, which is not sent to us)	Improving the app: seeing where people drop off, what is too hard, who comes back. Our team looks at totals, never at one person, and works them out itself on our server: no external measurement tools. Child profiles are counted, in totals only. You can ask not to be counted (section 8)	Legitimate interest (improving the service)	These totals are worked out each time they are read, from the data above and its retention periods. If you opt out, we keep your email address on the list of people we don't count, and remove it when your account is deleted
Dictionary: the words you look up	Knowing which words are missing and improving the dictionary. The dictionary is on your phone; the app only sends us the word looked up, its language, whether it was found, and the day. Without your name or your account: we don't know who looked up what. A word that looks like personal data (an @, a digit, a link) is discarded	Legitimate interest (improving the service), on data not linked to a person	3 years
Daylika Translator: the sentence you ask us to translate	Giving you the translation. The sentence goes through our server, then through Anthropic, our artificial intelligence provider (section 6), which translates it. We don't keep it, unless you said yes to the next line. An artificial intelligence can make mistakes	Performance of the contract (you ask for the translation)	The time of the translation on our side; at Anthropic, see section 6
Daylika Translator: the number of sentences translated during the day	Enforcing the limit of 15 sentences a day. A counter, with no text at all	Legitimate interest (preventing abuse)	Deleted every night
Daylika Translator: your sentences and their translations, only if you are an adult and said yes to “Help us improve Daylika”	Improving the Daylika Translator and, one day, training our own artificial intelligence. Before keeping them, we remove names, email addresses, numbers, addresses and usernames, and we keep neither your account nor the time: the sentence is no longer linked to you. This is why a sentence already kept can't be removed. A sentence may mention religion or health: this is why we ask for your consent, and why nothing is kept without it. You can stop whenever you like, in Settings. Never the sentences of anyone under 18	Your consent, which you can withdraw for the future	3 years. The record of your choice (yes or no, the date, the version of the text): up to 3 years after your last choice
“Report a mistake” under a translation: the sentence, the translation and the reason	Fixing the translator	Legitimate interest (fixing our mistakes)	1 year

For a child profile created by a parent, this data is kept with the parent's account.

"As long as the account exists" has a limit: an account nobody has opened for 3 years is deleted, with everything it keeps (readings, voice messages, photos, progress). Opening the app, even once, resets this count, and a child who is learning also keeps their parent's account alive. We warn first by email, one month before and then 7 days before, and a last email says when it is done. For a child, these emails go to their parent (the address of the parent's account, or the one that gave consent), and a child's account is never deleted this way without their parent having been warned. An account with no address to write to, or suspended by our team, is deleted without an email. An account with an ongoing subscription is never deleted this way. As for a deleted account, only two things are kept, for one year: content removed by our team, hidden, as evidence, and the record of a parent's consent.

3. What never leaves your phone

Your date of birth: it's used to work out your age group. If it shows you're under 15 where Daylika is for people aged 15 and over, the phone only keeps the day that date turns 15, so nobody can start again straight away with another date (and, until it's deleted, the account's identifier);
a religious reason chosen when you join (“The Quran / Prayer”): it stays on your phone and is never sent to us;
your contacts: to invite someone, you can pick a person with your phone's contact picker. Their number is only used to open your messaging app, ready to send. It's never sent to us, and nothing is kept;
Face ID or your fingerprint, when a parent goes back to their profile: the phone does the check, we receive nothing;
the daily reminder: it's scheduled by the phone itself.

We do not collect your location or any advertising identifier. There are no ads, no external audience measurement tools (our statistics, section 2, are totals we work out ourselves on our server) and no crash-tracking tools in the app. During the beta only, TestFlight, Apple's app for test versions, sends us crash reports and anything you choose to send us (section 6). No data is sold, rented or passed on to anyone.

4. What others can see

Members of your groups, and nobody else: your first name or @username, your photo, your progress (your flame, season, days and words), your listening time and finished stories, the readings you let them hear, and what you write or record in the group. In a large group (more than 50 members), others see your @username, never your first name or photo;
a child: likewise, only the members of their groups see and hear what a child shares, and they have private messages only with their parents, their brothers and sisters under 15 and the under-18s in their small groups, never with any other adult;
a private message: only the person you're writing to, a member of one of your small groups (one that has never had more than 50 members) or, for a child under 15, their parents and their brothers and sisters under 15;
whoever opens your challenge link (“Challenge 3 people”): your first name, and nothing else, even without a Daylika account and even if the link was forwarded to them;
the league of groups, the only public thing in the app: the name, photo, days won and perfect days of each group of at least 2 members, even if it includes a child, but never its members, and nobody can contact them from the league. Every name and photo can be reported.

There is no public feed, no posting for everyone, no followers. When content is reported, we look at it to handle the report.

5. If you sign in with Apple or Google

You can create your account in three ways: with Apple, with Google, or with your email address and a one-time code. With Apple or Google, we receive your email address and a technical identifier, and depending on the service your name (with Google, also the address of your Google photo). Our sign-in service keeps them with your account; the app doesn't display them. We never receive your password, your contacts or the content of your account with them. Apple also lets you hide your real email address: it works, and we won't learn anything more.

6. Who processes this data for us

Provider	Role, and what it receives	Where
Supabase	Our server: database, sign-in, storage of files (voice, photos, videos). Everything in section 2	European Union
RevenueCat	Subscriptions: your account's technical identifier (neither your name nor your email) and your purchases	United States, standard contractual clauses
Expo	Sending notifications (your phone's notification address, the title and the start of the message) and delivering app updates (technical information, without your account)	United States
Cloudflare	Delivering the lesson voices your phone downloads: like any host, it sees the phone's IP address, the time and the file requested, without your name, your account or your email address	Worldwide network (company in the United States, EU–US Data Privacy Framework)
Resend	Sending emails: signing in (your email address and your code), asking a parent for consent, the code that confirms a child's email address, and the notice before an unused account is deleted	United States
Anthropic	The Daylika Translator: the sentence you ask us to translate, and nothing else (not your name, your account or your email address). Under its terms, Anthropic doesn't use it to train its models and deletes it from its servers within 30 days (longer only if its systems flag a breach of its usage rules)	United States
Apple / Google	Signing in with their account, collecting subscription payments, and delivering notifications to your phone	Under their own policies
Apple (TestFlight, during the beta)	Installing test versions: Apple and we receive crash reports and usage data, and the feedback and screenshots you choose to send	Under Apple's policy

We never see your payment method: you enter it in the App Store or on Google Play, and it never goes through the app.

7. Age and child profiles

Daylika is open in every country, in every language. The country we go by is the one set on the phone (Settings › General › Language & Region). This country (two letters, for example “FR”) is sent to our server and kept with your account, for as long as it exists, to apply the right age rule:

under the age of parental consent set by the law of your country (13 in the UK and Belgium; 15 in France; 16 in Germany; 18 in some countries; 18 where the rule is unclear): a parent's consent is needed to create the account, and we keep a record of it (who gave it, when, and what they chose) for as long as the account exists, then one year. The child has their own account, linked to a parent's. Either the parent adds them from their own account (“My family”), or a child who signs up alone gives a parent's email address, and the parent gets a link to say yes or no; with no answer within 7 days, or after a no, the child's account is deleted. Until consent is given, the child shares nothing. The parent can then, at any time, close their groups in “My family” (the child then leaves the groups their parent isn't in), or remove them from “My family”: their account is then deleted (if they signed up alone, after 7 days without new consent). If that parent deletes their own account, a child who signed up alone keeps theirs and everything they've learned, but leaves their groups and has to ask a parent for consent again: with no answer within 7 days, their account is deleted. Nothing a child shares is public, except their first name on their challenge link, if they challenge someone: their profile photo is only seen by their groups, and they have private messages only with their parents, their brothers and sisters under 15 and the under-18s in their small groups, never with any other adult. Their readings are kept until they or their parent delete them. Under 15, their voice messages, and the photos and videos they send, are deleted after 12 months at most;
in a country whose law forbids this kind of service under 15, even with a parent's consent, and for now in the United States: Daylika is for people aged 15 and over there, with no child profiles. If the date of birth given shows someone is under 15, the account that was just created is deleted straight away.

At 18, the account of a child linked to their parent is detached from it (if their parent added them, at the latest on the 1 January after they turn 18): their parent no longer manages their account and only sees what their groups' members see. They keep everything they have learned, and their seat in their parent's plan for as long as the parent leaves it to them. If they only learned on their parent's phone, without a sign-in of their own, their profile leaves that phone: email us so they can get it back on their own. A notification lets each of them know, if they allowed them.

We don't knowingly keep any data from a child without their parent's consent: if you think a child is using Daylika without it, write to us and we'll delete the account.

Private messages only happen between members of the same small group (one that has never had more than 50 members), and never between someone under 18 and an adult. The only exception: under 15, a child also has them with their parents, and with their brothers and sisters under 15. Everywhere, every message, reading and profile, and every group in the league, can be reported, and anyone can be blocked.

The Daylika Translator and children. Under the age of parental consent, the Daylika Translator is off by default: only a parent turns it on, on their child's page, and can turn it off again. We keep a record of this choice (on or off, the date, the version of the text), as proof. The sentences of anyone under 18 are never kept by Daylika. The dictionary stays open to everyone: it is on the phone.

8. Your rights

At any time, you can ask to access your data, correct it, delete it, receive a copy of it, or object to how it's used. You can also withdraw your consent: delete a reading in “My readings”, ask us to delete a photo, video or message, or turn off notifications in your phone's settings. You can also opt out of our statistics (section 2): your account and the child profiles you added will no longer be counted; if your child has their own account, tell us and they will no longer be counted either. Write to contact@daylika.com: we reply within one month.

Deleting your account is done directly in the app: Me › Settings › Delete my account. The full procedure, and what is deleted, are on the Deleting your account page.

If you're not satisfied with our answer, you can complain to the CNIL, the French data protection authority — cnil.fr/fr/plaintes — or to the data protection authority of your own country (in the United Kingdom, the ICO — ico.org.uk).

9. Why you need an account

The app is built around learning together: groups, listening to each other read, keeping each other going. Your account also lets you find your progress on another phone and tie your subscription to you rather than to a phone. That's why we ask for it when you join, before the first episode.

You don't need a connection all the time, though. Once you're signed in, you can learn offline: your progress is saved on the phone, then sent when you're back online.

10. Security

Everything exchanged with our servers is encrypted (HTTPS). Access to data is restricted row by row: technically, a person can only read their own data, the data of the groups they belong to, and what the members of their groups share there. Files (voice, photos, videos) are kept in private storage, only readable through a temporary link.

11. Changes

Any change to this policy will be published on this page, with a new date. We'll let you know in the app about any significant change.