Privacy Policy

MoreThanDay (the "Company", "we") operates the "DAYUS" mobile application (the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and the choices you have. We handle personal information in accordance with the Personal Information Protection Act of the Republic of Korea and other applicable data protection laws.

Article 1 (Information We Collect)

We collect the following categories of information:

• Account information — the account identifier and email address provided by your social login provider (Sign in with Apple or Google Sign-In), nickname, date of birth, gender, profile image, language and region settings, and your invite code.
• Content you create — the photos and text you post in your diary, and the couple information you set up together (relationship start date, couple name, daily notification time, and time zone).
• Device and session information — device identifier, device name, operating system version, app build number, and the push notification token issued to your device.
• Usage and diagnostic information — in-app activity events, crash reports, and performance data, used to measure and improve how the Service is working.
• Notification preferences — your consent settings for service, reminder, notice, update, and marketing notifications.

We ask for access to your camera and photo library only so that you can add photos to your diary and save images to your device. Photos are uploaded only when you choose to post them. We do not collect location data.

Article 2 (How We Use Information)

• To create and authenticate your account, connect you with your partner, and operate the core features of the Service.
• To confirm that you meet the minimum age requirement for the Service.
• To store and deliver the photos and messages you exchange with your partner.
• To send push notifications you have enabled, such as daily reminders and notices about the Service.
• To prevent fraudulent or abusive use, handle inquiries, and resolve disputes.
• To analyze usage, diagnose crashes, and improve the stability and quality of the Service.
• To send marketing or promotional notifications, only where you have separately consented. You may withdraw this consent at any time in the app's notification settings.

Article 3 (Sharing with Your Partner)

DAYUS is a service for two connected users. Once you are connected with a partner, the content you post — including photos, text, and your profile information such as nickname and profile image — becomes visible to that partner. This sharing is the intended purpose of the Service and is not treated as provision to an unrelated third party. If the connection between you and your partner ends, content that was already shared may remain visible to your former partner unless it is deleted.

Article 4 (Service Providers)

We do not sell personal information or provide it to third parties for their own marketing. We do rely on the following service providers to operate the Service, and they process personal information only on our instructions and only to the extent necessary:

• Google (Firebase) — push notification delivery, crash reporting, performance monitoring, and usage analytics.
• Amazon Web Services / Cloudflare — object storage for the photos and images you upload.
• Fly.io — application server hosting.
• Supabase — database hosting for account data and usage event data.
• ChottuLink — generating and resolving partner invitation links.

We may also disclose information where required to do so by law or by a lawful request from a public authority.

Article 5 (International Transfer)

The Company is based in the Republic of Korea, and the providers above operate globally. Your information — including account data, uploaded photos, and usage events — is stored and processed on servers located in the United States and in other regions operated by those providers. By using the Service, you understand that your information will be transferred outside your country of residence, and we take steps to ensure it remains protected in accordance with this Policy.

Article 6 (Retention and Deletion)

• We retain your personal information for as long as your account is active.
• When you request account deletion, your account enters a 30-day grace period during which it can be restored. After that period, the account is permanently deleted and identifiers such as your account ID and email address are irreversibly masked or erased.
• Photos and diary content are deleted together with the account at the end of the grace period, except where a copy remains associated with your partner's account.
• Usage and diagnostic events are retained in de-identified or aggregated form for statistical analysis.
• Where a law requires us to retain certain records, we retain them for the period that law prescribes and then destroy them.

Electronic files are destroyed using technical methods that make recovery impossible, and any paper documents are shredded or incinerated.

Article 7 (Your Rights and How to Exercise Them)

You may at any time request access to, correction of, deletion of, or suspension of the processing of your personal information, and you may withdraw consent you have previously given. Most of these actions are available directly in the app: you can edit your profile, change your notification settings, delete individual content, and delete your account from the settings screen. For anything else, contact us at support@dayus.co. Absent justifiable grounds to the contrary, we will act on your request without undue delay.

Article 8 (Analytics and Diagnostics)

The Service records in-app events, crash reports, and performance data so that we can understand how features are used and fix problems. This data is tied to your account and device identifiers, and is not used for advertising or shared with advertising networks. On iOS and Android you can further limit diagnostic sharing through your device settings.

Article 9 (Security Measures)

We implement technical and administrative measures to keep personal information secure, including an internal management plan, access controls, encryption of data in transit, restricted access to storage, and monitoring. Uploaded images are served through time-limited, signed URLs rather than public links.

Article 10 (Children)

The Service is not intended for children. You must be at least 14 years old to create an account. We do not knowingly collect personal information from children below that age; if we learn that we have, we will delete the account and the associated information without delay.

Article 11 (Privacy Officer)

We have designated a Privacy Officer to handle inquiries relating to the protection of personal information.

• Officer: Geonhyo Park
• Email: support@dayus.co

Article 12 (Remedies for Infringement of Rights)

If you are not satisfied with our response, you may contact your local data protection authority. Users in the Republic of Korea may also contact:

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
• Cyber Investigation Division, Supreme Prosecutors' Office (spo.go.kr / 02-3480-3573)
• National Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182)

Article 13 (Changes to This Policy)

We may update this Privacy Policy to reflect changes to the Service or to applicable law. We will announce any change within the Service at least 7 days before it takes effect, and at least 30 days in advance where the change is significant or unfavorable to users.