Privacy Policy

1. Data Controller

Miguel Ángel Ordóñez González, with registered address in Ubrique, Cádiz, Spain (hereinafter, "we" or "the Controller"), is the entity responsible for processing the personal data collected through the Daypool mobile application.

Contact: privacy@daypool.app

2. Data We Collect

When you create an account, we collect your name, email address, and the avatar colour assigned to you. During app use, we collect:

• • The availability you mark within each group (available, unavailable, or maybe) for that group's dates.
• • Your personal availability marked without being associated with any group, using the same statuses.
• • The groups you belong to, your role in each (admin or member), and whether you have archived them.
• • Your vote in the polls of each group you participate in.
• • The in-app notifications you receive and whether you have read them.
• • Your device's push notification token, to send you alerts.
• • The date and version of these Terms you accepted at registration.
• • Your account creation date.

3. Account Access

To give you access to your account, depending on the method you choose at registration, we store your password (encrypted, unreadable by us) or the basic data from your Google sign-in. We also keep your session securely active while you use the app. We do not collect location data or access your photo library.

4. Possible Evolution of the Business Model

Daypool is currently a free, ad-free application. We reserve the right to introduce in the future paid features (premium subscription), affiliate links with travel services (e.g. flight or accommodation search), or advertising. If this happens, we will update this Privacy Policy before it takes effect, notify you through the app, and, when such changes involve new processing of personal data (e.g. advertising identifiers), request your explicit consent where legally required.

5. Legal Basis for Processing

We process your data on the following legal bases:

• • Contract performance: To provide you with the availability coordination service.
• • Consent: To send push notifications. You may withdraw consent at any time in your device settings.
• • Legitimate interest: For the security and proper technical operation of the app.

6. Data Sharing

We do not sell your data. We share it only with:

• • Database, authentication, and session-management infrastructure providers — servers in the EU.
• • Push notification delivery providers.
• • Google LLC — as an OAuth sign-in provider, if you choose to register with your Google account.
• • Apple Inc. and Google LLC — as app distribution platforms (App Store / Google Play).

7. Retention Period

We retain your data while your account is active. If you delete your account, your personal data is erased within a maximum of 30 days.

8. Your Rights

You may exercise the following rights by emailing privacy@daypool.app:

• • Access, rectification, and erasure of your data.
• • Portability: receive your data in a structured format.
• • Objection and restriction of processing.

9. Security

We apply encryption in transit, secure authentication, and access controls that restrict the data each user can query in the database.

10. Minors

Daypool is not intended for users under 16 years of age. If we detect that a minor has created an account without parental consent, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy. We will notify you via an in-app notification or by email.

12. Contact

For any privacy-related queries, write to us at hola@daypool.app.