Privacy Policy

1. Controller

DAYUMEMO is operated by an individual developer who determines how account and synchronization information is processed. The legal developer identity shown in the applicable app-store listing forms part of this notice.

2. Information processed

• Account information such as email address, account identifier, account type and verification state.
• Device and synchronization information such as device name or identifier, IP address, platform, app version, login and sync times, and sync state.
• Encrypted notes, images and attachments that you choose to store or synchronize.
• Operational and security logs containing request status, errors and abuse-prevention events.
• Local session cookies or storage used for login state, agreement acceptance, preferences and security state.
• For self-hosted sponsored cards: platform, language and the network information inherently required to deliver the configuration request. No mobile advertising identifier is requested.

3. Purposes and legal bases

Information is processed to provide accounts, encrypted storage, editing, migration, synchronization, export, security and support; to comply with legal obligations; and, where consent is required, to enable optional permissions or third-party advertising technology. The first advertising phase uses contextual, non-personalized sponsored cards delivered by the service operated for DAYUMEMO.

4. Encryption

Note content is encrypted on the client before cloud synchronization. The service is designed not to possess the plaintext data key required to read synchronized content. You remain responsible for protecting devices, passwords and recovery material.

5. Advertising

A non-empty note list may show one sponsored card selected without behavioral profiles. Display position, campaign dates and eligible platforms can be changed remotely. The client enforces a maximum of one feed ad and displays no feed ad when there are no notes. Interstitial capability is reserved and disabled by default.

If a third-party advertising SDK is introduced, this policy and the third-party disclosure list will be updated before activation. The provider, data fields, retention, transfers and opt-out method will be disclosed. In regions requiring consent, the SDK will not initialize until the required choice is obtained.

6. Sharing and processors

Personal information is not sold. Necessary service providers may process limited information under contractual safeguards. Information can also be disclosed where legally required or necessary to protect users and the service. A current third-party list will be published before any independent advertising SDK is enabled.

7. Retention and transfers

Information is retained only as long as needed for the stated purpose, legal obligations and security. Deleted or closed-account data is removed or anonymized, subject to limited backup and legal-retention periods. Cross-border processing will be disclosed and handled under the safeguards required by the destination and origin jurisdictions.

8. Your choices and rights

Depending on your location, you may request access, correction, export, deletion, restriction, objection, consent withdrawal or a copy of your information. You may also request account deletion. Contact yushenrui@gmail.com; we may verify account ownership before acting.

9. Children

DAYUMEMO is not currently offered for registration by children under 14 and is not directed to children under 13. We do not knowingly use children's personal information for advertising. A verifiable parental-consent process must be introduced before opening the service to younger users.

10. Security incidents and updates

Reasonable technical and organizational safeguards are used. Where required, affected users and authorities will be notified of qualifying incidents. Material policy changes will be presented prominently, and renewed consent will be requested when the law requires it.