Privacy Policy

1. Scope and controller

This policy applies to the TheirDay app and narak.app/theirday legal and support pages.

For data processed outside your device, TheirDay is the controller or business responsible for deciding why and how that data is handled. Privacy requests can be sent to contact@narak.app.

2. Data kept on your device

Contact names, birthdays, optional birth years, phone numbers, contact email addresses, notes, where you met, social profile handles or URLs, reminder settings, and local ordering are stored locally on your device in the current app version.

TheirDay does not receive, upload, host, sell, or share those local contact entries unless a future feature clearly says otherwise and asks for any required permission.

3. Data TheirDay collects

• Support contact information: If you email contact@narak.app, we process your sender email address and the information you choose to include. This is separate from contact email addresses you add locally inside the app.
• Privacy request information: If you submit a privacy request, we process the information needed to verify and answer that request.
• Purchase validation data: TheirDay Pro uses App Store In-App Purchase, Google Play Billing, and RevenueCat. RevenueCat validates purchase status and the Pro entitlement, which is identified as pro. Purchase validation data may include product ID, transaction or receipt data, purchase history or status, entitlement status, app or device identifiers needed for validation, and related technical logs.
• Website and delivery data: Hosting, email, and security providers may process limited technical data such as IP address, timestamps, browser or device metadata, and delivery logs to operate the website and support channels.
• Website analytics and consent: Optional Vercel Web Analytics and the traffic_source_detected event run only after analytics consent on the website. You can reject or withdraw analytics consent at /privacy-choices. Website analytics is separate from local contact entries in the mobile app.
• Store platform data: Apple App Store and Google Play may process purchase, download, review, crash, or account data under their own terms and privacy policies. TheirDay does not control data collected directly by those stores.

4. How we use data

• Run local contact and birthday reminder functionality on your device.
• Validate TheirDay Pro purchase status, restore purchase access, and unlock the pro entitlement.
• Respond to support messages and privacy requests.
• Operate, secure, debug, maintain, and measure the website and support channels when permitted.
• Enforce terms, protect rights and safety, prevent abuse, and comply with legal obligations.

5. Legal bases and consent

Where a legal basis is required, we process support and privacy request data to provide requested support, comply with legal obligations, protect legitimate interests such as security and dispute prevention, and honor your consent where consent is required.

You can withdraw optional consent by not sending optional information, deleting local app data, changing device permissions, or contacting contact@narak.app for data controlled by TheirDay.

6. Sharing and disclosure

TheirDay does not sell personal information, does not share personal information with data brokers, and does not use third-party advertising or cross-app tracking in the current version.

• We may use service providers for website hosting, email delivery, security, and support operations.
• RevenueCat may process purchase validation data to validate purchase status, restore purchases, and manage the Pro entitlement.
• Apple and Google may process store-related data under their own policies when you use their app stores, in-app purchases, billing, or platform services.
• We may disclose limited information if required by law, legal process, or to protect rights, safety, and security.

7. App Store privacy and Google Play Data Safety

For App Store privacy details, local contacts, notes, birthdays, phone numbers, contact email addresses, and social handles are processed on device and are not collected by TheirDay in the current app version.

Names, birthdays, notes, phone numbers, email addresses, and social links saved inside the app are not sent to RevenueCat.

TheirDay does not use RevenueCat for tracking, ads, or analytics.

Support email is optional and should be treated as Contact Info collected for App Functionality, customer support, security, and legal compliance. TheirDay does not use collected data for Tracking.

App Privacy and Google Play Data Safety disclosures should include Purchases or Purchase History where applicable for App Store In-App Purchase, Google Play Billing, and RevenueCat purchase validation.

8. Security and storage

Local contact data remains under your control on your device.

Data transmitted to TheirDay through support or privacy channels is sent using standard secure transport where applicable and protected with reasonable administrative and technical safeguards.

No method of storage or transmission is perfectly secure, so we limit collected data to what is reasonably needed.

9. Retention and deletion

Local contact data remains on your device until you edit it, delete it, clear app data, or uninstall the app.

Support, privacy request, consent, and website analytics records are retained only as long as needed for support, legal compliance, security, dispute resolution, operational recordkeeping, and the retention periods described in the global Cookies Policy.

When retention is no longer needed, we delete or de-identify data controlled by TheirDay unless we are legally required to keep it.

10. International transfers

Support, website, email, store, and infrastructure providers may process data in the United States, Brazil, or other countries. Where required, we use reasonable safeguards for international transfers.

11. Children

TheirDay is not directed to children under 13. If you believe a child under 13 provided personal data to us through support channels, contact contact@narak.app so we can review and delete it when appropriate.

12. Your rights and privacy choices

Depending on your location, including Brazil where the LGPD applies, you may request confirmation, access, correction, deletion, portability, anonymization, restriction, objection, or information about sharing for personal data that TheirDay processes outside your device.

To submit a request, visit /privacy-choices or email contact@narak.app with the subject line Privacy Request - TheirDay. You may also contact us about consent withdrawal or complaints.

13. Changes and contact

We may update this policy when the product, law, or our practices change. Material updates will be reflected in the Last updated date.

Privacy contact: contact@narak.app