Privacy policy

1. Operator

The personal data operator is Daydi. Contact: privacy@daydi.uz.

2. What we collect

Account: phone number, username, display name, city, language, experience level and interests.

Activity: GPS tracks (coordinates, elevation, time), trip statistics, photos (EXIF is stored but never shown publicly), comments, reports.

Device: platform, app version, push token, IP address, session data.

Analytics: in-app actions (screen views, challenge joins, etc.) — the minimum needed for personalisation.

3. Purposes

Account creation and authentication; track verification and challenge scoring; public profile and community features; safety (live tracking, overdue alerts); service improvement and statistics.

4. Where and how long

Data is stored on servers physically located in the Republic of Uzbekistan; the database is registered in the State Register of personal data databases.

Data is kept while the account is active and for 30 days after deletion; personal data is then anonymised. Verified challenge results are retained in anonymised form.

Live-tracking links are deleted after 24 hours (or when revoked by the user).

5. Who we share with

Public: username, name, avatar, statistics and trips you made public (with trimmed start/end and privacy zones removed).

Service providers: SMS delivery (Eskiz), push notifications (Firebase), weather (Open-Meteo — coordinates not linked to a person). They use data only to provide the service.

Government authorities — only as required by law.

6. Your rights

View and export your data (“Export data” in the app), correct it, change privacy settings, delete your account (“Delete account” — with a 30-day recovery period).

Send requests to privacy@daydi.uz; we answer within 10 business days.

7. Security

Connections are TLS-encrypted; tokens and OTP codes are stored hashed; staff access is audited.

8. Cookies and changes

The website uses a cookie only for your language choice. When the policy changes, the date is shown on this page.