Privacy policy
Updated: 2026-09-15 · Contact: privacy@daydimiz.uz
This policy explains how Daydi collects, stores and protects your personal data. It follows the Law of the Republic of Uzbekistan “On Personal Data” No. ZRU-547.
1. Operator
The personal data operator is Daydi. Contact: Telegram @daydimiz (https://t.me/daydimiz).
2. What we collect
Account: phone number, username, display name, city, language, experience level and interests.
Activity: GPS tracks (coordinates, elevation, time), trip statistics, photos (EXIF is stored but never shown publicly), comments, reports.
Device: platform, app version, push token, IP address, session data.
Analytics: in-app actions (screen views, challenge joins, etc.) — the minimum needed for personalisation.
Website statistics: opening a page on daydimiz.uz records the kind of page, which destination, route or article it was, and the campaign tag carried by the link (campaign or utm_campaign). No identifier is attached to those records — no cookie, no anonymous id — so they do not describe a person. Nothing at all is sent when your browser has Do Not Track or Global Privacy Control switched on. For profiles and trip pages only the kind of page is recorded, never the username or the trip id.
3. Purposes
Account creation and authentication; track verification and challenge scoring; public profile and community features; safety (live tracking, overdue alerts); service improvement and statistics.
4. Where and how long
Data is stored on servers physically located in the Republic of Uzbekistan; the database is registered in the State Register of personal data databases.
Data is kept while the account is active and for 30 days after deletion; personal data is then anonymised. Verified challenge results are retained in anonymised form.
Live-tracking links are deleted after 24 hours (or when revoked by the user).
5. Who we share with
Public: username, name, avatar, statistics and trips you made public (with trimmed start/end and privacy zones removed).
Service providers: SMS delivery (Eskiz), push notifications (Google Firebase), weather (Open-Meteo — coordinates not linked to a person), crash reporting (Sentry — phone numbers and precise coordinates are stripped before sending). They use data only to provide the service.
Map tiles are fetched straight to your phone from OpenFreeMap, Mapterhorn (relief) and Esri (satellite). Those services see your IP address and which area you are looking at; we send them nothing about your account.
Government authorities — only as required by law.
6. Your rights
View and export your data (“Export data” in the app), correct it, change privacy settings, delete your account (“Delete account” — with a 30-day recovery period).
Send requests through Telegram — bot @daydimizbot or channel @daydimiz; we answer within 10 business days.
7. Security
Connections are TLS-encrypted; tokens and OTP codes are stored hashed; staff access is audited.
8. Cookies and changes
The website uses a cookie only for your language choice. The page statistics described above use neither a cookie nor browser storage. When the policy changes, the date is shown on this page.