Privacy policy

1. Data controller

Aitio Solutions Oy, Finland. Contact for privacy, export, or deletion questions: help@deadyet.app.

2. What we store and retention

• Account and contact details: email address, optional phone number, display name, locale, and IANA timezone, kept until account deletion so we can evaluate schedules and reach you.
• Optional birthday: used only to draw your week position on the 4,160-week grid, kept until you clear it or delete your account.
• Early-access waitlist: if you submit your email before public launch, we store your email address and optional plan interest solely to send confirmation and launch availability notices.
• Schedules, beats, silences, and append-only event log: retained for 24 months so you can verify why any step fired or did not fire, then aggregated to anonymous counts.
• Watcher and recipient contacts: name, email, and optional phone number of people you invite or name, kept until removed by you or by the contact themselves.
• Vault envelopes: client-encrypted ciphertext (AES-256-GCM) and wrapped content keys, kept until you destroy the envelope or delete your account. We never hold plaintext content or recipient decryption keys.
• Billing identifiers: Stripe customer and subscription identifiers for paid plans. Payment card details remain with Stripe, Apple, or Google.

3. What we never collect

We do not collect GPS location, phone address books, advertising identifiers, third-party analytics profiles, or raw health data. Optional passive step or unlock signals on mobile are evaluated on your device and transmit only a boolean beat.

4. Infrastructure and processors

We use Cloudflare (Workers, D1 database in Western Europe where supported, KV, Queues, R2 encrypted backups), Resend (transactional email), Twilio (SMS on paid plans), Google Firebase Cloud Messaging (push delivery only, without Firebase Analytics), and Stripe (web billing and VAT).

5. Your GDPR rights

Under EU GDPR, our lawful basis is contract performance for account holders, legitimate interest following explicit invitation acceptance for watchers, and consent for optional passive signals. You may export all data (including ciphertext) at any time, rectify your settings, or delete your account. Deleting an account destroys vault envelopes immediately and removes remaining personal records within 24 hours.