How Daily Sunshine collects, uses, and protects your information — compliant with global privacy laws.
Last updated: August 24, 2026
Daily Sunshine ("we", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what we collect, why, how we use it, and the rights you have. It is designed to comply with applicable privacy laws and regulations in all regions where the Platform operates, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), the UK Data Protection Act, the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), Japan's Act on the Protection of Personal Information (APPI), Singapore's Personal Data Protection Act (PDPA), and other applicable global privacy frameworks.
By registering for and using the Platform, you consent to the collection, use, and processing of your data as described here. Your consent is recorded at sign-up.
Account data: name, email address, authentication credentials, and account role.
Content data: messages you generate, send, schedule, favorite, or share; recipient emails and names you enter; support ticket content and attachments.
Usage & analytics data: feature usage events, approximate region/timezone and language derived from your browser, device type, and timestamps. We do not collect precise geolocation.
Payment data: subscription status and billing metadata processed via our payment processor (Stripe). We do not store full card numbers — payment details are handled securely by Stripe.
Technical data: IP address, browser type, and cookies/local storage as described below.
We process your data to: provide, operate, and maintain the Platform; generate and deliver AI-generated and scheduled messages; process subscriptions and referrals; send transactional and service emails; provide support; analyze and improve features; detect, prevent, and address fraud, abuse, and security issues; and comply with legal obligations.
Where we rely on your personal data for marketing or optional features, we seek your consent, which you may withdraw at any time.
For users in the EEA/UK, we process personal data on the following lawful bases: contract (to provide the service you requested); consent (for optional features, marketing, and cookies — withdrawable anytime); legitimate interests (security, fraud prevention, and product improvement); and legal obligation (where required by law).
We do not sell your personal data. We share data only with: service providers who process data on our behalf under strict contractual safeguards (e.g., payment processing via Stripe, email delivery, AI generation, and cloud hosting); authorities where required by law; and successors in the event of a merger, acquisition, or asset transfer. All processors are bound by confidentiality and data-protection obligations.
Your data may be processed in countries other than your own, including the United States and other regions where our providers operate. We rely on appropriate safeguards — such as Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms — to ensure international transfers comply with applicable law.
We retain your data only as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Account data is retained while your account is active; content and usage data may be retained after account closure where required for legal, security, or analytics purposes, then deleted or anonymized.
Australia: For users in Australia, we comply with the Privacy Act 1988 and the Australian Privacy Principles (APPs). We take reasonable steps to notify you of the collection of personal information, use and disclose it only for the purpose for which it was collected (or a related, reasonably expected purpose, or with consent or as required by law), and allow you to access and correct your personal information. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure they do not breach the APPs, and we remain accountable for such transfers except where you consent to the disclosure.
Japan: For users in Japan, we comply with the Act on the Protection of Personal Information (APPI) and the guidelines of the Personal Information Protection Commission (PPC). We specify the purpose of use of personal information, handle it within the scope necessary to achieve that purpose, take appropriate security measures, and respect your rights to disclosure, correction, and cessation of use. Where we transfer personal information to a third party in a foreign country, we do so in accordance with the APPI's cross-border transfer requirements.
Singapore: For users in Singapore, we comply with the Personal Data Protection Act (PDPA), including the Data Protection Provisions, the Do Not Call (DNC) provisions, and the PDPA's accountability and transfer limitation obligations. We obtain valid consent for the collection, use, and disclosure of personal data, notify you of our purposes, protect personal data in our possession, and allow you to access and correct your data. We do not send marketing messages to Singapore telephone numbers listed on the DNC registry without clear, unambiguous consent.
Depending on your region, you may have the right to: access the personal data we hold about you; rectify inaccurate data; delete your data ("right to be forgotten"); restrict or object to processing; port your data to another service; withdraw consent at any time; and lodge a complaint with your local data protection authority.
California residents have rights under CCPA/CPRA, including the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information.
To exercise any right, contact us through the in-app support channel. We will respond within the timeframe required by applicable law and may verify your identity before acting on a request.
The Platform is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will promptly delete it.
We use essential cookies and local storage to operate the Platform, maintain your session, and remember preferences (such as language and notification settings). We may use analytics tools to understand usage. Where required by law, non-essential cookies are set only with your consent, which you can manage or withdraw through your browser settings.
We implement appropriate technical and organizational measures — including access controls, Row-Level Security on user data, encryption in transit, and regular security review — to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Platform uses artificial intelligence to generate uplifting messages. AI-generated content is produced from general prompts and does not use your personal data to train external models. You should not rely on AI-generated content as professional or clinical advice.
You can: update your account details in the app; manage notification and scheduling preferences; cancel your subscription at any time; disable cookies in your browser; and request deletion of your data as described above.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated with reasonable notice. Continued use after changes take effect constitutes acceptance of the revised policy.
For privacy questions or to exercise your rights, contact us through the in-app support channel. EU/UK users may also lodge a complaint with their local data protection supervisory authority. By using the Platform, you acknowledge that you have read and accepted this Privacy Policy in full.