How we handle your data.
Last updated: 26 October 2026
DayDayDate is committed to protecting your personal information. This policy explains what we collect, how we use it, and the rights you have. Questions? Email us anytime.
What we collect
We collect only what the product needs to plan your dates: • Account: your email and display name. Sign-in is passwordless, using a one-time email code, Sign in with Apple, or Google, all handled by Firebase Authentication (a Google service). We never set or store a password. • Plan preferences: the places, budget, time of day and dates you choose, and the plans you save. • Location (only with your permission): to centre the map on you, suggest places nearby, and notice when you arrive at a stop. We use low-power region monitoring, not continuous GPS, and only while you're using the app. • Photos & camera (only when you choose): to snap a photo at a stop, or save your route card to your photo library. • Device & notifications: your OS and app version for diagnostics, a push token if you turn on notifications, and a device identifier used to count feature usage and, only if you allow it, to measure which channel led you to install the app. We never sell your data. We do measure how the app is used, and which channel brought you here. Everyone involved is named in full under “Who we share it with”.
Permissions you control
Every sensitive permission is optional and is only requested in context, the first time a feature needs it. You can grant or revoke each one at any time in iOS Settings → DayDayDate: Location, Camera, Photos and Notifications. Turning one off only disables the feature that needs it, and the rest of the app keeps working.
How we use it
Used to: • Compose personalised date plans; • Power recommendations, reminders and search; • Run Live Date features (arrival nudges, walking route); • Improve the service and debug issues; • Contact you when necessary (important updates or support). We do not sell your data to third parties.
What we send to the AI
Your date plans are written by an AI model called Gemini, which Google runs on Vertex AI. When you ask for a plan, three things go to it: • What you type. Your request, word for word. • The area you name, as text: “Sheung Wan”, not a coordinate. • The plan settings you chose: occasion, budget, how long, how many stops, whether you have a car, the vibes and activities you picked, any cuisines and dietary needs you chose, MBTI types if you entered them, and the date and time you are planning for. That is the whole list. Nothing goes to the AI until you ask for a plan, or for a change to one. The first time you do, the app tells you that planning uses a trusted AI service and asks you to agree, with a link to this section. You can stop at any time by not asking; the rest of the app keeps working. To have us stop using your data, or delete our copy of what you sent, email us or delete your account in the app (Profile → Privacy → Delete account). We do not send your name, your email, your account ID, your photos or your contacts, and we do not send your device's location. Location permission centres the map and notices when you arrive at a stop; those coordinates stay between your phone and our own service, and never reach the AI model.
Who we share it with
We rely on a small set of trusted providers to run the service: • Supabase: our database and file storage (Singapore region), with industry-standard encryption, access control and backups. • Google Cloud (Vertex AI): the Gemini model that writes your date plans. It runs on Google's global endpoint rather than a Hong Kong one, so your request may be processed outside Hong Kong. What reaches it is listed in full under “What we send to the AI”. • Vercel: hosts this website, and measures it. Page views (Web Analytics) and loading speed (Speed Insights). No cookies, no cross-site profile. • Firebase (Google): sign-in and push notifications. • Apple & Google: the sign-in method you choose. • Apple: processes in-app purchases and subscriptions; we never receive your card or payment details. • Mixpanel: product analytics. Which screens and features get used, so we can tell what is actually working. Keyed to a device identifier, not to your email. • AppsFlyer: install measurement. Which post, ad or channel led you to download the app. It runs on both surfaces, in the app and on this website behind the banner that offers you the app. On iOS this uses Apple's advertising identifier only if you allow it when the app asks; decline and measurement falls back to a non-advertising identifier, with nothing else about the app changed. On the website there is no advertising identifier involved at all; it writes to your browser's local storage instead. • Sentry: crash and error reports, so we can fix what breaks. We do not sell your data and we never share it with data brokers. Any promotion you see in the app is our own partner offer, chosen from the plan in front of you; there is no third-party ad network in DayDayDate. Sharing a device identifier with AppsFlyer is what Apple classes as tracking, which is why the app asks first and why saying no is a real option.
Cookies and analytics
On this website: • Cookies: just the one, and it only remembers which language you're reading in. Nothing else here needs one. • Vercel: the platform that hosts the site. Its Web Analytics counts page views and Speed Insights records how quickly pages load. Neither sets a cookie, and both report totals rather than named people. • AppsFlyer: the banner that offers you the app. It measures which post, ad or channel brought a visitor to the App Store, and to do that it loads a script from AppsFlyer and writes to your browser's local storage. This is measurement, not advertising. No advertising profile is built about you, and no ad network is involved. In the app, Mixpanel counts how features are used and AppsFlyer measures which channel brought you here and whether our own re-engagement messages worked. None of this is used to show you third-party ads: the only promotions in DayDayDate are our own partner offers.
Your rights
You can, at any time: • Delete your account and all associated data directly in the app (Profile → Privacy → Delete account), which is a permanent deletion, not a deactivation; • Export your data; • Access or update your details; • Opt out of push notifications; • Ask us to stop using your data. Email us for anything the app doesn't cover.
Children's privacy
DayDayDate is not intended for anyone under 18, and we do not knowingly collect personal data from them.
Policy updates
We may update this policy. Material changes will be announced in the app and on the site.
Privacy questions? Reach us at:
hello@daydaydate.hk