Privacy

This policy covers the Daynori app on iPhone and Android and the website daynori.mizustudio.dev. It also covers the start page mizustudio.dev, which has neither a counter nor a form. Last updated: 4 October 2026.

Who is responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

• Alex Viktor Heinrich, c/o Block Services, Stuttgarter Str. 106, 70736 Fellbach, Germany
• Email: daynori@mizustudio.dev
• Contact form: daynori.mizustudio.dev/contact

The essentials

• Daynori works without an account. Alarms, Dailys and preferences then stay on your device only.
• Data reaches our server only when you sign in, start the sync, send feedback or redeem points.
• The free version shows ads from Google. They are tailored to you only with your consent.
• Daynori contains no analytics service and no crash reporting service. This website sets no cookies.

On your device

Alarms and groups with their names, sounds and wake-up tasks, Dailys, progress, appearance and preferences are saved on your device. Your own audio files, voices downloaded on Android and cached weather data are stored there too. Opening the app alone does not sync these contents with a Daynori account. Backups of your device may contain copies according to your system settings.

Optional account

Daynori can be used without an account. When you sign in with your email address, our service provider Supabase stores your account ID, your email address, the times of your sign-ins and the confirmations needed for sign-in. We send you the sign-in code by email through our own mail server; it is valid for ten minutes. There is no password.

On iPhone you can sign in with Apple instead, on Android with Google. We then receive an identifier and your email address from that provider; with Apple, a relay address if you choose one. Google may also provide your profile name and other profile information, which is stored in your account metadata at Supabase. When you sign in with Apple, we also store an access token from Apple in encrypted form; we use it to revoke the link at Apple when you delete your account. Apple and Google process the sign-in as controllers in their own right under their own terms.

The sign-in session is saved on your device. Every request to the server briefly leaves technical log data there, including your IP address and the time.

The legal basis is Art. 6(1)(b) GDPR: we provide the account you create. The data is kept until you delete the account.

Sync after your choice

Only after you start the sync and confirm your choices are alarms and groups with their names, sounds and wake-up tasks, Dailys, progress, completions, unlocks and time zone stored with your Supabase account. Whether an alarm is switched on, and an alarm that is ringing, stay on the device itself. Signing out does not automatically delete data already saved to your account.

The legal basis is Art. 6(1)(b) GDPR. Synced content is kept until you delete the account.

Pro pass

With an account, our server counts points for each Daily you complete and sync. If you redeem points for days of Daynori Pro, the server stores when you redeemed how many points for how many days, and tells RevenueCat the identifier of your account and the end of the pass so that Pro applies on your devices. The legal basis is Art. 6(1)(b) GDPR. These details are deleted from our server with the account.

Feedback from the app

When you send feedback, we store on our server your text, the kind and area of the feedback, the app version, your operating system and the language of the app. We store an email address only if you give one for an answer. If you are signed in at that moment, the feedback is assigned to your account and deleted with the account. So that we can read and answer it, a copy is sent by email to our mailbox.

The legal basis is Art. 6(1)(f) GDPR; our interest is to answer questions and fix problems. We delete feedback once it is settled, after twelve months at the latest.

Weather and location

Weather is optional. Location is read only at your request, requested at low accuracy and rounded to two decimal places before storage or a forecast request. These approximate coordinates are sent to the Norwegian weather service MET Norway (Meteorologisk institutt, Oslo). The request also includes the IP address normally used for network requests. MET Norway stores both in its logs in Norway and is the controller for that. Norway is part of the European Economic Area.

Your weather location is not synced with your Daynori account. You can remove it in weather settings and revoke the system permission. The legal basis is Art. 6(1)(b) GDPR: you request the forecast for your place.

Announcements, voices and your music

On iPhone, Daynori uses only Apple system voices for announcements. Daynori does not download additional speech models. If no suitable voice is available for your language, an English system voice is used when available. On Android, downloaded speech models generate announcements on your device; when you download a voice, the source named in the voice catalogue receives the usual network request. Daynori does not upload your announcement text or imported audio files to a speech service and does not record microphone audio.

Camera and motion

Some wake-up tasks use the camera or the motion sensors if you choose them: the camera reads the barcode you chose or measures how bright the room is. The motion sensors detect shaking and count steps. This happens on your device while the task runs. Daynori stores no images and sends neither images nor motion data anywhere. Only the barcode you choose is stored, with its name, on your device.

Pro and purchases

For Pro purchases and when checking or restoring them, the app store and RevenueCat process purchase and subscription information and a random identifier of your data on this device or the identifier of your Daynori account, to assign the purchase correctly. This includes technical details needed for processing, such as the country of the store, the app version and the operating system. Payment details such as your card number are entered with the store; Daynori does not receive them. Deleting your Daynori account does not cancel a store subscription. Manage subscriptions in the store.

RevenueCat works on our behalf. Apple and Google are controllers in their own right for purchase and payment. The legal basis is Art. 6(1)(b) GDPR. Purchase data is kept for as long as it is needed to provide Pro to you; at your request we delete it at RevenueCat earlier, unless a statutory retention duty prevents that.

Notifications and widgets

The operating system uses scheduled wake times, names and chosen display information for alarms, notifications, widgets and Live Activities. On iPhone, the app and its widgets share these data in a common store on your device. Information may be visible on the Lock Screen according to your device settings. Control permissions and previews in system settings.

Advertising

The free version shows one line of ads below the tab bar from the second day on, currently on iPhone only. There are no ads on a ringing alarm, in the introduction, while setting an alarm or in the sleep player. With Daynori Pro there are no ads.

The ads are served by Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes, among other things, your IP address and the approximate location derived from it, information about your device and the app, which ads you saw or tapped and, if you allow it, the advertising ID of your device. Google decides on the purposes and means of this processing itself and is the controller for it. More: business.safety.google/privacy

Before the first ad, Daynori asks for your consent in the European Economic Area, the United Kingdom and Switzerland, using Google’s consent dialog. On iPhone, Apple then asks whether the app may track you across other companies’ apps and websites; only if you allow that does Google receive the advertising ID of your iPhone. With your consent, ads are tailored to you, and information is stored on and read from your device for that purpose. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) of the German TDDDG.

If you decline, you see general ads instead of ads tailored to you. The legal basis for those is Art. 6(1)(f) GDPR; our interest is to finance the free version.

You can change or withdraw your decision at any time under Settings → About Daynori → Ad settings, and the tracking permission in your iPhone’s Settings under Privacy & Security → Tracking. Withdrawal applies to the future. Daynori has no analytics or tracking feature of its own.

Children and teenagers

Daynori is not aimed at children. The app does not ask for your age and does not know it.

In Germany you can consent to ads tailored to you only from the age of 16; in other countries the limit lies between 13 and 16. If you are younger, your parents or guardians decide: decline in the consent dialog, or let them choose for you. Without consent, Daynori shows general ads only.

Only ads that Google rates as suitable for most audiences (rating “PG”) are requested; ads rated for teenagers or adults are excluded. Parents can withdraw a consent at any time in the ad settings or write to us; we delete a child’s account at their request.

Website: visits and hosting

The website runs on our own server at Contabo GmbH in Germany. In front of it stands the network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA: it receives your request, usually in a data centre near you, wards off attacks and passes it on to our server. The technically necessary details are processed in doing so: your IP address, date and time, the address requested, your browser’s identification and the page you came from.

Our web server keeps a log of this to detect attacks and find errors, and deletes it after 14 days at the latest. The legal basis is Art. 6(1)(f) GDPR; our interest is secure and reliable operation. Cloudflare and Contabo work on our behalf. More about Cloudflare: www.cloudflare.com/privacypolicy

Website: counting visits

We count on the server how often a page is opened per day, how often a partner’s link is opened and how often a store button is pressed. Only a daily number per page, partner and store is stored: no IP address, no browser identification, no time of day and nothing that connects two requests. The browser identification is only read, so that search engines and other automated requests are not counted. No script runs in your browser for this. Nothing can be traced back to you.

Website: partner links and store buttons

If you arrive through a partner’s link, we count the visit for that partner. The store buttons lead through this website to the App Store or Google Play. We pass the store the partner’s name or the word “website” as a campaign, and nothing else about you. From the store on, its own privacy rules apply.

Website: storage in your browser

This website sets no cookies and loads nothing from other providers. Your browser keeps only what you choose yourself: light or dark, the accent colour and whether motion is paused. This is necessary to keep the appearance you chose (Section 25(2) no. 2 of the German TDDDG). The values stay in your browser and are not sent to us; you can delete them there at any time.

Contact form and email

If you write to us through the contact form or by email, we process your email address, your message and, if you give them, your name and topic, in order to answer you. Messages from the form are sent by email to our mailbox. If that fails, we store them on our server until we have read them. Mailbox and server are at Contabo GmbH in Germany.

Against spam we use a hidden field, a timing check and a daily limit, not a third-party service. The legal basis is Art. 6(1)(b) GDPR where your message concerns your use of Daynori, otherwise Art. 6(1)(f) GDPR; our interest is to answer enquiries. We delete enquiries once they are settled, after twelve months at the latest, unless a statutory retention duty applies.

Service providers and recipients

The following work on our behalf and on our instructions (Art. 28 GDPR):

• Supabase Pte. Ltd., Singapore: account, sync, Pro pass and feedback. The data is stored on servers of Amazon Web Services in Frankfurt am Main, Germany.
• RevenueCat, Inc., USA: assigning and checking purchases.
• Cloudflare, Inc., USA: protecting and forwarding requests to the website.
• Contabo GmbH, Munich, Germany: our server in Germany with the website, its counter and contact form, and our mailbox (sign-in codes, feedback, contact by email).

The following process data as controllers in their own right:

• Apple Distribution International Ltd., Ireland: App Store, purchases and Sign in with Apple.
• Google Ireland Limited and Google Commerce Limited, Ireland: Google Play, purchases, Google sign-in and the ads (AdMob).
• MET Norway, Norway: weather forecast.

We do not sell data and pass it on to no one else, unless the law obliges us to.

Countries outside the European Union

Supabase stores the data in Frankfurt am Main. If Supabase accesses it for maintenance from a country outside the European Union, the European Commission’s standard contractual clauses safeguard that. RevenueCat processes data in the USA on the basis of the standard contractual clauses. Cloudflare and Google are certified under the EU–U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). Cloudflare receives requests to the website in data centres in many countries.

How long we keep data

• Account, synced content, points and passes: until you delete the account.
• Sign-in codes: ten minutes.
• Feedback and enquiries: until they are settled, twelve months at most.
• Purchase data: for as long as it is needed to provide Pro to you and statutory retention periods run.
• Website counter: daily numbers that relate to no person, without a limit.

Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). You can withdraw a consent at any time with effect for the future (Art. 7(3)). Write to us at daynori@mizustudio.dev.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority where you live.

Your right to object

Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We then stop processing the data, unless there are compelling legitimate grounds for it or the processing serves legal claims.

Deletion and your choices

Delete local alarms and Dailys in the app. Under Settings → Your account, you can delete your online account after confirming again. Account deletion removes the account and its synced content; local content is kept. The data on your device and system backups are managed separately. How to delete the account without the app is described at daynori.mizustudio.dev/delete-account

Voluntary details, no automated decisions

You are not obliged to give us data. Without an email address or a sign-in with Apple or Google there is no account, however, and without a location no forecast for your place. Daynori makes no decisions that are taken solely by automated means and affect you legally (Art. 22 GDPR).

Changes

We update this policy when Daynori or the law changes. The version on this page applies.