Privacy Policy

Last updated: 11 October 2026

Introduction

This Privacy Policy explains what information DayTickles ("DayTickles", "we", "our", or "us") collects, how we use it, how your information may be shared, and the choices available to you.

DayTickles is a daily micro-journaling app designed to help you capture and remember the small positive moments ("Tickles") that brighten your day.

By using DayTickles, you agree to the collection and use of your information as described in this Privacy Policy.

Information We Collect

Account Information

DayTickles uses Google Sign-In as the only way to create and access an account.

When you sign in with Google, Google provides us (through our backend provider, Supabase) with basic account information, including:

• Your email address
• Your name
• Your profile picture

We never receive or store your Google password. DayTickles does not copy your Google name or profile picture into your DayTickles profile and does not show them to other users.

Within DayTickles, we also store information you choose or generate, including:

• Your chosen username (your avatar is simply the first letter of your username)
• Your country (optional)
• Your preferred accent colour and the day your week starts on
• Optional daily and weekly Vibe targets
• Your notification preferences (the daily reminder and notifications about likes)
• Your Awareness Cue settings (whether it's on, vibration or sound, how often, and the hours it may fire in) and the times of the cues scheduled for you
• Your device's time zone, which the app saves automatically so Awareness Cues arrive at the right local times
• Whether Tokens & Rewards is switched on
• App settings and usage preferences, such as whether you've completed onboarding or viewed certain in-app guides

Content You Create

We store the content you create while using DayTickles, including:

• Tickles, including their text, Vibe (or My Day), date, visibility (Rippled or private), whether they were edited, and any Goal or Multickle they're tagged to. For a Tickle made from a photo, we store the photo's file name; the photo itself stays on your device unless you Ripple the Tickle (see Tickle Pics below)
• Goals, including their names, colours, optional weekly targets, whether they earn tokens, and when you retire them with Achieve
• Multickles, including their titles, descriptions, icons and whether they're complete
• Likes, follows (of people and of Multickles), favourites and High Fives
• Day Dots — your daily check-in, or the fact that you skipped it
• Your Reward List and your token balance and history
• A record each time you share a Tickle or a photo, including which caption you chose (but not who you shared it with)
• Weekly counts of how often you've used certain features, used to apply the free plan's limits
• Moji Quest information: your referral code, any referral code you entered, your enrolment and monthly progress, and your Moji ID number if you receive one

Tickle Pics

DayTickles includes an optional Tickle Pics feature, which lets you keep your own photos in the app and attach them to Tickles. To support this, the app requests access to your device's camera and photo library, used solely so you can take or choose a photo.

Photos you add to Tickle Pics are stored in the app's private storage on your device. They are not uploaded to our servers unless you Ripple a Tickle that has a photo.

When you Ripple a Tickle that has a photo, a resized copy of that photo is uploaded to our storage provider (Supabase Storage) so other signed-in users can see it with the Tickle. Unlike the rest of your information, an uploaded photo is not limited to signed-in users: anyone who has the exact link to that image can open it. When you Un-Ripple or delete the Tickle, or delete the photo from Tickle Pics, the uploaded copy is removed. Deleting your account removes all of your uploaded photos.

When you share a photo, it's sent directly through your device's built-in sharing options (like Messages or WhatsApp). It never passes through our servers.

You can also choose to save a copy of a photo to your device's regular Photos app. When you create a Tickle from a photo by tapping a Vibe or the sun, a copy is saved to your Photos app automatically. Saving requests a separate, save-only permission — DayTickles cannot read or browse your existing photos through this permission, only add photos to it.

Backup & Restore Photos (in Settings) creates a backup file on your device, which you then send wherever you choose through your device's sharing options. It does not pass through our servers.

Push Notifications

If you allow notifications, we store a push notification token provided through Expo's push notification service.

Our servers use this token to send notifications about likes (if you have them switched on) and some of your Awareness Cues; other Awareness Cues and the daily reminder are scheduled on your device itself.

Crash Reports

DayTickles uses Firebase Crashlytics, a Google service, to receive a report if the app crashes. A crash report contains technical information about the crash and your device, such as the device model, operating system version and app version. We do not attach your account, username or any of your content to crash reports.

Information Stored Only on Your Device

If you choose to secure DayTickles with a PIN, Face ID, or fingerprint authentication, that information never leaves your device.

Your PIN and any biometric information remain securely stored by your device's operating system. DayTickles does not receive, store, or have access to this information.

Your Tickle Pics photos, and the on-device list that links them to your Tickles, are also kept only on your device (apart from Rippled photos, described above).

Information We Do Not Collect

DayTickles does not collect or access your:

• Device location
• Contacts
• Microphone

We do not use analytics platforms, advertising networks or tracking technologies, and we do not include any third-party tracking within the app. The only crash-reporting service we use is Firebase Crashlytics, described above.

How Your Content Is Shared

DayTickles includes social features, so some information is intentionally visible to other signed-in users. Apart from Rippled photos (see Tickle Pics above), none of your information is visible to people who aren't signed in.

Always Visible

The following information may be visible to other signed-in users:

• Your username and avatar (the first letter of your username)
• Your accent colour
• Your country (if you choose to provide it)
• Your Moji ID number, if you have one
• Who you follow
• Who follows you
• Which Tickles you have liked
• Your Multickles, and which Multickles you follow

Visible When You Choose

Every Tickle has its own visibility setting.

• Rippled Tickles, including any photo on them, are visible to other signed-in users. A Rippled photo can also be opened by anyone who has its exact link.
• Private Tickles are visible only to you.

High Fives

When you give a High Five, its type (for example "Epic!") is shown on that Tickle to everyone who can see it. The person who wrote the Tickle sees in their notifications that the High Five came from you. Other users can't see who gave it.

Sharing Outside the App

When you share a Tickle or a photo, the app creates an image (or a short text) and hands it to the app you pick through your device's sharing options. DayTickles records that a share happened and which caption you chose, but not where it was sent.

Never Shared

The following information is never visible to other users:

• Your private Tickles
• Your Goals
• Your favourites list
• Your notifications
• Your Day Dots
• Your Reward List and tokens
• Your Moji Quest progress and referrals
• Tickle Pics photos that aren't on a Rippled Tickle

Third-Party Services

DayTickles relies on a small number of trusted service providers to operate the app:

• Supabase — authentication, database, storage (including Rippled photos), and backend services
• Google Sign-In — user authentication
• Expo Push Notifications and Firebase Cloud Messaging (FCM) — delivery of push notifications
• Firebase Crashlytics — crash reports
• Google Play In-App Review — if you choose to rate DayTickles from within the app, the rating screen is provided by Google Play

We do not use any other third-party services.

We never sell, rent, or share your personal information with advertisers, data brokers, or any other third party for their own marketing or commercial purposes.

Children's Privacy

DayTickles is not intended for children under the age of 13, or the minimum age required by the laws of your country if that age is higher.

We do not knowingly collect personal information from children below the applicable minimum age. If you believe that a child has created a DayTickles account, please contact us. We will investigate the matter and, where appropriate, promptly delete the account and any associated information.

Data Retention and Account Deletion

We retain your information for as long as your DayTickles account remains active.

You may permanently delete your account at any time by selecting:

Account deletion is immediate and permanent. Once deleted, your account and its data cannot be recovered. Your data is deleted immediately from our live systems; routine backups and logs kept by our infrastructure providers may hold it briefly before they expire.

If you're unable to access the app, you can request deletion by visiting daytickles.app/delete-account or by emailing support@daytickles.com.

Deleting your account permanently removes your:

• Profile and settings
• Tickles, including any Rippled photos stored on our servers
• Goals and Multickles
• Likes, follows, favourites and High Fives
• Day Dots
• Reward List and tokens
• Share records and feature-usage counts
• Notifications
• Moji Quest information
• All other information associated with your DayTickles account

Notifications you caused in other people's lists (for example, a like you gave) stay in their list but no longer show who they came from.

Deleting your account, or signing out, also clears your PIN and any scheduled reminders and Awareness Cues on that device. Your Tickle Pics photos and their on-device list are not removed from the device by account deletion; you can delete them in Tickle Pics or by uninstalling the app.

Crash reports held by Firebase Crashlytics are not linked to your account, so they are not affected by account deletion.

Your Choices and Rights

You remain in control of your information.

Within the app, you can:

• Edit your profile information
• Ripple or Un-Ripple your Tickles at any time
• Manage your Goals, Multickles and Reward List
• Update your notification preferences, and switch the daily reminder and Awareness Cue on or off

You may also:

• Request a copy of the information we hold about you
• Ask questions about how your information is used
• Delete your account and all associated data at any time

Depending on where you live, you may have additional privacy rights under applicable laws, including the General Data Protection Regulation (GDPR) in the European Union and United Kingdom, the California Consumer Privacy Act (CCPA), or similar legislation in your jurisdiction.

If you would like to exercise any of these rights, please contact us using the details below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will update the Last updated date at the top of this page.

Your continued use of DayTickles after those changes take effect constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us at: