Privacy Policy

Last updated: August 30, 2026

This policy explains what personal information David and Dacia LLC (“David and Dacia”, “we”, “us”) collects, why we collect it, who we share it with, and what you can do about it. It applies to davidanddacia.com and to every mobile and web application we publish, except where an application displays its own supplementary notice.

1. Who we are

David and Dacia LLC is a limited liability company organized in the United States. We design and build mobile and web applications. For the purposes of the EU and UK General Data Protection Regulation, we are the controller of the personal information described in this policy.

You can reach us about anything in this policy at admin@davidanddacia.com.

2. Information we collect

We collect only what an application actually needs in order to work. Not every category below applies to every product — an application that has no accounts collects no account information, and one that works entirely offline may collect nothing at all. The store listing for each application states exactly what that application collects.

Information you give us

• Account information. If an application offers accounts, we collect the email address you sign up with and, where you choose to provide one, a display name. Passwords are handled by our authentication provider and are stored only in hashed form; we never see your password.
• Content you create. Whatever you enter into an application in the course of using it — for example lists, entries, notes, preferences, or uploaded images. This content belongs to you.
• Correspondence. When you email us for support, we keep your message, your address, and our reply so we can follow up and improve the product.

Information collected automatically

• Device and technical information. Device model, operating system version, application version, language, and general region. We use this to reproduce bugs and to decide which platform versions to keep supporting.
• Diagnostics and crash reports. When an application crashes or hits an error, we may receive a report describing what the software was doing at the time, including a stack trace and the device state.
• Usage information. Aggregate, non-identifying counts of which features are used and how often, so we know what to improve.
• Server logs. Our servers record IP addresses, timestamps, and requested URLs as part of normal operation and to protect against abuse.

What we do not collect

• We do not collect precise location unless an application’s feature plainly requires it, and then only after you grant permission at the operating system level. You can withdraw that permission at any time in your device settings.
• We do not collect contacts, photos, microphone, or camera data unless you actively use a feature that needs it, and again only with your permission.
• We do not build advertising profiles, and we do not use third-party advertising networks or cross-app tracking.
• We do not knowingly collect information from children under 13. See children’s privacy.

3. How we use information

We use the information described above to:

• provide the application and the features you ask for;
• create and maintain your account, and keep you signed in;
• sync your content between your devices, where an application offers that;
• diagnose crashes, fix bugs, and improve performance and reliability;
• understand in aggregate which features are worth continuing to invest in;
• respond to your support requests, and reply to privacy requests;
• detect, prevent, and investigate fraud, abuse, and security incidents; and
• comply with legal obligations that apply to us.

We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising. We do not use your content to train machine learning models.

4. Legal bases for processing

If you are in the European Economic Area or the United Kingdom, we process personal information on these legal bases:

• Performance of a contract — to deliver the application and the features you have signed up for.
• Legitimate interests — to keep our software secure, reliable, and worth using, balanced against your privacy rights.
• Consent — for anything optional, such as device permissions or marketing email. You may withdraw consent at any time.
• Legal obligation — where the law requires us to retain or disclose information.

5. How we share information

We share personal information only in the following circumstances.

• Service providers. We use a small number of vendors to run our software — for example cloud hosting, database and authentication providers, crash reporting, and email delivery. They may process personal information only on our instructions and only to provide their service to us.
• Legal requirements. We may disclose information where we are legally required to, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others. Where we are permitted to tell you about such a request, we will.
• Business transfers. If David and Dacia LLC is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will give you notice before your information becomes subject to a different privacy policy.
• With your direction. If you ask us to share something — for instance by using a sharing or export feature — we will do so.

We do not share personal information with anyone else.

6. How long we keep information

• Account information and your content are kept for as long as your account is active. When you delete your account, they are deleted as described in section 9.
• Crash reports and diagnostics are kept for up to 90 days.
• Server logs are kept for up to 30 days, except where a log is retained longer as part of investigating a security incident.
• Support correspondence is kept for up to two years so we can understand recurring problems.

We may keep information longer where the law requires it, or where it is needed to establish, exercise, or defend a legal claim. Backups are overwritten on a rolling cycle and residual copies are removed within 30 days of deletion.

7. How we protect information

We encrypt data in transit using TLS, and we encrypt data at rest with our hosting and database providers. Access to production systems is limited to the people who need it and is protected by multi-factor authentication. We keep our dependencies up to date and review our code for security problems.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant regulators as required by law.

8. Your rights and choices

Wherever you live, you may ask us to:

• Access the personal information we hold about you, and receive a copy of it;
• Correct information that is inaccurate or incomplete;
• Delete your account and the personal information associated with it;
• Export your content in a portable, machine-readable format;
• Restrict or object to processing based on our legitimate interests; and
• Withdraw consent you have previously given, without affecting processing already carried out.

To exercise any of these rights, email admin@davidanddacia.com with the subject line Privacy request. We will verify that the request comes from you, and we will respond within 30 days. We will not charge you for a request and we will not give you a worse service for making one. You may use an authorised agent, and we may ask that agent for proof of your authorisation.

If you are in the EEA or the UK you also have the right to lodge a complaint with your local data protection authority. If you are in California, the rights above are the rights granted to you by the CCPA as amended by the CPRA; we have not sold or shared personal information in the preceding twelve months.

You can also control device permissions — notifications, location, camera, photos — at any time in your device’s system settings, independently of us.

9. Deleting your account and data

You can ask us to delete your account and everything associated with it at any time, and you do not need to keep the application installed in order to do so.

• In the application. Where an application offers accounts, it provides a delete-account option in its settings.
• By email. Write to admin@davidanddacia.com with the subject line Delete my account, naming the application and the email address on the account.

Once we have verified the request, we delete your account, your content, and your profile information from our live systems within 30 days, and from our backups within a further 30 days. Anonymous, aggregated statistics that cannot be linked back to you may be retained. We will keep only what we are legally required to keep, and we will tell you if that applies.

10. Children’s privacy

Our applications are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact admin@davidanddacia.com and we will delete it promptly.

11. International transfers

We are based in the United States, and the service providers we use may process information in the United States and other countries. Where we transfer personal information out of the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses, together with additional safeguards where they are needed. You may ask us for details of the safeguards that apply to you.

12. App store platforms

Our applications are distributed through the Apple App Store and Google Play. Those platforms are independent of us and have their own privacy policies, which govern the information they collect when you download, purchase, or update an application:

• Apple’s privacy policy is available at apple.com/legal/privacy.
• Google’s privacy policy is available at policies.google.com/privacy.

We do not receive your payment card details from either platform. Purchases and subscriptions, including refunds and cancellations, are handled by the platform you bought from.

13. Changes to this policy

We update this policy when our products or the law change. When we make a material change we will revise the “last updated” date at the top of this page and, where the change meaningfully affects you, give notice in the application or by email before it takes effect. Continuing to use our software after a change takes effect means you accept the revised policy.

14. How to contact us

Questions, requests, and complaints about privacy all go to the same place: