Days OFF

Welcome to Days OFF ("the App"). We deeply value your privacy. Please read this Policy carefully before using the App.

1. Information We Collect

1.1 Information you provide voluntarily

• Account username — chosen by you at sign-up (2–10 characters, starting with Chinese or a letter).
• Password — stored on the server only as a one-way SHA-256 salted hash. We never see or store your plain-text password, and cannot recover it.

1.2 Content you create

• Mood diary entries
• Sports notes and sport training plans
• Travel idea cards, trip cards
• Event cards & milestone cards
• Original artworks you upload (unpublished)
• Exhibitions and travel inspirations you publish publicly

1.3 Anonymous statistics

• Registration count, daily active users
• Crash reports, network error summaries
• Screen-view usage (anonymous)

All statistics are aggregated anonymously and cannot identify you personally.

2. End-to-End Encryption (E2EE)

Your private content — mood diary, sports notes & plans, travel cards, event cards, and unpublished artworks — is encrypted on your device using a cryptographic key derived from your password, and only then uploaded to our cloud.

• The server stores encrypted ciphertext only.
• No one, including the DaysOFF team, can read these contents.
• The encryption key is derived only from your password, only on your device.
• We cannot retrieve or reset this key. If you forget your password, encrypted content cannot be recovered. Please keep your password safe.

3. Public Content

Content you publish publicly — exhibitions, travel inspirations, and shared artworks — is stored in clear text on the server and visible to other users, to enable our legal content moderation obligations.

⚠ Please do not include sensitive personal information in public content.

4. How We Use Information

1. Providing and maintaining the App service, including multi-device cloud sync.
2. Improving and optimizing the product experience.
3. Protecting account and data security, and complying with legal obligations such as illegal content reporting.

We do not use your data for advertising, user profiling, or resale.

5. Data Storage

• Your data lives on your device's local storage or on our secure servers (HTTPS, TLS 1.2+).
• Private content is always stored as encrypted ciphertext.
• Data is retained for the shortest period necessary to fulfill the purposes described in this Policy.

6. Data Sharing & Disclosure

• We never sell your personal information to any third party.
• We only share or disclose your information when:
  1. We have obtained your explicit informed consent.
  2. Required by laws, regulations, valid court orders, or government requests.

7. Data Security

We employ reasonable administrative and technical measures to protect your information, including:

• HTTPS / TLS 1.2+ for every network request.
• SHA-256 one-way hash for passwords (with static salt).
• E2EE for all private user content.
• Bearer-token authentication for all write & private-read APIs.
• IP-based rate limiting for registration & login endpoints.

8. Your Rights

• Access & Correct your personal information within the App.
• Export your data: content is also stored locally in UserDefaults and on the server synced under your account.
• Delete specific content in each module.
• Account deletion (Guideline 5.1.1(v)): Go to Me → Settings → Delete Account. Your account and all data (user, tokens, exhibitions, travel ideas, feedback, user_data, block records, uploaded images on OSS) are permanently wiped from our servers in one atomic transaction and cannot be recovered.
• Log out locally at any time in Me → Settings.

To exercise any other privacy right, contact us at the address below.

9. Children's Privacy

The App is not directed at children under 14 years of age. We do not knowingly collect personal information from children under 14. If you believe we have done so, please contact us immediately and we will delete the information promptly.

10. Policy Updates

We may revise this Policy from time to time. Updates are posted on this page with the revised effective date; material changes are notified prominently.

11. Contact Us

For any questions, requests, or complaints about this Policy or our privacy practices, email:

📧 support@daysoff-app.com