Privacy Policy
Last updated: 27 October 2026
Last updated: 27 October 2026
The short version. We collect the least data our products can work with. We do not sell personal data and we never have. We do not use your content to train third-party AI models. Some of our free games show ads served by Google AdMob; those apps tell you before the first ad, and you can choose non-personalised ads at any time. Outside of those ads, we do not track you across other companies' apps and sites. You can ask us at any time what we hold about you, and ask us to delete it, by writing to hello@dayantech.com.br.
This site and the products listed on it are operated by RAPHAEL BORGES DE ANDRADE DAYAN CONSULTORIA EM TECNOLOGIA DA INFORMACAO LTDA, trading as DayanTech, a limited company registered in Brazil, CNPJ (tax ID) 64.325.876/0001-90, with D-U-N-S Number 579119303, registered at Rua Pais Leme, 215, Conj. 1713 — São Paulo, SP, 05424-150, Brazil.
For the purposes of the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) and the EU General Data Protection Regulation (GDPR), we are the controller of the personal data described below. Our contact point for all privacy matters is hello@dayantech.com.br. Our data protection officer (LGPD art. 41) is Raphael Dayan, at the same address.
This policy applies to this website and to the DayanTech mobile applications and web products listed on our products page. If you choose to use our software, you agree to the collection and use of information in accordance with this policy. The personal information we collect is used to provide and improve the software, and we will not use or share it with anyone except as described here.
Individual apps that collect more than what is described here ship their own, more specific privacy notice, linked from their App Store or Google Play listing and from inside the app. Where an app-specific notice exists, it governs that app; this policy covers everything else.
This policy does not cover third-party websites we link to. When you leave one of our products, the destination site's own policy applies.
You do not need an account to browse this website. The table below is the complete list of what we may process across our products, using the same categories Apple uses on App Store privacy labels so you can compare them directly.
| Category | What it is | Why we process it | Linked to you? |
|---|---|---|---|
| Contact info | The email address and any name you type when you write to us. | To answer your message and keep a record of the request. | Yes |
| Account info | In products that offer accounts: email address, sign-in provider and an authentication token; optionally a display name, profile picture, language and time zone. We never store passwords in readable form. | To create your account, sign you in, and restore your data on a new device. | Yes |
| User content | Notes, photos, files and entries you create inside an app. Several of our apps are local-first: your content stays on your device unless you turn on sync. | To provide the feature you are using and, with sync on, to make it available on your other devices. | Yes |
| Purchases | Subscription status and receipt validation. Payments run through Apple, Google or our payment provider — we never see or store your card details. | To unlock paid features and handle refunds and billing questions. | Yes |
| Usage data | Pages or screens opened, features used, which step of a flow happened, approximate country, referring site, session length. | To understand which parts of a product are useful and to plan what to fix next. | Yes, where you have an account |
| Diagnostics | Crash reports, error type, performance timings, device model and operating system version. | To find and fix bugs and crashes. | Yes, where you have an account |
| Identifiers | A random installation or session identifier, and your account identifier where you have an account. In free apps that show ads, the advertising identifier of your device, when you allow it. | To count sessions accurately and to attach a crash report or a funnel to a person rather than to a ghost. | Yes, where you have an account |
| Advertising data | Only in free apps that show ads: which ads were shown and whether you tapped them, the advertising identifier where you allow it, device type and the approximate country from your IP address. | To show the ads that keep the app free, measure them and cap how often they repeat. See section 3.4. | To the advertising identifier, not to an account |
To know where people get stuck and whether an app is breaking, we use these tools across our products:
PostHog and Sentry receive your account identifier where you have one, so that an error or a funnel can be tied to a person rather than to a ghost. We do not track you across other companies' apps or websites, and we do not sell data to anyone. Ads exist only in the free apps described in section 3.4.
Where a product has an AI feature, the specific content you submit for that feature leaves your device so a model can produce your result. It travels through our own server, which holds the API keys and does not store the text, to a model provider under a contract that forbids the provider from using it to train models. Our server logs only numbers per call — tokens in and out, cost, latency, which model answered, and whether it failed — never the content. The app-specific notice for that product names the provider and asks for your explicit permission before the first use.
Some of our free apps, notably our games, are supported by advertising served by Google AdMob (Google LLC, United States). The app's store listing and its first-run screen say so. To show and measure ads, the AdMob SDK may process your device's advertising identifier, your IP address and the approximate country derived from it, the device model and operating system version, and which ads were shown and tapped. Google may use this data as described in its advertising policy, together with the partners listed on AdMob's partner page.
You are in control of personalisation:
Where an app is rated for families or may appeal to children, we tag its ad requests for child-directed treatment, which disables personalised ads and the use of the advertising identifier. Ads never appear on this website.
In Arrow Pets, an account is optional and the whole game works without one. If you sign in with Google or Apple, your email address (with Apple, this may be the private relay address), name, sign-in provider and an account identifier are stored in Firebase Authentication. A copy of your game progress (completed levels, album and streak) is stored in Cloud Firestore. Both services are provided by Google. We use this data only to save your progress and restore it on another device. The account is not linked to analytics or advertising data, and we do not sell this data or share it with anyone other than Google, which stores it for us. You can delete the account and its cloud progress right away from within the game (Settings → Account → Delete account), with no grace period, or on request, as explained on our data deletion page.
We share personal data only with service providers who process it on our instructions, under a data processing agreement, and only to the extent they need it to do their job:
| Provider | What it receives | Where |
|---|---|---|
| Hostinger | website hosting and email delivery | Brazil / European Union |
| Supabase | account and the synced copy of your content | United States |
| Vercel | API traffic in transit, not stored | United States |
| PostHog | usage events, no content | United States |
| Sentry | errors and crashes, no content | United States |
| Google Analytics | anonymised website usage, only after you accept analytics cookies | United States |
| Google Firebase Analytics | usage events from our games, without content | United States |
| Google Firebase (Authentication, Cloud Firestore) | email address, name, sign-in provider and account identifier, and the copy of your game progress, only for Arrow Pets cloud save | United States |
| Google AdMob | advertising identifier (when you allow it), IP-based approximate location, device data and ad interactions, only in apps that show ads | United States |
| RevenueCat · Apple · Google | subscription and in-app purchase status | United States |
| Apple (Game Center, iCloud) | nickname and player identifier; saved game progress, in your own Apple account | United States |
| Google (Play Games, Saved Games) | nickname and player identifier; saved game progress, in your own Google account | United States |
| AI model providers | only the content you submit to an AI feature, never for training | United States |
We may also disclose data where we are legally required to, or to establish, exercise or defend a legal claim. If DayanTech is ever involved in a merger or acquisition, we will tell users before their data is transferred and honour this policy until it is replaced by an equivalent one.
We are established in Brazil and several of the providers above operate in the United States and the European Union. This is an international transfer of data under articles 33 to 36 of the LGPD, and it happens under contractual data protection clauses. For transfers out of the European Economic Area we rely on the European Commission's Standard Contractual Clauses. In Arrow Pets, account and progress data are stored in the United States (Google Cloud, us-central1 region).
| Data | Retention |
|---|---|
| Support emails | 24 months from the last message in the thread. |
| Account and user content | For as long as the account exists. After you delete the account there is a 30-day grace period in which signing back in cancels the deletion; after that it is erased for good. |
| Arrow Pets account and cloud progress | For as long as the account exists. Deleted immediately when you delete the account in the game, with no grace period, or within 15 days of an email request. |
| Diagnostics and crash reports (Sentry) | 90 days. |
| Usage events (PostHog) | Up to 12 months, without content. |
| Website analytics (Google Analytics) | Up to 14 months, in a form that does not identify you. |
| Usage events (Firebase Analytics) | Up to 14 months, without content. |
| Advertising data (AdMob) | Held by Google under its own retention policy; the advertising identifier can be reset or turned off at any time in your device settings. |
| Billing and tax records | As long as Brazilian tax law requires, currently five years. |
Traffic to our sites and APIs is encrypted with TLS. Data at rest is encrypted by our infrastructure providers, and a row-level rule in the database prevents any account from reading another account's rows. Access to production systems is limited to the people who need it, protected by two-factor authentication, and reviewed periodically. Several of our apps are local-first by design: your content stays on your device unless you explicitly turn on sync.
If a breach ever puts your rights at risk, we will notify you and the Brazilian data protection authority (ANPD) — and, where the GDPR applies, the relevant supervisory authority — within the deadlines the law sets.
Wherever you live, you can ask us to:
Write to hello@dayantech.com.br. We answer within 15 days, the deadline set by the LGPD, and always within 30 days where the GDPR applies. We may ask you to confirm your identity before acting on a request, so that nobody else can use it against you.
If you are not satisfied with our answer, you may complain to the Brazilian data protection authority (ANPD) at gov.br/anpd, or to your local supervisory authority in the EU/UK.
Our products are not directed to children under 13, and we do not knowingly collect personal data from them. Where an app is designed for families, it is rated accordingly in the store and follows the applicable children's privacy rules, including the App Store Kids Category requirements and COPPA. Some products require users to be 18 or older; that app's own notice and store listing say so. In apps that show ads, we request child-directed treatment from AdMob whenever an app is rated for families, which disables personalised ads for everyone using that app. If you believe a child has given us personal data, write to hello@dayantech.com.br and we will delete it.
This website sets two kinds of cookies and similar storage:
You can change your mind at any time through the "Cookies" link in the footer, which brings the notice back. We do not use advertising or cross-site tracking cookies on this website.
When we change this policy we update the date at the top of the page. If a change materially affects your rights we will announce it on this site and, where we can reach you, by email before it takes effect.
RAPHAEL BORGES DE ANDRADE DAYAN CONSULTORIA EM TECNOLOGIA DA INFORMACAO LTDA