Privacy Policy

Account Information:

• •Email address
• •Password (encrypted)
• •Display name (optional)
• •Profile photo (optional)

Child Profile Information:

• •Child's first name (or nickname)
• •Date of birth (for age-appropriate content)
• •Gender (optional)
• •Avatar selection

Check-in Content:

• •Mood selections
• •Gratitude responses
• •Challenge descriptions
• •Tomorrow hopes
• •Parent notes and messages

App Preferences:

• •Notification settings
• •Faith-based content preferences
• •Theme preferences

Payment Information:

• •Subscription status
• •Purchase history

Device Information:

• •Device type and model
• •Operating system version
• •Unique device identifiers
• •App version

Usage Information:

• •Features used and frequency
• •Check-in completion rates
• •Stories read and progress
• •Activities completed
• •Time spent in app
• •Crash logs and errors

Technical Information:

• •IP address (for security and region detection)
• •Timezone
• •Language settings

• ❌Precise location data
• ❌Contact lists or address books
• ❌Photos from your device (unless you upload a profile photo)
• ❌Microphone or camera data
• ❌Data from other apps
• ❌Children's personal information directly from children

• •Analyse usage patterns to improve features
• •Identify and fix bugs
• •Develop new features based on user needs
• •Optimise app performance

• •Send service-related notifications
• •Respond to support requests
• •Notify you of important updates
• •Share tips for using the App (with your permission)

• •Detect and prevent fraud
• •Enforce our Terms of Service
• •Protect user safety
• •Comply with legal requirements

For users in the European Economic Area (EEA), we process data based on:

We share limited data with trusted service providers who help us operate:

We may disclose information if required by:

• •Court order or legal process
• •Government request
• •To protect safety or rights
• •To investigate violations

If DailyWins is involved in a merger, acquisition, or sale, your data may be transferred. We will notify you of any such change.

• •Children do NOT create their own accounts
• •Parents enter and control all child information
• •Parents supervise all App usage
• •Children's responses are entered by or with the parent

• ✅View all data associated with their children
• ✅Edit child profile information
• ✅Delete child profiles and associated data
• ✅Export child data
• ✅Delete the entire family account

• ❌We do NOT allow children under 13 to create accounts
• ❌We do NOT directly request information from children
• ❌We do NOT contact children directly
• ❌We do NOT use children's data for advertising

• ❌We do NOT show ads to children
• ❌We do NOT use children's data for targeted advertising
• ❌We do NOT share children's data with advertisers

Parents may at any time review child data, request deletion, or withdraw consent by deleting child profiles or the account.

To exercise these rights, contact: contact@maplemindfulkids.com

• •Data is stored on Firebase (Google Cloud) servers
• •Primary data centres are located in the United States
• •Backups may be stored in additional secure locations

Technical Safeguards:

• ✅Encryption in transit (TLS/SSL)
• ✅Encryption at rest (AES-256)
• ✅Secure authentication (Firebase Auth)
• ✅Password hashing (bcrypt)
• ✅Regular security audits

Access Controls:

• •Limited employee access to data
• •Role-based access controls
• •Audit logging of data access
• •Multi-factor authentication for admin access

Content Protection (Stories):

• •Screenshot prevention (Android)
• •Screenshot detection (iOS)
• •Copy/paste disabled
• •Watermarking for accountability

In the event of a data breach, we will:

• •Investigate and contain the breach
• •Notify affected users within 72 hours (as required by law)
• •Report to relevant authorities
• •Take steps to prevent future breaches

• •Right to Restriction — Limit how we process your data
• •Right to Object — Object to certain processing
• •Right to Portability — Receive data in portable format
• •Right to Lodge Complaint — With your local data protection authority

• •Right to Know — What personal information we collect
• •Right to Delete — Request deletion of your data
• •Right to Opt-Out — Of sale of personal information (we don't sell data)
• •Right to Non-Discrimination — For exercising your rights

In the App: Settings → Privacy → Download My Data or Settings → Account → Delete Account

Or contact us at contact@maplemindfulkids.com with subject “Privacy Rights Request”. We respond within 30 days.

• •Personal data is deleted within 30 days
• •Backups are purged within 90 days
• •Anonymised analytics may be retained
• •Legal retention requirements still apply

For international transfers, we use:

• •Standard Contractual Clauses (SCCs)
• •Data Processing Agreements with providers
• •Privacy Shield framework compliance (where applicable)

If you're in the EEA or UK, we ensure adequate protection through approved transfer mechanisms under GDPR.