Privacy Policy

Sheboftek (“we,” “our,” or “us”) operates the Daily Hype mobile application and the website at getdailyhype.app (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have. It applies to all users of the Service worldwide.

By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

We collect only the information necessary to provide, personalize, and improve the Service.

2.1 Account Information (provided by you)

• Display name and email address, received from your chosen sign-in provider (Apple Sign-In or Google Sign-In)
• Authentication tokens issued by the sign-in provider (used solely to verify your identity)

2.2 Preferences and Profile Data (provided by you)

• Selected motivational topics (e.g., “Focus,” “Confidence”)
• Chosen voice tone (e.g., Bestie, Coach, Savage, Soft, Minimal)
• Notification schedule preferences
• Subscription plan selection

2.3 Usage Data (generated automatically)

• Drops viewed and ratings you assign (Hit, Mid, Miss)
• Micro-actions completed
• Streak counts and daily win entries you log
• Pack enrollment and day-by-day progress

2.4 Device and Technical Data

• Device model and operating system version
• App version identifier
• IP address (collected automatically by our hosting infrastructure; not stored long-term by us)

2.5 Information We Do NOT Collect

• We do not collect the Apple Identifier for Advertisers (IDFA) or any advertising identifier
• We do not collect precise location data
• We do not collect contacts, photos, or health data
• We do not read or access any content outside the App

We use the information described above for the following purposes:

• Provide the Service — authenticate your account, sync your data across devices, and deliver daily drops
• Personalize content — send your selected topics and tone to our AI provider to generate motivational drops tailored to you
• Track your progress — maintain streaks, win history, and pack completion so you can see your growth
• Deliver notifications — send scheduled motivational reminders at times you choose
• Process payments — facilitate subscription purchases and free trials through Apple’s App Store billing
• Improve the Service — understand aggregate usage patterns (e.g., which topics are most popular) to refine the experience

We do not use your information for profiling, automated decision-making, or purposes unrelated to the Service.

Daily Hype uses the Google Gemini API (paid tier) to generate personalized motivational content. This section explains exactly how that works.

4.1 What We Send to Google

Each content-generation request includes only:

• Your selected topic(s) (e.g., “Focus,” “Morning Routine”)
• Your chosen voice tone (e.g., “Coach”)
• A system prompt template that instructs the model on format and length

We never send your name, email address, device identifiers, IP address, or any other personally identifiable information to Google’s Gemini API. The request is stateless: it contains no user ID or session context that could link the prompt to your identity.

4.2 How Google Handles the Data

We use the paid tier of the Google Gemini API. Under Google’s Gemini API Additional Terms of Service:

• Google does not use prompts or responses to train or improve its models
• Google does not have human reviewers read prompts or responses
• Google may retain prompts and responses for a limited period (typically up to 30 days) solely for abuse monitoring, safety enforcement, and legal compliance, after which they are deleted

4.3 Fallback Content

If the AI service is unavailable, the App falls back to pre-written template content stored locally. No external API call is made in this case.

We share data only with service providers that act on our behalf (“data processors”) and are contractually obligated to protect your information at least as well as this policy describes. We do not sell, rent, or trade your personal data to any third party.

5.1 Supabase (database and authentication)

• Data received: Account information (name, email, user ID), profile preferences, usage data (streaks, wins, pack progress)
• Purpose: Stores your account data and syncs it across devices; handles email-based and OAuth-delegated authentication
• Linked to identity: Yes
• Privacy policy: supabase.com/privacy

5.2 Google Gemini API (AI content generation)

• Data received: Topic name(s), tone preference, system prompt template — no personally identifiable information
• Purpose: Generates personalized motivational drops
• Linked to identity: No
• Privacy policy: policies.google.com/privacy

5.3 Apple Sign-In (authentication)

• Data received: An identity token containing your name and email (or a private relay email if you choose “Hide My Email”)
• Purpose: Verify your identity and create your account
• Linked to identity: Yes
• Privacy policy: apple.com/legal/privacy

5.4 Google Sign-In (authentication)

• Data received: An OAuth identity token containing your name and email
• Purpose: Verify your identity and create your account
• Linked to identity: Yes
• Privacy policy: policies.google.com/privacy

5.5 Apple StoreKit (payments)

• Data received: Apple manages all payment and billing information directly; we receive only a transaction receipt confirming your subscription status
• Purpose: Process subscription purchases and verify entitlements
• Linked to identity: Only via your Apple ID (managed by Apple, not us)
• Privacy policy: apple.com/legal/privacy

We do not integrate any other third-party SDKs, analytics platforms, crash-reporting services, or advertising networks.

Daily Hype does not track you.

• We do not collect the Apple Identifier for Advertisers (IDFA)
• We do not use App Tracking Transparency (ATT) because there is nothing to track
• We do not display advertisements of any kind
• We do not use any third-party analytics SDK (no Firebase Analytics, no Amplitude, no Mixpanel, no Google Analytics, or similar)
• We do not share data with advertising networks or data brokers
• We do not build user profiles for cross-app or cross-site targeting

The App’s PrivacyInfo.xcprivacy manifest declares NSPrivacyTracking as false and lists zero tracking domains. The only API reason declared is UserDefaults access for storing local preferences on your device.

Internal engagement metrics (e.g., notification tap rates) are computed and stored entirely on your device using local storage. They are never transmitted to us or any third party.

Your account data is stored on Supabase infrastructure (hosted on AWS in the United States). All data is protected by:

• Encryption in transit: All communications between the App and our servers use TLS/HTTPS
• Encryption at rest: Database storage is encrypted using AES-256
• Row-level security (RLS): Database policies ensure every query is scoped to your authenticated user ID — you can only access your own data
• Authentication tokens: Issued by Supabase with short expiry and secure refresh rotation

While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we take all reasonable steps to protect your data.

• Account data — retained for as long as your account is active. If you delete your account, we delete your data within 30 days (see Section 9)
• AI prompts and responses — not stored by us. Google may retain them for up to 30 days for abuse monitoring per their API terms, then deletes them
• Local device data (preferences, notification metrics, cached content) — stored on your device and removed when you uninstall the App
• Payment records — Apple retains your purchase history; we store only your subscription entitlement status

We may retain limited data beyond 30 days only where required by applicable law (e.g., tax records, fraud prevention, or legal proceedings).

You can delete your account and all associated data in two ways:

• Inside the App: Go to the Profile tab, then tap Delete Account. This immediately initiates deletion.
• By email: Send a request to contact@getdailyhype.app from the email address associated with your account.

When you delete your account, we delete the following within 30 days:

• Your user profile (name, email, preferences)
• All daily wins and streak history
• All pack progress and completion data
• Drop ratings and interaction history

The following may not be deleted because they are managed by third parties:

• Your Apple or Google account credentials (managed by Apple/Google respectively)
• App Store purchase and subscription history (managed by Apple)

Note: Deleting your account does not automatically cancel an active subscription. To cancel, go to Settings → Apple ID → Subscriptions on your device.

Daily Hype is rated 17+ on the App Store and is not intended for, marketed to, or designed for children. We do not knowingly collect personal information from anyone under the age of 17.

This age requirement is consistent with:

• Apple’s App Store age rating for the App
• Google’s Gemini API Terms of Service, which require that users of applications powered by the Gemini API be at least 18 years old (or the applicable age of majority in their jurisdiction)

If we learn that we have inadvertently collected data from a person under 17, we will delete that data promptly. If you believe a minor has provided us with personal information, please contact us at contact@getdailyhype.app.

Depending on where you live, you may have certain rights regarding your personal data under applicable privacy laws (including the EU General Data Protection Regulation, the UK GDPR, the California Consumer Privacy Act, and similar legislation).

Your rights may include:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data (see Section 9)
• Restriction — request that we limit processing of your data in certain circumstances
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time

For EU/EEA residents (GDPR)

Our legal bases for processing your data are:

• Contract performance — processing necessary to provide the Service you signed up for (account management, content delivery, subscription fulfillment)
• Legitimate interests — improving the Service based on aggregate usage patterns, ensuring security
• Consent — sending push notifications (which you can disable at any time in your device settings)

For California residents (CCPA/CPRA)

• We do not sell your personal information
• We do not share your personal information for cross-context behavioral advertising
• You have the right to know what data we collect, request deletion, and opt out of any sale (though we conduct none)

To exercise any of these rights, contact us at contact@getdailyhype.app. We will respond within 30 days (or sooner if required by applicable law). We will not discriminate against you for exercising your rights.

Your data may be processed in the United States (where our Supabase infrastructure is hosted) and transiently by Google’s servers (for AI content generation). If you are located outside the United States, your data is transferred subject to appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable
• Service provider agreements that require data protection standards equivalent to those in your jurisdiction

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Post the revised policy in the App and on our website
• Where required by law, notify you via email or an in-app notice before changes take effect

Your continued use of the Service after the updated policy becomes effective constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us at:

• Email: contact@getdailyhype.app
• Developer: Sheboftek
• Website: getdailyhype.app

If you are located in the EU/EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.