DayCasion Privacy Policy
Effective date: October 30, 2026
DayCasion helps you keep the memories of your life and of the children, family members and pets you love: written stories, photos, videos, voice recordings and Life Stories. These memories are often deeply personal and can describe other people, including children and people who have died. This policy explains what we collect, how we use it, who helps us provide the service, how long we keep it, and the choices you have.
DayCasion is provided by DayCasion LLC, a Wyoming limited liability company ("DayCasion", "we", "us"). This policy covers the DayCasion apps for iPhone and Android, the Legacy Executor web page, our websites and the emails we send.
Summary
- Memories are held in account-restricted storage. You control intentional sharing and Legacy Executor permissions; authorized service personnel and processors may handle them as explained below.
- We do not sell or rent personal information. We do not show ads, and the app contains no advertising, analytics or tracking tools.
- Two optional features use artificial intelligence (OpenAI). They run only after you give permission for that feature.
- You can request account deletion in the app, and you can access, correct and export your content. One free complete export is available every 365 days; you can ask us for an additional copy, and we fulfill access and portability requests as the law requires.
1. Information you provide
Account. Your email address, a password and a display name. Passwords are handled by our sign-in provider and stored only in a protected (hashed) form that we cannot read.
Memory profiles. You can create up to five profiles. A profile is either My Life (you) or for a child, a pet or a family member. Each has a name, its category and, optionally, a photo.
Memories. For each memory: a title, your written story, a date (exact, approximate or unknown), photos, videos and voice or audio recordings, and the profiles it belongs to. This includes memories you add one at a time and those you add in bulk with Add Past Memories.
Life Stories. For the person or pet a Life Story is about: full and preferred name, your relationship to them, birth date, birthplace, any other details you choose to record, and chapters. If you write a Life Story for someone else, we record that you said so.
Legacy Executor. Your executor's email address and date of birth; which Legacy features you have purchased (Eulogy, Full Legacy Access); whether you choose Full Legacy Access or Don't share memories and, with Full Legacy Access, the profiles and kinds of material you save; and whether you choose Share Eulogy or No Eulogy, including when you gave, withdrew or renewed your permission to have your eulogy written using AI. When a legacy process's 24-hour hold ends, we record these purchases and choices for that process. Your one-time Legacy Code is stored only in a protected (hashed) form. We also keep a record of your executor's access, such as page views and downloads, to protect your account.
Purchases. Which plan, storage add-on, Year in Review or Legacy purchase (Eulogy, Full Legacy Access or the Complete Legacy Package) you buy, and whether a purchase was refunded. Payment itself is handled by Apple or Google; we never receive your card details.
Year in Review orders. The profile and period you choose; selected and must-include memories; the relationship of a memory to a Life Story; and a separate, versioned AI-processing consent record for each order. We also process recording counts and durations associated with memories in the selected period.
Messages. Anything you send us when you contact support.
2. Information collected automatically
Sign-in and security information. Our service providers may process IP addresses, device or browser information, authentication sessions, timestamps and security events needed to provide and protect accounts.
Purchase information. RevenueCat receives an account identifier, subscription and purchase events, and technical app or device details needed to manage entitlements. Apple and Google separately process payments and keep their own transaction records. DayCasion does not receive full payment-card details.
Web and font requests. Visitors to our GitHub Pages sites may have standard network information processed by GitHub. The current app also downloads certain Google Fonts at runtime; Google may receive the IP address used for the font request.
Files and metadata. Uploaded photos, video or audio can contain embedded information such as date, device or location metadata. We do not intentionally use your device's location to track you; metadata in uploaded files may nonetheless be retained when present. We do not request access to contacts, calendars or an advertising identifier.
No advertising or behavioral tracking. DayCasion does not operate an advertising network, sell personal information, or intentionally track activity across other companies' apps. Service providers may handle limited technical and transaction events under their own applicable terms.
3. How we use information
We use personal information only to:
- create and secure your account and keep your memories, profiles and Life Stories available to you;
- process subscriptions, storage add-ons and purchases, restore purchases and apply your plan's limits;
- make Year in Review movies you order, including a review by our team before delivery;
- run the Legacy Executor service you set up;
- send service emails (sign-up confirmation, password reset, purchase and delivery notices, Legacy notices, and notices about your account);
- prepare downloads of your data when you ask;
- prevent misuse, such as limiting attempts to guess a Legacy Code;
- comply with the law and enforce our Terms.
We do not use memories for advertising or to train our own AI models. External AI processing, including relevant service-provider retention and security safeguards, is described in section 5.
4. Who receives information
We share personal information only with the service providers below, which process it on our behalf, and with people you choose.
| Provider | What it does for us | What it receives |
|---|---|---|
| Supabase (U.S. project region) | Sign-in, database, file storage and server functions | Account information and user content hosted by the service |
| Apple App Store, Google Play | Payment for subscriptions and purchases | Purchase details (they handle payment) |
| RevenueCat | Subscription and purchase management | Your account number, purchase records, basic device and app details |
| Postmark | Sending email | Your email address (or your executor's) and the message content |
| OpenAI | Optional Year in Review storytelling, and writing the Legacy Executor Eulogy using AI, after the relevant consent | Selected written content, metadata and photo previews described in section 5 |
| Shotstack | Assembling Year in Review movies you order | Short-lived links to the chosen photos, videos and recordings, and the movie's on-screen text |
| Google Cloud (Cloud Run, U.S. region) | Preparing the complete exports you request, and the downloads your Legacy Executor requests | A temporary working copy of your account content (memories, profiles, Life Stories, photos, videos and recordings), or for an executor download only the material you chose to share, while the export is built. The finished export is stored in Supabase; nothing is kept in Google Cloud after the job ends except operational logs (export identifiers, sizes, timing and, if something fails, the affected file's name), which are kept for up to 30 days |
| GitHub (Pages) | Hosting our public web pages, the Legacy Executor page and the export download page | The visitor's browser request (IP address, browser); no memory content. Export files are downloaded directly from Supabase |
People you choose. Your Legacy Executor receives only what you allowed, after the safeguards in section 6. When you use Share, the item goes to the app you pick and is then governed by that app's policies.
Our team. Authorized DayCasion staff watch each Year in Review movie before it is delivered, and may access account information when needed to answer a support request, investigate a problem or meet a legal obligation.
Legal and business reasons. We may disclose information if the law requires it, to protect someone's safety or our rights, or as part of a merger, acquisition or sale of assets. In a sale, this policy would continue to apply to your information, and we would notify you.
5. Artificial intelligence
Two optional features use OpenAI: Year in Review and the Legacy Executor Eulogy, which is written using AI. The separate AI Processing & Consent Policy explains the processing and your choices.
Year in Review. With consent specific to that order, OpenAI receives the chosen profile's name and category; memory titles, written stories, dates and chapter names; related Life Story names and relationships; lower-resolution photo previews; counts and lengths of voice and video recordings associated with each memory (not the recordings themselves); and flags identifying must-include memories and Life Story membership. Shotstack, a separate video-rendering provider, receives temporary access links to selected photos, videos and recordings, plus the movie's on-screen text. We do not send your email, payment-card data or full account credentials to OpenAI for story generation.
Eulogy (written using AI). Only if you have purchased Eulogy and selected Share Eulogy in Settings > Legacy Executor, and both are still in place when the 24-hour hold of an authorized legacy process ends, OpenAI receives the written memories from your My Life profile and the associated Life Story to write your eulogy. It does not receive photos, videos, voice recordings, or your account or billing details. Your AI permission is requested before you purchase Eulogy or the Complete Legacy Package (if you decline, the purchase doesn't start) and is recorded only after the purchase succeeds. Choosing No Eulogy withdraws it without losing your purchase, and choosing Share Eulogy again asks for it again.
We use OpenAI API settings that do not request persistent storage of generated responses; provider security or abuse-monitoring retention may nevertheless apply under its terms. DayCasion does not submit your memories for advertising or intentionally authorize model training. Ordinary Life Stories and Add Past Memories do not use AI.
Each Year in Review order requires a new affirmative consent using the disclosure shown at purchase; prior order permission is not reused. You can cancel an unpaid order, or withdraw permission and cancel a paid order in the app before production starts (often within a few minutes). Once processing starts, contact info@daycasion.com for assistance. Apple and Google administer refund requests; consent withdrawal does not automatically issue a refund. Information already processed by external providers cannot necessarily be recalled.
6. Legacy Executor
You may choose one Legacy Executor. Naming an executor is free. What they receive depends on your Legacy purchases and choices:
- No Legacy purchase: a notice only, an email letting them know you named them as your Legacy Executor. No eulogy, memories or files are shared.
- Eulogy (with Share Eulogy selected): your eulogy, to read, download and print. With No Eulogy, no eulogy is written.
- Full Legacy Access (chosen under Memories, with the profiles and kinds of material you save): private, read-only access to those profiles and materials (written memories, photos, videos, voice recordings and Life Story). They can download individual items, or request a download of everything you shared up to three times every 30 days; each prepared download is stored privately for 7 days and then deleted automatically. Executor downloads are prepared the same way as your own exports (on our servers, using the providers listed in section 4) and are separate from your own yearly export. With Don't share memories, no memories are shared.
The executor must supply the Legacy Code and matching identifying details. DayCasion sends the owner a stop notice and applies a 24-hour hold before release. Your Legacy choices remain editable until the hold ends. When it ends, your Legacy purchases and choices are recorded for that process and can no longer be changed; if a Legacy purchase is refunded before then, that feature is removed. Afterward, the executor can receive a private link that is valid for 30 days and can be renewed to the executor's email address on file while the related account and authorized access remain available. Every request is checked again against that link and your recorded choices, and individual media and download links expire more quickly. Executors cannot edit or delete memories through this access and never see your password or billing information.
Deleting the account revokes the executor's remaining online access and removes Legacy records controlled by DayCasion. Messages, downloaded files or copies already received by another person cannot be recalled.
7. Children and other people in your memories
Account holders must be at least 18 years old. Newer app versions require the applicant to affirm this at sign-up; server-side enforcement is planned to be enabled in coordination with the compatible app release. DayCasion is intended for adults, even though adults may create Child profiles and preserve memories involving children. We do not knowingly provide accounts directly to children. If we learn an account belongs to a minor, we may close it and arrange deletion following appropriate verification.
The adult account holder manages Child profiles and the content they upload. They must have appropriate authority or permission for material concerning someone else. If information about you or your child appears in a member's private account and you believe it violates your rights, contact info@daycasion.com. We assess such requests without automatically giving third parties access to the member's private content.
8. How long we keep information
While an account is active. Memories, Life Stories, profiles and associated media remain until the account holder removes them or asks to delete the account, subject to the limitations described below.
After a subscription ends. Cancelling a subscription stops future renewals; it does not delete your account or your memories. DayCasion does not currently automatically delete an account solely because its subscription expires. A 90-day deletion lifecycle with warning emails at 30, 7 and 1 days before the scheduled date has been built but remains disabled. If activated, members will be notified of the operative policy and given opportunities to renew or export, with protections for accounts that cannot obtain a complete export.
Exports. A complete export you request is stored privately for 7 days and then deleted automatically. During that time only you can download it, by signing in at export.daycasion.com. If you delete your account, access to any prepared export ends immediately, and its files are then permanently removed in the background with the rest of your data.
Individual deletion. Deleting a memory or profile triggers removal of associated records and media, including Year in Review preview copies where applicable; cleanup can finish asynchronously.
Requested account deletion. When you delete your account in the app, it is closed immediately: you are signed out, you can no longer sign in, and access to your memories and any prepared export ends at once. This cannot be undone. The associated records, storage files (including any prepared export) and supported provider records are then permanently removed by a monitored background process that retries failures; we send a completion email once removal is verified. Deletion does not cancel an Apple or Google subscription.
Limited remaining records. Processed billing-event records may be retained for up to 13 months in minimized form, without the deleted account ID, and minimal deletion audit records for up to two years. Supabase backups and service-provider records may remain for their applicable backup, security, operational or legal retention periods. Providers such as Apple, Google (including Google Cloud), Postmark, OpenAI and Shotstack may independently retain records under their policies. See the Account & Data Deletion Policy.
9. Your choices and rights
You can view, correct and delete your information in the app, and request a complete export in Settings > Privacy & Data > Download My Data, then Export All My Memories (called Complete export in older app versions). We prepare the export on our servers and email you a link to a secure download page, where you sign in to download it within 7 days. One free self-service export is available every 365 days. If you need another copy sooner, or are making a legal access or portability request, contact info@daycasion.com. Before deleting your account, you can request a final export regardless of the 365-day limit (in the app, or by emailing info@daycasion.com). Our Data Protection & User Rights Policy explains how to make a request and what to expect, including rights some states give their residents. We will not treat you differently for using your privacy rights.
10. Security
Information travels between the app and our servers over encrypted (HTTPS) connections. Each account can reach only its own information, and our servers enforce this. Stored files use access controls, and selected delivery/rendering flows use time-limited signed URLs (observed configured durations range from 10 minutes to 3 hours); recipients can save copies after receiving them. Export downloads require signing in and use download links that expire after 1 hour. Passwords, Legacy Codes and Legacy links are stored only in protected (hashed) form. Payment details never reach us. No method of storage or transmission is completely secure, so we cannot promise absolute security. If a breach affects your information, we will notify you as the law requires.
11. Where information is processed
DayCasion stores your information in the United States. Our providers may process it in other countries under their terms.
12. Changes to this policy
We will post changes on this page and update the effective date. If a change materially affects how we use your memories, we will tell you in the app or by email before it takes effect.
13. Contact
Privacy and support: info@daycasion.com
Operator: DayCasion LLC, organized in Wyoming, United States. No residential address is published in this policy. Any mailing details specifically required by law or a storefront are provided through the appropriate business or legal channel.
Additional transparency: user content and sensitive details
Free-form memories, recordings and Life Stories can contain health information, family relationships, intimate personal events, religious or political views or information about children even though DayCasion does not require those categories in registration. We process the information you choose to include to provide the requested memory features.
Requests concerning deceased people and other people in a memory
Account holders control the profiles they create, subject to applicable law and other people’s rights. Requests involving a deceased member or a non-account-holder depicted in a memory are reviewed using an appropriate identity/authority process; naming someone in a memory does not automatically authorize them to read another member’s private account. See the Data Protection & User Rights Policy.