Privacy Policy & GDPR Disclosure

Effective Date: September 2026

1. Data Controller Identification (GDPR Art. 13)

The Data Controller responsible for the processing of personal data within Daily Resonance is:

Rantu Saikia (Einzelunternehmen / Sole Proprietorship)
Operating as Daily Resonance / Resonance Labs
Email: hello@dailyresonance.app
Direct Inquiries: rantusaikia@gmail.com

2. Categories of Data Collected

• Account Identification: Google Authentication profile info (Email, Display Name, Photo URL, unique Firebase UID) or anonymous session identifier.
• Self-Reported Wellness & Emotional Data: Daily mood logs (e.g. calm, focused, anxious, stressed), personal reflections, intentions, and gratitude entries.
• Session & Cognitive Activity: Breathing session durations, meditation minutes, streaks, and gamified cognitive stats.
• Subscription & Payment Data: Handled directly by Stripe (PCI-DSS Level 1 compliant). We only store your Stripe customer reference, subscription status, and active PRO module keys. We never store credit card numbers.
• Telemetry: Strictly anonymized performance signals to monitor app uptime and crash diagnostics.

3. Legal Basis for Processing & Special Category Data (GDPR Art. 6 & 9)

We process your data under the following legal bases:

• Explicit Consent (Art. 6(1)(a) & Art. 9(2)(a)): For collecting emotional states and mood logs. Because self-reported mood history may reflect personal psychological wellbeing, we collect this strictly with your affirmative consent on first visit.
• Contract Performance (Art. 6(1)(b)): To manage your account, sync your preferences across devices, and deliver PRO subscriptions.
• Legitimate Interest (Art. 6(1)(f)): To safeguard platform security, prevent abuse of AI mentor endpoints, and resolve technical bugs.

4. Sub-Processors & International Data Transfers

To provide AI mentorship, real-time sync, and payments, we engage reputable infrastructure providers who may process data in the United States under Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework:

• Google Cloud Platform / Firebase (USA & EU): Cloud database (Firestore), authentication, and container hosting (Cloud Run).
• Google Vertex AI / Gemini (USA): Processing mentor conversational responses without training on user data.
• Stripe, Inc. (USA & Ireland): Payment processing and subscription management.
• Microsoft Azure (Speech / Edge-TTS): Neural audio voice synthesis for mentor quotations.

5. Data Subject Rights (GDPR Articles 15–22)

Under European data protection laws, you possess comprehensive rights:

• Right to Erasure ("Right to be Forgotten" - Art. 17): You can permanently wipe your account, streak, favorites, and cloud logs in one tap via the "Delete Account & Data" button in your profile menu, or by emailing us.
• Right of Access & Portability (Art. 15 & 20): You can request a machine-readable export of all your stored logs.
• Right to Rectification (Art. 16): You may update your profile data anytime.
• Right to Withdraw Consent (Art. 7(3)): You may withdraw your consent for mood tracking at any time by clearing your data or closing your account.
• Right to Lodge a Complaint: You have the right to lodge a complaint with an EU Supervisory Authority in your country of residence.

6. Non-Medical Disclaimer

Daily Resonance is a personal wellness, mindfulness, and cognitive training tool. It does not provide medical diagnosis, clinical psychiatric therapy, or prescription healthcare advice. If you are experiencing mental health crises or severe medical distress, please contact licensed healthcare professionals immediately.

7. Contact & Data Protection Inquiries

For any privacy-related requests or data deletion confirmation, contact: hello@dailyresonance.app.