Privacy Policy

Who we are

Dayzle is operated by Coordn8r Software Inc. (“Dayzle”, “we”, “us”), a company incorporated in Ontario, Canada, at [REGISTERED ADDRESS], Ontario, Canada. Under Canadian privacy law we are the organization accountable for the personal information described here, and under US state privacy laws we are the business that determines how it is handled. Where data protection law elsewhere applies to us, we are the data controller.

This policy applies to the Dayzle app on iOS and Android, the web version at play.dayzlegame.com, and this marketing site at dayzlegame.com. Where a section applies to only one of those, we say so.

Where Dayzle is offered

Dayzle is offered in Canada and the United States. Our app store listings are restricted to those countries, we price in Canadian and US dollars, and we do not market, advertise, localise, or direct Dayzle to any other region.

The web version at play.dayzlegame.com is reachable from anywhere, because that is how the web works. That does not mean we are offering the service in your country. If you are outside Canada and the United States and choose to play anyway, you are welcome to — but you are doing so on your own initiative, the service is not directed at you or tailored to your local law, and we may not be able to offer everything described here.

See If you are outside North America for what we do extend to everyone regardless.

The short version

We collect the minimum a daily-games app needs to work: an account, your gameplay results, and basic diagnostics.

• We do not sell your personal information. We never have and we have no plans to.
• We do not run behavioural advertising in Dayzle, and we do not share your data with ad networks or data brokers.
• We do not track you across other apps or websites for advertising, and we do not use the advertising identifier on your device.
• You can play without giving us an email address. Dayzle creates an anonymous account for you on first launch; signing in with Google, Apple, or email is optional and exists so your progress survives a lost phone.
• You can delete your account and its data from inside the app, at any time, without emailing us to ask.

What we collect

Account information

When you first open Dayzle we create an anonymous account so you can play immediately. That account holds a randomly generated account identifier and nothing that identifies you personally.

If you choose to sign in — so your streak and history follow you to a new device — we receive from your chosen provider:

• Google Sign-In: your email address, your name as it appears on your Google account, and your Google account identifier.
• Sign in with Apple: your Apple account identifier, and your email address — which is the private relay address Apple generates for you if you chose to hide your real one.
• Email and password: your email address and a password, which is stored only in hashed form by our authentication provider. We never see or store your plaintext password.
• Email sign-in link: your email address.

We also store whether your account is still anonymous, when it was created, and your time zone (for example America/Toronto), which is how we know when your day rolls over for streak purposes.

Profile information you choose to add

• Display name. Optional. This is the name shown on leaderboards. It does not have to be your real name and we would gently suggest it isn’t.
• Profile picture. Optional. If you pick a photo, the image is uploaded to our storage and served from a long, unguessable web address. Anyone holding that address can view the image, so please don’t upload anything you would not want seen.

Gameplay data

This is the bulk of what Dayzle stores, and it is what powers your streak, your stats screen, and your Brain Score. Each time you finish a game we record:

From those records we keep running totals per game — best score, number of plays, average accuracy, when you last played — and your streak information: current streak, longest streak, the date you last completed a daily set, and how many daily sets you have completed in total.

App diagnostics and usage analytics

• Crash reports. If Dayzle crashes we receive a report containing the technical error, your device model, operating system version, app version, and an installation identifier. We use this to fix the crash. We do not attach your email address to crash reports.
• Usage events. We record a small, fixed set of named events describing how the app is used — for example that a daily set was opened, a game was started, completed, or abandoned, a hint was used, a streak was extended, a tutorial was skipped, or a settings toggle was changed. These events carry the game involved and similar context, plus your account identifier, an app-instance identifier, and standard device information (model, operating system, language, country, app version) collected by our analytics provider.

We use analytics to answer questions like “is anyone finishing this game, or are they all quitting at level three”. We do not use it to build advertising profiles.

Reminders

If you turn on the daily reminder, the time you pick is stored on your device and the reminder is scheduled by your phone’s own operating system. There is no server sending you push notifications, and we do not receive a record of whether a reminder was shown or tapped.

Subscriptions and payments

If Dayzle offers a paid subscription, purchases are processed by the Apple App Store or Google Play — not by us. We never receive your card number, billing address, or full payment details. What we receive from the store is the status of your purchase: which product you bought, whether it is active, and when it renews or lapses.

Website visits

See Cookies and the website below. In short: our host records standard server logs, the site loads a web font from Google, and our product analytics is currently switched off.

Things we do not collect

• Your precise location. Dayzle never asks for location permission.
• Your contacts, calendar, microphone, or camera roll. The only photo we see is one you explicitly pick for your profile picture.
• Your device’s advertising identifier.
• Health data, biometric data, or anything from a health app.
• Sensitive categories of data such as race, religion, political opinions, sexual orientation, or trade union membership. Please don’t put any of that in your display name.

Why we use it, and our legal basis

Here is every purpose we use your data for, and the justification for each. The legal bases named in the right-hand column are the GDPR’s, which we use because they are the clearest vocabulary anyone has written for this — and they apply directly if you are one of the people described under If you are outside North America.

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and you can object — see Your rights. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

What other players can see

Dayzle has leaderboards. When you complete a game that feeds one, the following becomes readable by other signed-in players:

• Your handle — your display name if you set one, otherwise an automatically generated one like “Player 4XKQ”. Your email address is never shown.
• Your score, the difficulty band you played, how long the game took, and when you finished.
• Your profile picture, if you set one.

If you would rather not appear, do not set a display name — an auto-generated handle is not reasonably linkable to you by other players — or contact us at hello@dayzlegame.com and we will remove your entries. Deleting your account removes them too.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do use a small number of service providers who process data on our instructions and are contractually bound to protect it:

We may also disclose personal information:

• When the law requires it — a valid court order, subpoena, or similar legal process. We will tell you unless we are legally prohibited from doing so.
• To protect the rights, safety, or property of Dayzle, our players, or the public.
• To a buyer or successor, if we are ever acquired or merged. This policy, or one at least as protective, will continue to apply, and we will tell you before your data moves.
• To anyone else, with your consent.

Where your data is processed

We are a Canadian company. Our service providers process and store data on infrastructure in the United States and, depending on the service, other countries. So if you are in Canada, your personal information is routinely transferred to and stored in the United States.

Data stored outside your country is subject to the laws of that country, and may in principle be accessible to its courts, regulators, and law enforcement — including under US legal process — regardless of where you live.

Our contracts with these providers require them to protect your data to the standard described in this policy, and where a transfer needs a formal legal mechanism, we rely on the standard contractual protections our providers offer. You can ask us which ones apply by writing to hello@dayzlegame.com.

How long we keep it

• Account and gameplay data: for as long as your account exists. Your play history is the point of the stats screen, so we keep it rather than rolling it up.
• After you delete your account: your account record, profile, gameplay history, aggregates, and leaderboard entries are deleted. Copies may persist in encrypted backups for up to 90 days before those expire.
• Dormant anonymous accounts: an anonymous account that is never signed in to and has not been used for 24 months may be deleted along with its data.
• Crash reports: retained by our provider for approximately 90 days.
• Usage analytics: user-level analytics records are automatically deleted on our provider’s retention schedule, which we set to no more than 14 months. Aggregate, non-identifying counts may be kept indefinitely.
• Website server logs: a short period set by our host, typically days rather than months.
• Transaction records: kept as long as tax and accounting law requires, typically six to seven years, even after you delete your account.

How we protect it

Data is encrypted in transit and at rest by our providers. Access to production data is limited to the people who need it, protected by multi-factor authentication. Our database enforces per-account access rules at the server, so one player’s credentials cannot read another player’s data — and gameplay records are write-once, which means they cannot be quietly rewritten after the fact.

No system is perfectly secure, and we won’t pretend otherwise. If a breach affects your personal information and creates a real risk of significant harm, we will notify you and the relevant regulators as the law requires — within 72 hours of becoming aware, where the GDPR applies.

Your rights

Wherever you live, you can:

• Access the personal information we hold about you, and get a copy.
• Correct anything inaccurate. Your display name and profile are editable in the app directly.
• Delete your account and its data. In the app: Profile → Edit profile → Delete account. It is immediate and it is not reversible.
• Withdraw consent you previously gave — turn off reminders, remove your profile picture, or opt out of analytics in the app’s settings.
• Complain to us first, and to your data protection authority if we don’t resolve it.

To exercise a right, email hello@dayzlegame.com from the address on your account, or tell us enough to locate your account if it is anonymous. We respond within 30 days, and within one month where the GDPR applies — extendable by two further months for complex requests, in which case we will tell you why. We will not charge you, and we will not treat you worse for asking. We may need to verify your identity before acting on a request.

If you are outside North America

As explained under Where Dayzle is offered, we offer Dayzle in Canada and the United States only. We do not target, market to, or direct our service at the European Economic Area, the United Kingdom, or anywhere else, and for that reason we have not appointed a representative under Article 27 of the GDPR or its UK equivalent.

If you have reached the web version from outside North America and played anyway, we are not going to use that as an excuse to treat your data worse. As a matter of policy, and regardless of where you live, we extend to you:

• Restriction — ask us to pause processing while a dispute about accuracy or our legitimate interests is resolved.
• Objection — object to processing based on our legitimate interests, on grounds relating to your particular situation. If you object to direct marketing, we stop, no questions asked.
• Portability — receive the data you gave us, and the data generated by your use of Dayzle, in a structured, machine-readable format.
• Freedom from automated decision-making that produces legal or similarly significant effects. We don’t do any. Your Brain Score is a description of your play, not a decision about you, and it has no consequences outside the app.

These sit on top of the access, correction, deletion, and consent-withdrawal rights under Your rights, which we already give everyone. Email hello@dayzlegame.com to use any of them.

If you believe we have mishandled your data and we have not put it right, you can raise it with your local data protection authority. In the EEA, a list is maintained by the EDPB; in the UK it is the Information Commissioner’s Office. We would genuinely appreciate the chance to fix it first.

If you are in Canada

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You have the right to access your personal information, challenge its accuracy, and withdraw consent subject to legal and contractual restrictions — noting that withdrawing consent to the processing we need in order to run your account means closing the account.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada, or to your provincial commissioner.

If you are in the United States

Residents of California, Colorado, Connecticut, Virginia, Texas, and other states with comprehensive privacy laws have rights to know, access, correct, delete, obtain a portable copy of, and limit certain uses of their personal information, and to appeal a refusal. Exercise any of them at hello@dayzlegame.com.

For the avoidance of doubt: in the twelve months before this policy’s date and going forward, we have not sold personal information, and have not shared it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act and equivalent state laws. We do not process sensitive personal information for the purpose of inferring characteristics. There is nothing to opt out of, so a Global Privacy Control signal reaching our website changes nothing about what we do — we already do not do it. We do not use personal information for targeted advertising or for profiling with legal or similarly significant effects.

Under California’s “Shine the Light” law, we do not disclose personal information to third parties for their own direct marketing purposes.

Children

Dayzle is not directed to children. You must be at least 13 to have a Dayzle account. If you are somewhere with a higher minimum age for consenting to online services on your own, that higher age applies to you instead.

We do not knowingly collect personal information from children below those ages, and we do not build the kind of profile that children’s privacy laws — COPPA in the United States, and its equivalents — are concerned with. If you believe a child has given us personal information, write to hello@dayzlegame.com and we will delete the account and its data promptly.

Cookies and the website

This section is about dayzlegame.com, the marketing site you are reading now.

• Server logs. Our host, Cloudflare, records standard request information including your IP address, browser user agent, the page requested, and the time. This is used for delivering the site, security, and abuse prevention, and is retained briefly.
• Web fonts. The site loads the Manrope typeface from Google Fonts, which means your browser makes a request to Google’s servers and Google receives your IP address. If you would prefer that not happen, a content blocker will stop it and the site will simply render in a fallback typeface.
• Product analytics. The site is wired for PostHog analytics but it is currently switched off — no analytics key is configured, no analytics script loads, and no analytics cookies are set. If we turn it on, we will update this policy first, and we will not set a non-essential cookie or local storage entry on a visitor whose local law requires consent for it without asking.
• No advertising cookies. We do not run ad tags, retargeting pixels, or social media trackers on this site.

The web version of Dayzle at play.dayzlegame.com uses browser storage to keep you signed in and to hold your in-progress puzzle. That storage is strictly necessary to provide a service you asked for, and no consent banner is required for it.

Changes to this policy

We will update this policy when what we do changes. The “last updated” date at the top always reflects the current version. If a change materially affects your rights — a new category of data, a new purpose, a new recipient — we will give you notice in the app or by email before it takes effect, and where the law requires consent, we will ask for it rather than assume it.

Contact us

Privacy questions, requests, and complaints: hello@dayzlegame.com.

Coordn8r Software Inc. [REGISTERED ADDRESS], Ontario, Canada

A real person reads that inbox. If you are exercising a privacy right, say so in the subject line and we will treat it as a formal request from the day it arrives.