Privacy Policy

Last updated: July 23, 2026
Effective date: April 8, 2026

Yam Malla ("we," "our," or "us") operates the Dareyou mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the App.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information You Provide

• Account information: When you create an account (email/password, Google Sign-In, or Apple Sign-In), we may collect:

  • Email address

  • Display name (if provided)

  • Authentication provider user identifier

• Profile and settings: If you use account and app settings, we may store:

  • Profile details you provide

  • Notification preferences

  • App preferences and challenge-related settings

• Challenge activity data: When you use Dareyou, we may store:

  • Challenge configuration (template/category, start/end dates, target values, grace days)

  • Daily logs and completion history

  • Challenge outcomes (active, passed, failed)

  • GEM balance and transaction records needed to operate challenges

1.2 Information Collected Automatically

• Device and app data: Our App and integrated services may collect:

  • Device identifiers and app instance identifiers

  • OS version, app version, and SDK metadata

• Usage, diagnostics, and crash data: We and our service providers may collect:

  • Feature usage and interaction events

  • Crash reports and performance diagnostics

  • Technical logs used to troubleshoot and improve reliability

• Notification data: If notifications are enabled, we may process:

  • Push notification token(s)

  • Notification delivery and interaction metadata

1.3 Payment and Purchase Information

• In-app purchases (one-time, consumable GEM packs) are processed through app store billing infrastructure (for example, Google Play, Apple App Store, and RevenueCat).

• We do not collect or store full payment card details.

• We may receive purchase and entitlement information (for example, transaction identifiers and product/entitlement status) to deliver and manage purchased GEMs and paid features.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the App, including authentication and challenge functionality.

• Sync your challenge progress across devices (where supported/enabled).

• Process in-app purchases and manage paid feature access.

• Send product/service notifications (including reminders you enable).

• Improve the App through analytics, diagnostics, and crash reporting.

• Protect users and services through security monitoring and fraud prevention.

• Comply with legal obligations and enforce our terms.

3. How We Share Your Information

We do not sell your personal information. We may share information in these cases:

• Service providers: We use third-party services that process data on our behalf, including:

  • Firebase services (for example, Authentication, Firestore, Cloud Messaging, Analytics, Crashlytics)

  • RevenueCat (in-app purchase and entitlement management)

  • App stores/payment providers (purchase processing)

• Legal and safety: We may disclose information if required by law, regulation, court order, or valid legal process, or when necessary to protect rights, property, safety, users, or the public.

• Business transfer: If we are involved in a merger, acquisition, financing, or asset sale, your information may be transferred as part of that transaction, subject to applicable safeguards.

4. Data Storage, Security, and Retention

• Storage: Data may be stored on your device and in cloud infrastructure used by our service providers (such as Google Cloud/Firebase infrastructure).

• Security: We use reasonable technical and organizational safeguards, including encryption in transit (for example, TLS/HTTPS), to help protect data.

• Retention: We keep data for as long as needed to provide the App, fulfill purchases, comply with legal obligations, resolve disputes, and enforce agreements. We may retain de-identified or aggregated data for analytics and product improvement.

• What deleting your account removes: Deleting your account permanently removes your profile, your dares, your daily logs, your GEM balance and GEM history, your notification tokens, your app settings, and any feedback you submitted. This cannot be undone.

• What we keep after deletion: Two things survive account deletion.

  1. Purchase and billing records, which we retain for tax, accounting, and dispute-resolution purposes, as permitted by the app stores.

  2. A one-way cryptographic hash (SHA-256) of your sign-in identifier and email address, recording that the one-time new-account GEM bonus has already been claimed. This hash cannot be reversed to recover your email address or identity. It is never used to contact you, to build a profile, or to restore a deleted account. Its only purpose is to prevent the one-time bonus from being claimed repeatedly by deleting and recreating accounts, and we keep it for as long as that bonus is offered.

5. Your Choices and Controls

• Account and profile: You can update profile and certain account settings in the App.

• Notifications: You can manage push notifications through in-app settings and/or device settings.

• Data sync: Where applicable, you can control sync-related behavior in App settings.

• Purchases: In-app GEM purchases are one-time and consumable (no subscriptions to manage). Purchase history and refund requests are handled through your app store account.

6. Your Rights (Access, Correction, Deletion, Export)

Depending on your location and applicable law, you may have the right to:

• Access personal data we hold about you.

• Correct inaccurate or incomplete data.

• Request deletion of your account and associated data. See Section 4 for the two limited records that survive deletion: billing records, and a one-way hash used only to stop the one-time signup bonus being claimed repeatedly.

• Request a portable export of your data (where technically feasible).

• Object to or restrict certain processing.

• Withdraw consent where processing is based on consent.

To submit a request, contact us using the details in Section 12. We may need to verify your identity before fulfilling certain requests.

7. Children’s Privacy

Dareyou is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

8. International Data Transfers

Your information may be processed in countries other than your own, including countries where our service providers operate. Where required, we implement appropriate safeguards for cross-border data transfers in accordance with applicable law.

9. Third-Party Services and Links

The App may include links to third-party websites or services. This Privacy Policy does not apply to third-party properties, and we encourage you to review their privacy practices.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy in the App and/or on our website and revise the "Last updated" date. Material changes may be communicated through additional notice where required by law.

11. Regional Disclosures

Depending on where you live (for example, EEA/UK, California, or other jurisdictions), you may have additional statutory rights and disclosures. If required, we will provide supplemental regional privacy notices.

12. Contact Us

For privacy questions or requests (including access, correction, deletion, and export), contact:

• Email: edustarstudio@gmail.com

• Subject line: "Privacy - Dareyou"

If available, you may also use in-app account deletion/data request controls.