Privacy Policy - DailyNod

Data Controller

Mohamed Mchaouri, sole trader, trading as DailyNod
Established in Germany - full postal address in our Impressum / Legal Notice
UK service address: Suite A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom
Contact Email: [email protected]
ICO Registration: 00015081791

Lawful Basis for Processing

We process personal data on the basis of Performance of a Contract under UK GDPR Article 6(1)(b). Your data is required solely to deliver the automated SMS check-in service you have subscribed to. No data is processed for purposes beyond direct contract execution.

Data We Process

We collect and process the minimum data necessary to execute the service:

- Participant Data: Name, the name you use for them, mobile phone number, and the timezone they live in. Where the household add-on is used, we also hold the mobile number of a second participant at the same address, who receives the same check-in messages and has the same rights over their data as anyone else described here.
- Customer (Family Member) Data: Email address, mobile phone number, billing details (processed directly by Stripe - we do not store card data).
- Service Logs: Scheduled check-in timings, response histories, daily streaks, and any period during which check-ins are paused.
- Waitlist Data: If you're outside the UK and sign up to be notified of a launch in your region, we store your email address and region on the basis of your consent (UK GDPR Article 6(1)(a)). We email you at most once, only if we launch there, and delete the list if it's retired. You can ask to be removed at any time.

Cookies & Tracking

This website does not use analytics cookies, advertising trackers, or third-party tracking scripts. The signup form uses Cloudflare Turnstile to block automated abuse, which may set a small number of technical cookies for that purpose only. No cookie consent is required for browsing this site.

Third-Party Sub-Processors

Personal data passes through the following sub-processors under appropriate data processing agreements:

Stripe Payment processing. Card data is handled exclusively by Stripe and never stored by us.

Twilio Inbound and outbound SMS routing for check-in messages and alerts.

Supabase Subscriber records are stored in a Supabase (PostgreSQL) database under Supabase's GDPR-compliant data processing addendum.

n8n Runs the automation that sends check-in texts, reminders, and alerts.

Groq When a reply doesn't clearly match an expected word, the message text is sent to Groq's AI service to help work out what was meant. This only happens for unclear replies, not every message.

Cloudflare Hosts this website, provides Turnstile (a bot-detection check used on the signup form), and stores our nightly database backups.

Your Rights & Data Deletion

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data and any participant data you registered. To exercise any of these rights, email:

[email protected]

All corresponding records will be permanently deleted within 30 days of a valid request. If you believe your rights have not been upheld, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.