Daydab Privacy Policy Revision dated 18 October 2026. Applies from the first public availability of the corresponding app or website version. Developer and publisher: Maksim Lenkius Location: Vilnius, Lithuania Privacy contact: support@daydab.net 1. General information Daydab is an Android calendar app for viewing dates, holidays, days off and working days and creating personal marks. This Policy explains the data used by the app, daydab.net and support, where it is stored and how you can manage it. Website and support processing is described separately from local app data. 2. Data used by the app You can create marks containing dates or date ranges, a selected colour and an optional text comment. The app also stores settings needed to operate, including the selected country and interface language. This information is used to display the calendar and your marks. You choose the content of comments. Avoid entering confidential information if you do not want it stored on the device. 3. Storage and transmission In the first Android release, marks and settings are stored locally on your device. No registration or user account is required. Daydab does not transmit your marks to a developer server or make them available to other users. The app does not provide advertising profiling or analytics tracking of user activity. The app configuration disables Android system cloud backup and device data transfer. The app does not provide export or restoration of marks. These restrictions do not mean the developer controls every copy made by you, your device manufacturer or tools outside the app. 4. Device permissions Daydab uses Android capabilities needed to operate. Its core features do not access contacts, location, the camera or microphone. The first release requests no Android permissions, including Internet access. External links or email are opened by a separate device app at your request and are subject to that app's own practices. 5. Retention of local data Working mark records and settings remain locally until you change or delete the relevant working data or the operating system removes it. After upgrades from older versions, original marks may remain in legacy local data and a technical migration archive. Deleting a mark in the app deletes its working record but does not necessarily delete those historical copies. They remain locally until app data is cleared or the app is uninstalled. Uninstalling the app or clearing its data may permanently erase local marks. The developer has no server copy to restore on request. 6. Managing local data You can create, edit and delete marks in the app. Android settings can be used to remove all local app data; this may be irreversible. Because the first Android release has no user accounts or server storage of marks, the developer cannot remotely view, change or delete your local entries. 7. Third-party services Installing or distributing the app through Google Play may involve processing by Google under its own rules. This does not mean Daydab receives or stores your Google account information. Third-party components and licences are listed in the app's Open Source Notices and at https://daydab.net/legal/oss/. 8. Security Daydab uses Android's app data storage mechanisms. Security also depends on your device protection, operating-system settings and actions. The developer cannot guarantee protection where the device is compromised or accessed without authorisation. 9. Policy changes This Policy may be updated when features, processing practices or legal requirements change. The current version is available at https://daydab.net/privacy/. 10. Contact Publisher: Maksim Lenkius Location: Vilnius, Lithuania Email: support@daydab.net 11. Website and technical visit data Maksim Lenkius is responsible for website and support personal-data processing. Contact details are in section 10. To deliver and protect the website, infrastructure provider Cloudflare processes technical connection data: IP address, request date and time, requested page, browser and device information, and security-check results. The purposes are website operation, abuse prevention and technical troubleshooting. The legal basis is the legitimate interest in website availability and security, Article 6(1)(f) GDPR. Technical data is processed to the extent and for the time needed to deliver requests, detect and investigate abuse and maintain security, considering service settings and applicable Cloudflare terms. The publisher does not create a separate browsing-history database or enable additional logging of identifiable visitors. Information needed for a specific incident may be retained until the incident and related claims are resolved. Google Analytics and advertising pixels are not used on the website when this revision takes effect. Before optional analytics is introduced, this Policy and the cookie notice will be updated. Where consent is required, analytics will not load before it is obtained. The website has no user accounts, public comments, mailing-list subscription or embedded surveys. 12. Support enquiries When you email support@daydab.net, processing covers the sender's email address and provided name, enquiry and attachment content, app and device details you provide, and technical email metadata. This information is needed to reply, investigate errors, maintain security and protect legitimate interests in disputes. The legal basis is the legitimate interest in supporting users and handling enquiries, Article 6(1)(f) GDPR. Article 6(1)(b) GDPR applies where processing is objectively necessary to enter into or perform a contract with the person making the enquiry. Providing information is voluntary. Without contact details or problem information, a reply or diagnosis may be impossible. Do not send unnecessary passwords, documents or sensitive information. Support does not require you to send all your marks. Ordinary correspondence is retained for up to 12 months after the enquiry is closed and is then deleted. Unnecessary sensitive attachments are deleted earlier when no longer needed. Where required by law or necessary to establish, exercise or defend a specific legal claim, necessary records may be kept longer for a justified period with restricted access. Removal from the working mailbox does not mean immediate removal from provider backup and recovery copies; its periods and procedures apply. 13. Service providers and international processing Email uses Zoho Mail with a selected European data centre; website hosting uses Cloudflare Pages. Providers receive data needed to provide their respective services. The publisher does not sell user information or use it for advertising profiling. A European data centre does not mean every technical access or processing operation is confined to the EEA. Providers may use subprocessors and process data outside it. Processing outside the EEA is permitted only where an applicable Chapter V GDPR basis exists, such as an adequacy decision or standard contractual clauses with necessary supplementary measures. Information about applicable safeguards and obtaining a copy can be requested at the contact email. Provider processing and safeguard information: Cloudflare — https://www.cloudflare.com/cloudflare-customer-dpa/; Zoho — https://www.zoho.com/privacy/privacy-faq.html. These links do not mean a provider receives local marks from the app. Data may also be disclosed to competent authorities where required by law or to advisers where necessary to protect specific rights and subject to confidentiality requirements. 14. Personal-data rights Where applicable, you may request access, rectification, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing. Send requests to support@daydab.net. A response is normally provided within one month; any extension allowed by GDPR will be notified. Proportionate identity verification may be needed to prevent disclosure to another person; passport details are not requested automatically. You may complain to Lithuania's State Data Protection Inspectorate — Valstybinė duomenų apsaugos inspekcija (https://vdai.lrv.lt/) — or another competent supervisory authority, including in your EEA place of habitual residence. The publisher has no remote access to local marks. Use the app and device settings to manage them; contacting support does not itself give access. The publisher does not make automated decisions producing legal or similarly significant effects on you.