Privacy policy

App: Daily Affirmation · Android package com.dailyaffirmation.app
Data controller: Cloudy NI (sole trader)
ICO data protection registration: ZC222090
Region: Northern Ireland, United Kingdom
Last updated: 30 September 2026
Contact: support@cloudyni.com

Who we are

This policy covers the Daily Affirmation Android app, package com.dailyaffirmation.app, as published on Google Play by Cloudy NI (sole trader), together with the cloudyni.com pages that support it: this policy, the terms of use and the data deletion page.

It describes the build that is on Google Play now. Where a feature is optional this policy says so, and where the app keeps nothing on our servers it says that too. We do not sell personal data.

What stays on your device

The following is written into the app's own private storage on your phone and is never sent to us:

• Your favourite affirmations and your reading history.
• Mood check-ins and any notes you attach to them.
• Reminder schedule, theme, text size and app-lock settings.
• The locally cached premium entitlement for this install.

Clearing the app's storage or uninstalling the app deletes all of it at once, without contacting us. The data deletion page lists the steps.

What the app can access

The app asks Android for as little as it can. This is the complete list for the published build:

• Notifications

An item above is used only while the feature that needs it is running, and nothing beyond this list is accessed by the app.

Information the app handles

This is the full picture for the published build: everything the app records, processes or transmits, and where it goes.

• Your favourites and history. The affirmations you save, and which ones you have seen, are stored on your device so the app can continue where you left off.
• Mood check-ins. If you record a mood, that entry and its date are stored on your device. It is your own private log: it is not used for advertising, not used to profile you, and not shared with anyone.
• Settings. Theme, reminder times, notification preferences, text size and the optional app lock or PIN.
• An optional account email, only if you choose to switch on encrypted cloud backup.
• Purchase verification. When you buy or restore Premium the app asks a verification service that we run ourselves to confirm the purchase with Google. That request carries the Google Play purchase token, the product or subscription identifier and the app package name — and, if Play Integrity checking is switched on, an app-integrity token. It never carries your email, your favourites, your history or your mood entries. The service asks Google for a verdict and keeps no database of its own.
• Diagnostics and analytics described in the analytics section below.
• Advertising data processed by Google AdMob on the free tier.
• Correspondence you send to support.

Optional encrypted cloud backup

Cloud backup is optional and off by default. The app is fully usable signed out, and everything works with no account at all. If you choose to create one, a copy of your favourites, history, mood check-ins and settings is encrypted on your device before it is uploaded, so the server stores a blob it cannot read. Authentication and storage are handled by Supabase (our processor, servers in the EU, eu-west-2).

There is no advertising profile behind the account and no selling of data. The account exists only so that your own content can be restored to a new device.

If you choose to use that optional feature, these rules apply:

• Your content is encrypted on your device before upload. The server cannot read it, and neither can we.
• A forgotten backup password cannot be recovered by us and the backup cannot be decrypted without it. There is no master key or reset. Keep your own copy of anything you cannot afford to lose.
• You may delete the account and the encrypted blob at any time — see the data deletion page. We complete verified deletions within 30 days.

Deleting the account deletes the stored backup with it. Both routes — the in-app one and the email one — are set out on the data deletion page.

Sensitive information

Mood check-ins and any notes you write can say something about your wellbeing, so we treat them as the most sensitive thing in the app. They are written to your device's private storage, are excluded from advertising and from analytics events, and are never used to build a profile of you. They reach a server only if you deliberately create an account and leave cloud backup switched on, and even then only as a blob encrypted with your password that we cannot read.

We do not sell this data, we do not share it with advertisers or data brokers, and we do not use it for research. You can erase it at any time from inside the app.

Where that is special category data under UK GDPR — health information, for example — the basis for using it is your explicit consent, given when you choose to record it, and withdrawn by deleting the entry. If the text above says the record stays on your device, your device is the only place it is processed.

Children and families

Daily Affirmation is aimed at a general adult audience and is not directed at children. We do not knowingly collect personal information from a child. Because the app can be installed on a shared device, a parent or guardian may contact support@cloudyni.com to have any correspondence deleted, and clearing the app's storage or uninstalling it removes everything held locally for that install.

Advertising

The free version shows advertising served by Google AdMob, with consent collected through Google's User Messaging Platform where the law requires it. Google and its partners may process your advertising ID, IP address and device information to serve and measure ads. Your mood check-ins, favourites and history are never passed to AdMob or to any advertiser, and advertising is never targeted at how you are feeling.

Where the law requires it, the app asks for your advertising consent through Google's User Messaging Platform before it requests an advertisement, and you can change or withdraw that choice from the app's privacy options at any time.

Advertising is served and measured by Google and its partners under Google Privacy Policy and AdMob & privacy. You can reset or delete your advertising ID, and turn personalised advertising off, in Android Settings → Privacy → Ads.

Buying a paid product removes advertising for as long as that product is active; the next section explains what we learn from Google Play.

Analytics, diagnostics and crash reports

The app reports anonymous usage, performance and crash information through the Google services we configure:

• Google Analytics for Firebase (anonymous usage analytics)
• Firebase Crashlytics (crash and error diagnostics)
• Firebase Performance Monitoring
• Firebase Remote Config
• Firebase Cloud Messaging (push notifications)

Those reports carry an app-instance identifier rather than your name, and Google handles them for us under Firebase privacy and security. They are diagnostic: we use them to find crashes and to see which features are used, not to identify you.

We use Google Analytics for Firebase (GA4) for anonymous usage analytics, Crashlytics for crash and error reports, Firebase Performance Monitoring for startup and responsiveness, Remote Config to change feature switches without an app update, and Firebase Cloud Messaging for reminder notifications if you allow them. Analytics events describe app behaviour (for example “affirmation opened”); they never contain the text you write in a mood check-in or a note, and they do not identify you by name. You can turn notifications off in Android settings at any time.

Purchases and subscriptions

Anything you buy in Daily Affirmation is sold through Google Play Billing. Google is the merchant of record, so your payment method, billing address and the amount you paid are held by Google and never shared with us.

To unlock a paid feature the app asks Google Play whether the product is active. The product identifiers are on the terms of page, and the price is always the amount shown on the Google Play purchase sheet when you confirm it. See Google Play Terms of Service and Google Privacy Policy.

A subscription is cancelled in Google Play, not by deleting anything here, and deleting your data does not cancel it.

How long we keep things

Affirmations, favourites, history and mood check-ins stay on your device until you clear the app's storage or uninstall it. If you create an account, the encrypted backup is kept until you delete the backup or the account from inside the app, after which it is removed from our processor's storage. Deletion requests made by email are completed within 30 days, and aggregated, non-identifying analytics are retained by Google under our Firebase configuration. A Play purchase token sent for entitlement verification is used only to answer that one request and is not written to a database by our verification service; Google keeps the underlying Play purchase record under its own policies. Support correspondence is kept only as long as needed to answer the query.

A cloud copy is kept only for as long as the account exists; deleting the account, or asking us to delete it, erases it.

Google keeps purchase records and advertising data under its own policies, as the store and as an advertising provider rather than on our behalf.

Your rights

Under UK GDPR you can ask us for a copy of your information, ask us to correct or erase it, restrict or object to how we use it, ask for it in a portable format, and withdraw consent where consent is what we rely on.

Most of what this app holds is on your device, so you are the fastest route to erasure: delete the entries, clear the app's storage, or uninstall the app. Where an account exists, deleting it erases the copy we hold: see the data deletion page.

Email support@cloudyni.com for any of these. We answer within one month and we do not charge for a first request. You can also raise a complaint with the ICO if you are unhappy with how we have handled your information.

How we protect your data

Data kept by the app sits in its private app storage, inside Android's application sandbox, protected by your device lock and by Android's file-based encryption. Anything the app sends or receives travels over HTTPS.

Cloud data is stored on EU infrastructure by our processor, transferred over TLS, and reachable only with the credentials that belong to the account.

No system is perfect. If we learn of a breach that puts your information at risk we will tell you and the ICO as UK GDPR requires; where we hold nothing about you, there is nothing for a breach to expose.

Changes to this policy

This page was last updated on 30 September 2026, and it describes the build that was on Google Play on that date. If a change affects what the app collects or where it goes, we update this page and the date above before the change ships. If the change is significant we will say so on the app's Google Play listing.

Contact us

Cloudy NI (sole trader) is a sole trader based in Northern Ireland, registered with the ICO for data protection under reference ZC222090.

Email support@cloudyni.com for privacy questions, a purchase problem or a deletion request. We answer data-protection requests within one month and deletion requests within 30 days.

The exact steps for deleting data, and what to send us if you cannot use them, are on the data deletion page.