Privacy Policy

1 Overview

MyDailyCaps ("we", "our", or "us") respects your privacy. This Privacy Policy explains what personal information we collect when you use the MyDailyCaps mobile application (the "App") and this website (the "Site"), why we collect it, how we use it, and the rights you have over it.

This policy applies specifically to the MyDailyCaps App and Site. By using our App or Site you agree to the collection and use of information described in this policy.

2 Data We Collect

We collect the minimum data required to provide the App's features. Below is a complete description of each data type, why it is collected, and whether it is required or optional.

2.1 Account Information

2.2 Supplement & Health Tracking Data

2.3 App Usage & Technical Data

2.4 Data We Do NOT Collect

• Precise device location
• Contacts or phone book
• Microphone, camera, or media files
• Financial or payment information
• Biometric data
• Browsing history or activity outside the App
• SMS messages or call logs

3 How We Use Your Data

We use the data we collect for the following purposes:

• App functionality: Storing your supplement schedules and intake history so they are available across sessions and devices.
• Authentication & security: Verifying your identity, maintaining your login session, and protecting your account from unauthorised access.
• Notifications & reminders: Sending you timely reminders to take your supplements at the times you have configured.
• App stability: Detecting and resolving crashes and errors to improve the reliability of the App.
• Customer support: Responding to questions or requests you send us.
• Legal compliance: Meeting obligations under applicable laws and regulations.

We do not use your data for advertising, marketing to third parties, user profiling for commercial purposes, or any purpose not listed above.

4 Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to any third party. We may share data only in the following limited circumstances:

4.1 Service Providers

We may engage trusted third-party companies to perform services on our behalf (e.g. hosting infrastructure, email delivery). These providers have access to personal data only to perform those tasks and are contractually prohibited from using it for any other purpose.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to a valid legal request (such as a court order or government authority), or to protect the rights, property, or safety of MyDailyCaps, our users, or the public.

4.3 Business Transfers

If MyDailyCaps is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

5 Data Retention

We retain your personal data for as long as your account is active or as needed to provide the App's features. Specifically:

• Account data (email, hashed password): retained until you delete your account, after which it is permanently deleted within 90 days.
• Supplement & intake data: retained for the lifetime of your account and deleted within 90 days of account deletion.
• Error logs and crash reports: retained for up to 90 days for debugging purposes, then automatically purged.

We may retain certain data for longer periods if required by law or for legitimate fraud-prevention or security purposes. In such cases we will retain only the minimum data necessary and for no longer than legally required.

6 Security

We take the security of your personal data seriously and implement industry-standard measures to protect it:

• Encryption in transit: All communication between the App and our servers is encrypted using HTTPS / TLS.
• Encryption at rest: Personal data stored on our servers is encrypted at rest.
• Password hashing: Passwords are never stored in plain text — they are stored as secure hashes using industry-standard algorithms.
• Authentication tokens: Session tokens (JWTs) are stored securely on your device and transmitted only over encrypted connections.
• Access controls: Access to personal data on our infrastructure is restricted to authorised personnel only.

While we implement these safeguards, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify you of any breach that may materially affect your data as required by applicable law.

7 Your Rights

Depending on your location, you may have the following rights regarding your personal data. To exercise any of these rights, contact us using the details in Section 13.

7.1 All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data (see Section 8).
• Portability: Request your data in a machine-readable format.
• Objection: Object to the processing of your data for any purpose.

7.2 European Economic Area (EEA) & UK — GDPR Rights

If you are located in the EEA or UK, the General Data Protection Regulation (GDPR) grants you additional rights:

• The right to restrict processing of your personal data.
• The right to withdraw consent at any time (where processing is based on consent).
• The right to lodge a complaint with your local supervisory authority.

Our lawful basis for processing your data is contract performance (to provide the App's features you have requested) and legitimate interests (security and fraud prevention). Where we rely on consent, you may withdraw it at any time.

7.3 California — CCPA / CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you the following additional rights:

• The right to know what personal information is collected, used, shared, or sold.
• The right to opt out of the sale or sharing of personal information (note: we do not sell or share personal information for commercial purposes).
• The right to non-discrimination for exercising your privacy rights.
• The right to correct inaccurate personal information.
• The right to limit the use of sensitive personal information.

8 Account & Data Deletion

Google Play requires that apps offering in-app account creation also offer an easy way to delete that account and all associated data. MyDailyCaps honours this requirement:

8.1 How to Delete Your Account

You can delete your account directly from within the App:

1. Open the App and go to the Profile tab.
2. Tap Profile.
3. Tap Delete Account and confirm your choice.

Your account and all associated data (supplement list, intake history, schedules) will be permanently deleted within 90 days of your request. You will receive a confirmation email once deletion is complete.

8.2 Data Deletion Without Account Deletion

You may also request deletion of specific data (such as your intake history) without deleting your account. Contact us at the address in Section 13 and we will respond within 30 days.

8.3 Data Retained After Deletion

After an account is deleted, we may retain the following data for the periods specified, for the reasons noted:

• Anonymised, aggregated statistics (no personal identifiers): retained indefinitely for product improvement.
• Transaction / billing records (if applicable): retained as required by applicable financial regulations.

9 Children's Privacy

MyDailyCaps is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately using the details in Section 13 and we will delete that information promptly.

If you are between the ages of 13 and 18, please review this Privacy Policy with a parent or guardian before using the App.

10 Health & Supplement Data

MyDailyCaps is a personal tracking tool only. It is not a medical device and does not provide medical advice, diagnosis, or treatment recommendations. The supplement names, doses, and schedules you enter are treated as personal notes.

We handle your supplement tracking data with particular care:

• Your supplement data is associated only with your account and is never shared with third parties for commercial purposes.
• We do not access or integrate with Android Health Connect or any other health platform.
• Supplement data is encrypted in transit and at rest.
• We do not use your supplement data to infer health conditions or for any profiling purpose.

11 International Users

MyDailyCaps is operated from United States of America . If you are accessing the App from outside that country, please be aware that your information may be transferred to, stored, and processed in a country with different data protection laws than your country of residence.

For users in the European Economic Area or United Kingdom, any transfer of personal data outside the EEA/UK will be subject to appropriate safeguards as required by applicable data protection law (e.g. Standard Contractual Clauses).

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we do, we will update the "Last updated" date at the top of this page.

For material changes — those that significantly affect how we handle your personal data — we will provide advance notice via an in-app notification or email at least 14 days before the changes take effect. Your continued use of the App after the effective date constitutes acceptance of the updated policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us: