Privacy Policy

DAISYS LLP ("we", "us", "our") operates the Daisy's.live platform (accessible at daisys.live). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using Daisy's.live, you consent to the data practices described in this policy.

This policy applies to all users of the Daisy's.live web application, including those accessing via desktop browsers, mobile browsers, or any other means.

We collect information in the following categories:

2.1 Information You Provide

• Account Information: Email address, username, display name, password (hashed and stored securely via our authentication provider).
• Profile Information: Age, gender, place/city, hobbies, profile photo, and avatar customization preferences.
• Exam Selection: Your chosen exam category for study room matching and leaderboard participation.
• Chat Messages: Messages sent in study room chat are stored to maintain room conversation history.
• Payment Information: When purchasing a monthly pass, payment is processed by third-party providers. We do not store your card number, CVV, or full payment details on our servers.

2.2 Information Collected Automatically

• Study Session Data: Focus duration, session start/end timestamps, room participation history, and presence status (present/away).
• Leaderboard Data: Weekly cumulative focus time used for ranking and reward eligibility.
• Device Information: Browser type, operating system, screen resolution, and device type (used for responsive design, not tracking).
• Cookies: We use essential cookies for authentication session management and a geo-country cookie for regional content display. We do not use advertising or third-party tracking cookies.

2.3 Information We Do NOT Collect

• Video or image data from your camera (see Section 3).
• Location data beyond country-level geo-IP detection.
• Contacts, phone number, or data from other apps on your device.
• Browsing activity outside of the Daisy's.live platform.

Daisy's.live uses your device camera solely to detect whether you are present at your screen during study sessions. This is how we track focus time accurately.

• On-device processing: Face detection runs entirely in your browser using the MediaPipe Vision library. No video frames, images, or biometric data ever leave your device.
• Binary output only: The only data sent to our server is a binary signal: "present" or "away". No facial features, landmarks, or recognition data is transmitted.
• No recording: Your camera feed is never recorded, stored, streamed, or shared with any third party.
• Optional: Camera access is required for focus tracking but you can revoke permission at any time via browser settings. Without camera access, focus time will not be tracked.

• To create and manage your account.
• To provide personalized study room experiences matched to your exam category.
• To track your focus progress and display analytics dashboards.
• To calculate and display leaderboard rankings.
• To determine weekly winner eligibility and distribute rewards.
• To display your profile to other authenticated users (friends, room occupants, leaderboard).
• To send notifications about friend requests, study sessions, and announcements (if enabled).
• To improve and maintain the platform's performance and reliability.
• To enforce our Terms & Conditions and prevent misuse.

We take the security of your data seriously:

• Infrastructure: Data is stored on Supabase (hosted on AWS) with enterprise-grade security, encryption at rest, and encrypted connections (TLS).
• Row-Level Security: Database policies ensure users can only access their own data and data they are authorized to view.
• Profile Photos: Stored in encrypted cloud storage with access controlled by authenticated user sessions.
• Authentication: Handled by Supabase Auth with secure session tokens. Passwords are hashed using bcrypt and never stored in plain text.
• No sale of data: We do not sell, rent, or trade your personal information to any third party for any purpose.

We share data only in the following limited circumstances:

• Other Users: Your public profile (username, display name, avatar, exam category, focus stats) is visible to other authenticated users for social features like leaderboards, friends, and room presence.
• Service Providers: We use Supabase for database and authentication, and Vercel for hosting. These providers process data on our behalf under strict data processing agreements.
• Payments: Payments are made by direct UPI transfer, so your payment happens inside your own bank or UPI app — we never see your card, bank login, or UPI PIN. We do store the UPI transaction reference (UTR) you submit, plus any note you add, so we can match it to a credit in our bank statement and activate your pass.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation applicable in India.

We do not share data with advertisers, analytics companies, data brokers, or any other third parties not listed above.

• Account Data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
• Study Session Data: Focus tracking records are retained indefinitely to maintain your historical analytics. You may request deletion.
• Chat Messages: Retained for 90 days, then automatically purged.
• Leaderboard Data: Weekly leaderboard entries reset every Sunday. Historical rankings may be retained for reward verification.

As a user, you have the following rights:

• Access: You can view all your personal data through your profile and analytics dashboard.
• Correction: You can update or correct your profile information at any time from the settings page.
• Deletion: You can request deletion of your account and all associated data by contacting support.
• Portability: You can request a copy of your data in a machine-readable format.
• Camera Revocation: You can revoke camera permissions at any time through your browser settings without deleting your account. However, doing so will disable focus tracking.
• Notification Opt-out: You can disable notifications from your dashboard settings.

Daisy's.live is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete that information immediately. If you believe a child under 13 has provided us with personal information, please contact us at the email below.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or an in-app notification at least 7 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (as applicable). Any disputes shall be subject to the exclusive jurisdiction of the courts in India.