Legal

Privacy Policy

We built Daily Drip with your privacy in mind. This policy covers what data we collect, how we use it, which third-party services we work with, and your rights as a user including CCPA opt-out.

Last updated April 15, 2026

Symph Inc. ("we," "us," or "our") operates the Daily Drip mobile application and the website at daily-drip.app (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have. By using Daily Drip, you agree to the practices described here.

If you have questions or concerns, you can reach us at privacy@daily-drip.app.

1. Information We Collect

Information You Provide

  • Account information: Your name, email address, and profile details when you create an account. If you sign up using Google or Apple, we receive the basic profile information those services share (typically your name and email).
  • Spending and budget data: The transactions, spending amounts, daily budget numbers, and spending jar allocations (Food, Coffee, Transit, Fun) you enter into the app.
  • Subscription information: If you upgrade to Daily Drip Premium, we collect the purchase and subscription details needed to manage your plan.
  • Communications: Any messages you send us through support channels, feedback forms, or email.

Information Collected Automatically

  • Device and usage information: Device type, operating system, app version, language settings, and general usage patterns such as which features you use and how often you open the app.
  • Analytics data: Event data related to how you interact with the app, including screens viewed, buttons tapped, session duration, and feature engagement.
  • Log data: IP address, access times, and error logs generated when you use the Service.
  • Cookies and similar technologies: On our website (daily-drip.app), we use cookies, pixels, and similar tracking technologies. See Section 5 for details.

Information from Third Parties

  • Authentication providers: When you sign in with Google or Apple, we receive basic profile data (name and email) from those services, as authorized by you.
  • Subscription platforms: RevenueCat provides us with purchase validation and subscription status data from Apple App Store and Google Play Store.

2. How We Use Your Information

  • Provide and operate the Service: Calculate your daily spending number, track transactions, manage spending jars, power quests, XP, streaks, and other gamification features.
  • Manage your account and subscription: Authenticate your identity, process subscription purchases, and maintain your account.
  • Send transactional communications: Deliver waitlist confirmations, welcome emails, account notifications, and service-related messages.
  • Improve the Service: Analyze usage patterns and app performance to fix bugs, develop new features, and make Daily Drip better.
  • Marketing and advertising: With your consent, measure the effectiveness of our advertising campaigns and show you relevant ads on other platforms.
  • Ensure security and prevent fraud: Monitor for suspicious activity and protect both you and the Service.
  • Comply with legal obligations: Meet applicable legal, regulatory, and tax requirements.

3. Third-Party Services

We work with the following third-party services to operate Daily Drip. Each has its own privacy policy governing how it handles data:

  • Firebase (Google): User authentication (email, Google, and Apple sign-in), cloud database storage (Firestore), and serverless backend functions. Firebase Privacy Information.
  • PostHog: Product analytics, including tracking user behavior, feature usage, and session data within the app and website. PostHog Privacy Policy.
  • RevenueCat: In-app subscription and purchase management. Processes purchase receipts and subscription status from Apple and Google. RevenueCat Privacy Policy.
  • Google Tag Manager: Manages and deploys marketing and analytics tags on our website (container ID: GTM-MFPPJPCS). GTM itself does not collect personal data, but it loads the tags that do. Google Privacy Policy.
  • Google Analytics: Website analytics loaded via Google Tag Manager, helping us understand traffic and visitor behavior. Google Privacy Policy.
  • Meta Pixel (Facebook): Ad attribution and marketing campaign measurement on our website, loaded via Google Tag Manager. Meta Privacy Policy.
  • Resend: Transactional email delivery including waitlist confirmations and welcome messages. Resend Privacy Policy.

4. Data Sharing and Disclosure

We do not sell your personal information. We share data only in these circumstances:

  • Service providers: We share data with the third-party services listed in Section 3 to operate, maintain, and improve Daily Drip.
  • Legal requirements: We may disclose information if required by law, regulation, legal process, or enforceable government request.
  • Safety and rights: We may share information to protect the safety of our users, enforce our terms, or protect our legal rights.
  • Business transfers: If Symph Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
  • With your consent: We may share information for other purposes when you give us explicit consent to do so.

5. Cookies and Tracking Technologies

What we use

  • Essential cookies: Required for basic website functionality such as remembering your theme preference (light or dark mode). These cannot be disabled.
  • Analytics cookies: Google Analytics cookies that help us understand how visitors use our website.
  • Marketing cookies: Meta Pixel and related cookies that help us measure advertising performance and deliver relevant ads on Meta platforms (Facebook, Instagram).

Google Tag Manager and consent

We use Google Tag Manager (container ID: GTM-MFPPJPCS) to manage our analytics and marketing tags. When you visit our website, a cookie consent banner lets you accept or reject non-essential tracking. If you reject marketing and analytics cookies, those tags will not fire and no tracking data will be collected by Google Analytics or Meta Pixel.

How to manage cookies

  • Consent banner: Use the cookie consent banner on our website to accept or reject analytics and marketing cookies at any time.
  • Browser settings: Most browsers let you block or delete cookies through their settings. Blocking essential cookies may affect website functionality.
  • Mobile app: The Daily Drip mobile app uses PostHog for analytics but does not use browser cookies. You can opt out of analytics tracking through the app's settings.

6. Your Privacy Rights

We honor the following rights for all users, regardless of location:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Ask us to correct inaccurate or incomplete information.
  • Deletion: Request deletion of your account and associated personal data. We will delete your data within 30 days, except where law requires retention.
  • Data portability: Request an export of your data in a machine-readable format.
  • Opt out of marketing: Unsubscribe from marketing emails using the link in any marketing message, or by contacting us at privacy@daily-drip.app.
  • Withdraw consent: Where we rely on your consent to process data (such as marketing cookies), you can withdraw it at any time.

To exercise any of these rights, email us at privacy@daily-drip.app. We will respond within 30 days and may need to verify your identity before processing your request.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights:

  • Right to know: Request details about the categories and specific pieces of personal information we have collected about you.
  • Right to delete: Request deletion of your personal information, subject to certain legal exceptions.
  • Right to correct: Request correction of inaccurate personal information.
  • Right to opt out of sale or sharing: Opt out of the "sale" or "sharing" of your personal information as defined under CCPA/CPRA.
  • Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

Do Not Sell or Share My Personal Information

We do not sell your personal information. However, under CCPA/CPRA, certain advertising technologies such as Meta Pixel that share data with third parties for targeted advertising may be considered a "sale" or "sharing" of personal information. You can opt out by:

  • Rejecting marketing cookies through our website's cookie consent banner
  • Emailing privacy@daily-drip.app with the subject line "Do Not Sell or Share My Personal Information"

To submit a CCPA request, contact us at privacy@daily-drip.app. You may designate an authorized agent to make a request on your behalf.

8. Children's Privacy

Daily Drip is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at privacy@daily-drip.app.

9. Data Retention

  • Account and spending data: Retained for as long as your account exists. Deleted within 30 days of an account deletion request, except where retention is required by law.
  • Analytics data: PostHog analytics data is retained for up to 12 months, after which it is aggregated or deleted.
  • Marketing data: Data collected via Google Analytics and Meta Pixel is retained per those platforms' default policies (typically 14 months for Google Analytics).
  • Transactional emails: Email delivery logs are retained by Resend for up to 30 days.

10. Data Security

  • Encryption of data in transit using TLS/SSL
  • Encryption of data at rest in Google Cloud infrastructure
  • Secure authentication via Firebase with support for Google and Apple sign-in
  • Access controls limiting employee access to personal data on a need-to-know basis
  • Regular security reviews of our infrastructure and third-party service configurations

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@daily-drip.app.

11. Email Communications

  • Transactional emails: Account confirmations, waitlist updates, welcome messages, password resets, and subscription receipts. These are required for your account and cannot be opted out of while your account is active.
  • Marketing emails: Product updates, tips, and promotional content. You can unsubscribe at any time using the link in any marketing email or by contacting us at privacy@daily-drip.app.

We comply with the CAN-SPAM Act. All marketing emails include a clear subject line, our company information, and an easy unsubscribe option. We honor unsubscribe requests within 10 business days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify you through the app or by email if the changes are significant. Your continued use of Daily Drip after a policy update means you accept the revised terms.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your data:

Privacy Team

Symph Inc. · privacy@daily-drip.app

Send Email