Privacy Policy

CheerDay ("we", "our", "the app") is a birthday reminder app. We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it.

Data	Purpose
Phone number	Account authentication via SMS one-time password (OTP)
Contact names	Core functionality: storing and displaying your contacts' names
Contact birthdays	Core functionality: calculating upcoming birthdays and sending reminders
Contact phone numbers	Optional: enabling quick WhatsApp messaging to wish happy birthday
FCM device token	Delivering push notifications for birthday reminders
Crash reports	Identifying and fixing app bugs (via Firebase Crashlytics)
User feedback	Optional: only collected when you choose to submit feedback

We do not collect location data, browsing history, advertising identifiers, or any data beyond what is listed above.

• Authentication: Your phone number is used solely to verify your identity via SMS OTP. We do not use it for marketing or share it with third parties.
• Birthday reminders: Contact names and birthdays are used to show you upcoming birthdays and send you push notification reminders.
• Sync across devices: If you create an account, your contact data is encrypted and synced to our servers so you can access it from multiple devices.
• Crash reports: Automatically collected crash data helps us identify and fix bugs. These reports do not contain personal contact information.

• Local storage: Your contacts are stored locally on your device in an encrypted SQLite database.
• Cloud storage: If you sync your data, it is stored in AWS DynamoDB and S3 with encryption at rest (AES-256).
• In transit: All communications between the app and our servers use SSL/TLS encryption.
• Authentication tokens: Managed by AWS Cognito with industry-standard security practices.
• Access control: Your cloud data is accessible only with your authenticated credentials. No CheerDay employee can view your contact details.

We use the following third-party services to operate the app:

Service	Provider	Purpose
AWS Cognito	Amazon Web Services	User authentication (SMS OTP)
AWS SNS	Amazon Web Services	Sending SMS verification codes
AWS DynamoDB	Amazon Web Services	Storing synced contact data
AWS S3	Amazon Web Services	Storing data exports and backups
Firebase Cloud Messaging	Google	Push notifications for birthday reminders
Firebase Crashlytics	Google	Crash reporting and diagnostics

These services have their own privacy policies. We encourage you to review them. We do not sell, rent, or share your personal data with any other third parties.

• Active accounts: Your data is retained as long as your account is active.
• Account deletion: When you delete your account, all your data (contacts, phone number, device tokens) is permanently removed from our servers within 30 days.
• Local data: Data stored on your device remains until you uninstall the app or clear app data manually.
• Crash reports: Automatically deleted after 90 days.

You have full control over your data:

• Delete your account: You can delete your account and all associated data from the app's Settings screen. This action is irreversible.
• Disable notifications: You can turn off push notifications at any time from the app's Settings or your device settings.
• Local data control: You can add, edit, or delete any contact directly in the app. Uninstalling the app removes all local data.
• Data portability: You can export your contact list from the app.

CheerDay is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the app. The "Effective" date at the top of this page indicates when the latest version took effect.

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

support@cheerdays.com