Daisy Privacy Policy
Last updated: October 2026
Daisy is a gentle self-love app, a garden with a flower to talk to. We tried to keep this short and human. The short version: your garden, moods and chats live on your phone, we do not sell your data, and we only send your chat messages to a secure server so Daisy can write you a reply.
What stays on your device
Your garden, flowers, watering progress, daily ritual, mood check-ins and their notes, your good things and letters, settings, and what Daisy remembers about you are stored only on your phone, unless you choose to turn on garden protection (see below). By default we keep no copy and our servers never store any of it. On Android we also switch off cloud backup for this data; on iPhone, your own device backup may include app data like any app, protected by Apple under your backup settings.
Protecting your garden (optional backup)
If you tap “protect my garden” in Settings and sign in with Google or Apple, Daisy keeps one private backup of your garden so you can bring it to a new phone: your garden and flowers, chats and the photos you share in them, your journal and its photos and drawings, mood check-ins, what Daisy remembers, and Daisy’s letters with their paintings (never your exact date of birth). The backup lives in Google Firestore in the United States and only your signed-in account can read it. It refreshes quietly as you use the app and you can delete it, or delete the backup and the sign-in together, anytime in Settings. If you never sign in, nothing is ever uploaded. Signing in shares your account email with us solely so the backup is recoverable; we use it for nothing else.
The bloom quiz on this website
If you take the bloom quiz here, your answers are scored in your browser and kept only in your browser's session so your result page can show you your three roads. They are not sent to us or to anyone.
Links to Daisy from social media
When you tap one of our links to Daisy (for example from our Instagram, TikTok, Threads or Facebook posts, or our ads on Facebook and Instagram), we count the tap so we can see which posts help people find Daisy: which link and post it came from, whether you're on iPhone or Android, which app you tapped it in, your phone's time zone and language, and a random id kept in your browser so repeat taps aren't counted twice. This goes to our Firebase database and to Google Analytics. We don't keep your IP address (Google uses it once to estimate a rough location, then discards it), it isn't linked to your name, and it isn't used for advertising. The link then sends you straight to the App Store or Google Play with a campaign tag, which tells Apple or Google which link you came from.
Our guides on this website
We count how many times each guide page on this website is opened, per day, so we can see which guides help people. That count is all we keep: no cookies, no id, no IP address, and nothing that identifies you. If your browser sends Do Not Track or Global Privacy Control, we don't count it at all. A guide's “get Daisy” buttons are links to Daisy like the ones above.
Installs from our ads on iPhone
If you install Daisy from one of our ads on iPhone, Apple's own anonymous install count (SKAdNetwork) later tells the ad network (Meta) only that an install happened, a trial started or a subscription started. That is all it carries: no device ID and nothing that identifies you. There is no Meta code in Daisy, Daisy itself sends Meta nothing, and Daisy never asks to track you. Whether a trial or subscription started is only passed on for adults, and never when usage analytics are turned off.
How Daisy writes to you
So Daisy can reply, our secure server (a Firebase Cloud Function) passes the relevant pieces to a third-party AI through OpenRouter and streams her words back. That happens when you send her a message (your recent messages, what she remembers, and your recent mood check-ins), when she writes her morning letter, when she follows up on your day in the evening, when you open your reflections page (recent mood labels and messages, to write your insights), when she writes your affirmations, and once a day to tidy what she remembers. None of it is kept on our servers after the reply is written, it is used only to write back to you, and your exact date of birth never leaves your phone (the optional backup deliberately leaves it out too).
Please do not share information you would not want processed this way. Daisy is an AI and a supportive guide, not a medical, legal, or crisis service.
Photos you share
If you share a photo with Daisy (a screenshot or a picture, a Daisy Plus feature), the original stays on your device (and in your backup, if you turned one on). To understand it, the image is sent once to a third-party AI vision service through OpenRouter, which returns a text description so Daisy can respond. The image is not kept on our servers after it is described, and only the description (not the image) becomes part of what Daisy remembers. Please avoid sharing images with other people's private information.
Voice input
If you tap the microphone in the chat or on a walk, Daisy asks for microphone access and uses your phone's own speech recognition (Apple's or Google's) to turn your words into text. That audio is handled by Apple or Google under their terms; Daisy never records it, keeps it, or sends it to us. Only the text, once you send it, reaches Daisy like anything you type.
Keeping Daisy safe
We use Firebase App Check to confirm requests come from the genuine Daisy app, plus a random anonymous install id and gentle daily limits to prevent abuse. Neither is linked to your identity.
Crash reports
If the app crashes, Firebase Crashlytics sends us a technical crash report (device model, what the code was doing) so we can fix it. Crash reports never include your chats, moods, notes, or what Daisy remembers.
Anonymous usage analytics
We use Firebase Analytics to understand basic, anonymous usage so we can improve Daisy, such as how many people finish setup, where they heard about Daisy, and whether they start a subscription. We never send the content of your chats, moods, notes, or what Daisy remembers.
Purchases
Daisy Plus subscriptions are processed by Apple or Google and managed through RevenueCat. We receive your subscription status (active or not), never your card details. Apple, Google and RevenueCat handle payment data under their own privacy policies.
Notifications
If you allow them, Daisy schedules gentle reminders on your phone, and the words of every reminder are written there. So they arrive on time, your phone may also send our server a notification token (a random code for your device), your reminder times and your time zone. The server keeps these only to wake your phone at those times, and removes them when the token stops working.
Age
Daisy is for ages 13 and up, and talking with Daisy (anything written by AI) is for adults 18 and over. Before the first conversation you confirm you are 18 or older. If you tell the app you are under 18, it asks only for your birth month and year, keeps them on your phone (and in your backup, if you turn one on) so it knows when the AI features open, sends nothing you write to the AI, and turns usage analytics off. If you are under 13, the app points you to free helplines instead.
No ads, no selling your data
We do not show ads and we do not sell or rent your personal information to anyone.
How long we keep things (data retention)
On your phone: everything Daisy stores on your device stays there until you clear it in the app or delete the app. We hold no copy of it.
The optional backup: kept only while garden protection is switched on. Each refresh replaces the words of the last one; pictures already backed up stay in it until you delete the backup. Delete it in Settings (or by emailing us) and all of it, words and pictures, is removed from our servers straight away.
Messages sent so Daisy can reply: processed and then discarded. Our servers do not retain your messages, your photos, or Daisy's replies after her reply is written.
Crash reports are kept by Google Firebase for up to 90 days and anonymous usage statistics for up to 14 months, then deleted automatically. Your subscription status is kept by RevenueCat for as long as your subscription needs managing. If you email us, we keep the email only as long as it takes to help you.
Your choices
You can clear what Daisy remembers anytime in Settings. Deleting the app removes the data stored on your device; if you turned on garden protection, delete the cloud backup in Settings first (or afterwards by signing back in on any device, or by emailing us). For any privacy question or request, email us at daisy@everwell.ltd.
Your rights
Depending on where you live (for example California or the European Union), you may have rights to see, correct, or delete your personal information, or to object to some uses. Because almost everything lives on your own phone, most of this is already in your hands; for anything held by us (an optional backup, an email you sent), write to daisy@everwell.ltd and we will help.
Changes
If this policy changes, we will update the date above and post the new version here.
AI providers
Daisy's words come from DeepSeek's AI model, and her paintings from an image model, reached through OpenRouter. Depending on the task, the actual processing runs on infrastructure hosts such as DeepSeek, Fireworks, Together, or DeepInfra, under their own privacy terms.
questions? daisy@everwell.ltd