Privacy Policy for DailyMax
Last Updated & Effective Date: October 5, 2026
DailyMax ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy details how DailyMax accesses, processes, and protects your information when you use our mobile application and website.
DailyMax is engineered under a local-first philosophy. Your app rules, screen time records, physical exercise counts, personal commitments, and habit logs are processed and stored strictly on your local device SQLite/Room database. We do not maintain user tracking servers, and we do not transmit your habit history to external cloud endpoints.
2. Sensitive Android Permissions & API Disclosures
To perform habit interception and exercise verification, DailyMax requires specific Android platform capabilities. Each permission is restricted to its explicit purpose:
BIND_ACCESSIBILITY_SERVICE)Designated Category: Digital Wellbeing and Screen Time Management.
Specific Purpose: DailyMax uses the Android Accessibility Service solely to detect when you launch an application configured under your rules (AccessibilityEvent.TYPE_WINDOW_STATE_CHANGED). When your configured daily free allowance expires, the service displays the physical movement challenge screen.
- DailyMax does not read on-screen text, message bodies, passwords, personal data, or account details (
canRetrieveWindowContent = false). - DailyMax does not inspect window hierarchies or UI structures.
- DailyMax does not monitor keystrokes, record audio, or log user inputs.
- DailyMax does not perform automated gestures or alter device system settings.
Affirmative Consent: You must explicitly activate this permission within Android Accessibility Settings after reviewing our in-app prominent disclosure. You can revoke it at any time via Android System Settings.
android.permission.CAMERA)DailyMax requests camera access strictly for two distinct, transparent purposes:
- Real-time Movement Toll Verification: On-device body pose estimation for movement challenges (squats, planks, push-ups, jumping jacks). Camera frames are evaluated frame-by-frame entirely in volatile device memory and immediately discarded. No video streams or exercise recordings are saved or uploaded.
- Character Face Personalization (Optional, User-Initiated): Allows you to optionally capture a personal photo to customize your "Future You" or "Custom Guide" avatar.
- Saved strictly to the app's private, sandboxed internal storage (
context.filesDir/avatars/). - Never transmitted to any external server or third party.
- Zero broad media storage permissions (
READ_MEDIA_IMAGES/READ_EXTERNAL_STORAGE) required; image selection uses Android's privacy-preserving system Photo Picker (PickVisualMedia). - You can replace or delete your avatar photo at any time from character customization settings.
- Saved strictly to the app's private, sandboxed internal storage (
ACTIVITY_RECOGNITION & Sensor.TYPE_STEP_COUNTER)Specific Purpose: Reads real-time hardware pedometer increments during an active step challenge.
Usage Lifecycle: Sensor listeners operate exclusively while a challenge is actively in progress. DailyMax does not access GPS or perform background location tracking.
FOREGROUND_SERVICE_HEALTH)Specific Purpose: Runs a visible foreground service with an active, user-visible notification to reliably count steps while you complete your physical toll. The notification terminates immediately once your target is reached.
PACKAGE_USAGE_STATS)Specific Purpose: DailyMax queries the local Android UsageStatsManager to determine the minutes you have spent on controlled apps during the current calendar day, enforcing your configured free daily allowances.
3. Google Play Data Safety Summary
The following table summarizes DailyMax's Google Play Console Data Safety declaration:
| Data Type | Collected? | Shared? | Processing Mode | Declared Purpose |
|---|---|---|---|---|
| Physical Activity / Health | Yes (Local) | No | On-Device | Toll Step Tracking & Movement Challenges |
| App Activity / Usage | Yes (Local) | No | On-Device | Digital Wellbeing Screen Time Limits |
| Photos & Videos / Camera | Ephemeral / Local only | No | On-Device (Never leaves device) | Movement Pose Estimation & Avatar Personalization |
| Device Identifiers (GAID) | Yes (if ads active) | Yes (AdMob) | Encrypted in transit | Advertising / Fraud Prevention |
4. Advertising & Third-Party SDKs
DailyMax may display advertisements served by Google AdMob. Google AdMob may collect and process:
- IP address (for general geolocation).
- Anonymous advertising identifiers (Google Advertising ID / GAID).
- Performance metrics and diagnostic crash logs.
Data handled by AdMob is governed by the Google Privacy Policy.
5. Data Retention, Storage & Account Deletion Compliance
- Local Storage: All app rules, challenge statistics, and streak counts reside locally within the App's private SQLite/Room database.
- User-Initiated In-App Deletion: You can erase all stored data at any time by navigating to:
DailyMax Settings -> Reset All Rules & Data. - Uninstalling the App: Uninstalling DailyMax permanently deletes all local databases, preferences, and custom avatar assets from your device.
- Web Data & Account Deletion Requests (Google Play Requirement): Users can request account and data deletion at any time without needing the app installed. To initiate deletion, send an email to [email protected] with the subject line "Account and Data Deletion Request". Requests are processed within 30 days.
5. Children's Privacy
DailyMax is not directed toward children under 13 years of age. We do not knowingly collect personal identifiable information from children.
6. Contact Information
If you have questions regarding this Privacy Policy or permission implementations, contact: