Privacy Policy

Effective date: October 14, 2026

"Dayvest" (Human Change) ("we," "us") operates dayvest.app (the "App"). This policy describes how we handle information in connection with the App. We are currently operated directly by Sergey Shneyder; this policy will name a corporate entity once one is formed for U.S. operations.

If you use the App's health-tracking features, please also read our separate Consumer Health Data Privacy Policy, which covers your health data specifically and the rights that apply to it. See also our Terms of Use.

Where your health data lives

Your onboarding answers (age, sex, height, weight, body fat percentage, region, sleep, nutrition, activity, smoking, alcohol, and self-reported stress/social/cognitive/purpose levels) and your daily habit logs are stored only in your browser's local storage, on your own device. We do not keep a copy of this data on any server.

To calculate your health capital, the App sends the entries needed for the calculation over an encrypted connection (HTTPS) to our calculation service. The service computes your result, sends it back to your device, and does not store, log, or retain your entries — nothing is kept after the response. The calculation service runs on infrastructure provided by Supabase in data centers in the United States, acting as our service provider under a data processing agreement; Supabase may not use this data for any other purpose. Like any web service, Supabase keeps standard technical request logs (such as time, IP address, approximate location derived from it, and browser type) for a limited period for security and reliability; these logs do not contain your health entries. The App needs an internet connection to update your score.

The honest trade-off: because this data lives only on your device, if you clear your browser's site data, switch browsers (for example, opening the App inside Telegram's or Instagram's built-in browser instead of Safari/Chrome), switch devices, or lose your device, that data cannot be recovered — we don't have a copy to restore it from. Creating an account only saves your email for signing in; it does not currently back up your onboarding answers or daily log. If this matters to you, avoid clearing site data and be mindful of which app or browser you're using.

What we do collect

If you create an account, we collect the email address and password you provide, handled by our authentication provider (Supabase), so you can sign in. We do not use this email for marketing without your consent, and we never sell it.

If you reserve a Founding Member spot or sign up for the weekly reminder, we store your email address in our database (Supabase, United States), together with the language you use and which page you came from. No health data is attached to it. We use it only for your reservation, to let you know when payments open, and — if you signed up for it — to send one reminder email a week. You can unsubscribe in the App (Settings → Weekly reminder) or by writing to support@dayvest.app; to cancel a reservation, write to the same address.

We use self-hosted analytics (Umami), running on our own server, to count anonymous usage events — for example, that someone reached a given onboarding step. This does not include the content of your health answers, does not use third-party tracking cookies, and is not linked to your name or email. To understand whether people come back to the App, a random anonymous identifier is created on your device; it contains nothing about, and is not linked to, your name, email or answers, and it changes if you reset the App.

If you email us for support, billing, or feedback, we use your message only to respond to you.

We do not collect precise location data, and we do not currently collect payment information, since the App does not yet process payments.

Who we share information with

We do not sell, rent, or share your personal information with advertisers, data brokers, or any third party for marketing purposes. We use a small number of service providers strictly to operate the App: Supabase (authentication — holds only your email/password if you create an account; and our calculation service — processes your health entries only for the moment needed to calculate your score and keeps no copy), DigitalOcean (website hosting — does not receive your health data), and our own self-hosted Umami installation (anonymous analytics). We may disclose information if required by law, or to protect the rights, safety, or property of our users or the public.

Data security and breach notification

Your health data is stored on your device, so your device's own security is your best protection — we recommend not using the App on a shared or public device. Entries sent for calculation travel only over encrypted connections and are not stored on our side. For the limited data we hold on our servers, we take reasonable technical measures to protect it. If we are ever required by law to report a breach of unsecured personal health information, we will notify affected individuals without unreasonable delay and no later than 60 days after discovery, and notify the Federal Trade Commission within the timeframe its Health Breach Notification Rule requires.

Your rights

Depending on where you live, you may have rights to know, access, correct, delete, and opt out of the sale or sharing of your information (we do not sell or share it, so there is nothing to opt out of) — including rights available under the CCPA/CPRA and other U.S. state privacy laws. Because most of your data lives only on your device, you can view or delete it yourself at any time in the App or by clearing your browser's site data for dayvest.app. To request deletion of your account (email/password) or to ask any question about your data, contact us at support@dayvest.app. We will respond within 45 days.

Children's privacy

The App is not directed to, and we do not knowingly collect information from, anyone under 18 years old. If we learn that someone under 18 has created an account, we will delete it.

Changes

We'll update this page as the product evolves, and will update the effective date above when we do. Material changes affecting how we handle health data will be highlighted, not just silently dated.

Contact: support@dayvest.app