Privacy Policy

1. Data controller

The controller responsible for personal information under this policy is Tapas Maker, which operates the Service. The Service is provided through the Be My Day mobile app and information made available at https://bemyday.app. We use Supabase (hosted database, authentication, file storage, and real-time features) as our primary backend infrastructure.

2. Information we collect

We collect information you provide directly, information generated when you use the Service, and limited technical data from your device as described below.

• Account and authentication. When you sign in with Apple, Google, or Kakao, we receive identifiers and session data processed by Supabase Auth (for example, user ID, email when provided by the provider, and sign-in provider type). Apple sign-in may share name fields on first sign-in only, as allowed by Apple.
• Profile. Nickname, optional profile photo (stored in our avatars storage), email when linked to your account, timezone for week boundaries and scheduling, sign-in provider label, notification preferences (such as whether you want reminders or alerts for new posts, comments, or likes), and account timestamps.
• Social and group features. Group memberships, group names, weekday assignment, streaks and related metadata, invitations (including invite tokens and optional metadata used for sharing links), posts (photos stored in our posts storage, captions, week index), likes on posts and comments, and comments on posts.
• Push notifications. If you grant permission, we register a device token (Firebase Cloud Messaging) with your account and store the token and platform (e.g. iOS or Android) so we can send push notifications. Local notifications may also be scheduled on your device (for example, daily reminders) using your device timezone where applicable.
• Device permissions. The app may request access to your photo library when you choose photos to post, and notification permission for alerts. We do not read your entire photo library beyond what you select, except as needed by the operating system to show the picker.
• Real-time and logs. We use WebSocket subscriptions to keep the app in sync. Our providers may generate server and security logs (for example access logs, error logs) in line with their standard practices.

3. How we use information

• To create and maintain your account and profile.
• To provide core features: weekday-based groups with friends, photo posts, comments, likes, invitations, streaks, and related in-app activity.
• To send push or local notifications according to your settings and device permissions.
• To secure the Service, prevent abuse, and troubleshoot issues.
• To comply with legal obligations when required.

4. Legal bases (where applicable)

Depending on your region, we rely on performance of a contract, legitimate interests (such as security and product improvement), and consent where required (for example, notifications or optional processing). For users in the Republic of Korea, we process personal information in accordance with the Personal Information Protection Act and other applicable laws.

5. Sharing and processors

We do not sell your personal information. We share data with service providers who help us run the Service, including:

• Supabase for authentication, database, storage, edge functions, and real-time delivery.
• Google Firebase (Cloud Messaging) for delivering push notifications to your device.
• Sign-in providers (Apple, Google, Kakao) for authentication according to their terms and privacy policies.

These providers may process data in countries where they operate. We use contractual and technical safeguards appropriate to the nature of the data.

6. Retention

We keep information for as long as your account is active and as needed to provide the Service. If you delete your account, we run an automated deletion flow that removes or anonymizes your data in line with our backend configuration (including profile-related data, tokens, and stored content tied to your account). Some information may persist for a short period in backups or logs before rotation.

7. Security

We use industry-standard measures such as encrypted transport (HTTPS), access controls including row-level security on the database, and limited access to production systems. No method of transmission or storage is completely secure.

8. Your choices

• You can update profile and notification-related settings in the app where available.
• You can revoke notification or photo permissions in your device settings; some features may not work without them.
• You can request account deletion from within the app, subject to completion of our deletion process.
• Users in the Republic of Korea may have rights under the Personal Information Protection Act (including access, correction, deletion, and suspension of processing in certain cases). Contact us at the email below to exercise those rights.

9. Children's privacy

The Service is not directed at children under 14 years of age without parental consent where required under the Republic of Korea law. If you believe we have collected such information, please contact us so we can delete it.

10. Changes

We may update this policy from time to time. We will post the updated version on bemyday.app/privacy and, where appropriate, notify you through the app or other reasonable means.

11. Contact

For questions about this Privacy Policy or our data practices:

• Operator: Tapas Maker
• Contact person: Junwoo Lee
• Email: tapas.maker@gmail.com
• Website: https://bemyday.app