cyberliver_logo dryjanuary_logo

Dry Days Privacy Policy - Version 2.0

Last updated date: 28 Jul 2025

๐ŸŽฏ Your Data Protection Rights

โš–๏ธ Your Rights Under GDPR and UK Data Protection Law

As a data subject, you have the following rights regarding your personal data:

๐Ÿ” Right of Access (Article 15)

You can request a copy of all personal data we hold about you.

  • ๐Ÿ“ฑ In-App Access: View and export your data directly from the DryDays app settings menu
  • ๐Ÿ“ง Email Request: Contact [email protected] for a comprehensive data report
  • โฑ๏ธ Response Time: Within 30 days (may extend to 60 days for complex requests)
  • ๐Ÿ’ฐ Cost: Free for the first request per year

โœ๏ธ Right to Rectification (Article 16)

Correct inaccurate or incomplete personal data.

  • ๐Ÿ“ฑ Most data can be updated directly in the app
  • ๐Ÿ“ง Email us for data you cannot change yourself
  • โฑ๏ธ Updates processed within 72 hours

๐Ÿ—‘๏ธ Right to Erasure / "Right to be Forgotten" (Article 17)

Request deletion of your personal data when:

  • ๐Ÿšซ Data is no longer necessary for the original purpose
  • โŒ You withdraw consent and there's no other legal basis
  • ๐Ÿ“ฑ In-App Deletion: Delete account and data from app settings
  • ๐Ÿ“ง Email Request: Contact [email protected]
  • โฑ๏ธ Processing Time: Immediate for app deletion, 30 days for complete data erasure
  • ๐Ÿ“‹ Note: Some data may be retained for legal compliance (e.g., medical device safety reporting)

โธ๏ธ Right to Restriction of Processing (Article 18)

Limit how we process your data when:

  • ๐Ÿ” You contest the accuracy of the data
  • โš–๏ธ Processing is unlawful but you don't want erasure
  • ๐Ÿ›ก๏ธ You need the data for legal claims
  • โฑ๏ธ During verification of legitimate grounds for processing

DryDays Privacy Policy - Version 2.0

๐Ÿ” DryDays Privacy Policy ๐Ÿ›ก๏ธ

๐Ÿ“… Last Updated: July 28, 2025 | Version 2.0

๐Ÿ›๏ธ Who We Are and Our Commitment to Privacy

๐Ÿข Data Controller and Service Provider

๐Ÿ›ก๏ธ At DryDays, we are committed to protecting your privacy and ensuring transparent handling of your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use the DryDays app powered by AlcoChangeยฎ technology.

๐Ÿ’ก DryDays is a comprehensive goal-setting and behavior change app that helps users achieve various wellness objectives using evidence-based Digital Behavior Change Techniques (DBCTs). As a Class I Medical Device, DryDays supports general wellness goals while incorporating UKCA Class IIa AlcoChangeยฎ technology - a prescription-only digital therapeutic for alcohol-related liver disease with clinically proven efficacy (57% abstinence rates, 28% reduction in hospital re-admissions).

โš ๏ธ Important Notice for Children

DryDays is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information about a child under 18, please contact us immediately at [email protected].

๐Ÿ“‹ Information We Collect

๐Ÿ“Š Types of Data We Collect

๐Ÿ”น Account Information

  • ๐Ÿ“ง Email address
  • ๐ŸŽ‚ Date of birth (to verify age 18+)
  • ๐Ÿ‘ค Name (first and last)
  • ๐Ÿ” Encrypted password
  • ๐ŸŒ Country/region
  • ๐Ÿ“ฑ Profile photo (optional)

๐Ÿ”น Health and Wellness Data

  • ๐ŸŽฏ Goal Tracking: Various wellness objectives (fitness, nutrition, habits, financial, etc.)
  • ๐Ÿบ Alcohol Moderation: Consumption tracking, sobriety milestones (when applicable)
  • ๐Ÿ’ช Fitness Data: Exercise routines, activity levels, workout progress
  • ๐ŸŽ Nutrition Tracking: Food intake, dietary goals, meal planning
  • ๐Ÿ’ฐ Financial Goals: Spending patterns, savings targets, budget tracking
  • ๐Ÿ“… Habit Formation: Daily routines, streak tracking, behavior patterns
  • โš–๏ธ Biometric Data: Weight, height, body measurements (optional)
  • ๐Ÿ˜ด Lifestyle Factors: Sleep patterns, stress levels, mood tracking
  • ๐ŸŽฏ Personal Goals: Custom objectives, milestones, achievement data
  • ๐Ÿ’ญ Progress Notes: Personal reflections, journal entries, insights
  • ๐Ÿ† Achievement Data: Badges, rewards, milestone celebrations

๐Ÿ”น Technical Data

  • ๐Ÿ“ฑ Device type, model, and operating system
  • ๐ŸŒ IP address and general location
  • ๐Ÿ“Š App usage analytics and crash reports
  • ๐Ÿ”ข Unique device identifier (UDID)
  • ๐Ÿ”‹ Battery level and performance data
  • ๐Ÿ“ก Network connection type

๐Ÿ”น Location Data (Optional)

  • ๐Ÿ“ Precise location (only with explicit consent)
  • ๐Ÿ—บ๏ธ General location (city/region level)
  • ๐Ÿ  Location-based triggers and insights

โš–๏ธ Legal Basis for Processing Your Data

๐ŸŽฏ How We Use Your Information

๐Ÿ”ง Core App Functionality:

  • ๐ŸŽฏ Providing personalized goal-setting and tracking across multiple life areas
  • ๐Ÿ“Š Generating progress insights and behavior change recommendations
  • ๐Ÿ† Tracking achievements, milestones, and habit formation
  • ๐Ÿ“ˆ Creating detailed analytics and trend reports
  • ๐Ÿ”” Sending motivational notifications, reminders, and behavioral interventions
  • ๐Ÿ’ฌ Enabling community features, peer support, and coaching
  • ๐Ÿง  Delivering evidence-based Digital Behavior Change Techniques (DBCTs)
  • ๐ŸŽจ Personalizing user experience based on goal types and preferences

๐Ÿ“ˆ Service Improvement:

  • ๐Ÿ” Analyzing goal completion patterns to enhance success rates
  • ๐Ÿ› Identifying and fixing technical issues across different goal categories
  • โšก Optimizing app performance for various tracking features
  • ๐ŸŽจ Developing new goal types and behavior change interventions
  • ๐Ÿ›ก๏ธ Improving security and fraud prevention for user data
  • ๐Ÿ”ฌ Researching behavior change effectiveness (anonymized data)

๐Ÿ“บ Advertising (Free Version):

  • ๐ŸŽฏ Displaying relevant wellness, lifestyle, and goal-achievement advertisements
  • ๐Ÿ“Š Measuring ad effectiveness using anonymized behavioral data
  • ๐Ÿšซ Respecting opt-out preferences for personalized advertising
  • ๐Ÿ’Ž Providing completely ad-free experience for premium subscribers

๐Ÿค How We Share Your Information

๐Ÿ›ก๏ธ WE NEVER SELL YOUR PERSONAL DATA

๐Ÿ‘ฅ We may share your information with:

๐Ÿ”ง Service Providers

  • โ˜๏ธ Cloud hosting and storage providers
  • ๐Ÿ“Š Analytics and performance monitoring services
  • ๐Ÿ’ณ Payment processors (for premium subscriptions)
  • ๐Ÿ“ง Email and notification services
  • ๐Ÿ›ก๏ธ Security and fraud prevention services

๐Ÿ“š Research Partners (Anonymized Data Only)

  • ๐ŸŽ“ Academic institutions studying addiction recovery
  • ๐Ÿฅ Healthcare organizations (with IRB approval)
  • ๐Ÿ“ˆ Public health research initiatives
  • ๐Ÿ”ฌ Clinical trial organizations (separate consent required)

โš–๏ธ Legal Requirements

  • ๐Ÿ›๏ธ Government authorities when legally required
  • ๐Ÿ‘ฎ Law enforcement for valid legal requests
  • โš–๏ธ Courts for compliance with legal proceedings
  • ๐Ÿ›ก๏ธ Protection of rights, property, or safety

๐ŸŒ International Data Transfers

๐ŸŒ Cross-Border Data Protection

DryDays operates globally and may transfer your data to countries outside your residence. We ensure adequate protection through:

  • ๐Ÿ‡ช๐Ÿ‡บ EU Adequacy Decisions for transfers to approved countries
  • ๐Ÿ“„ Standard Contractual Clauses (SCCs) approved by EU Commission
  • ๐Ÿข Binding Corporate Rules for intra-group transfers
  • ๐Ÿ›ก๏ธ Additional safeguards including encryption and access controls
  • โš–๏ธ Legal compliance with destination country privacy laws

Primary Data Processing Locations:

  • ๐Ÿ‡ฌ๐Ÿ‡ง United Kingdom (Primary)
  • ๐Ÿ‡ช๐Ÿ‡บ European Union (GDPR compliant)
  • ๐Ÿ‡บ๐Ÿ‡ธ United States (with adequate safeguards)
  • ๐Ÿ‡จ๐Ÿ‡ฆ Canada (with adequate safeguards)

๐Ÿ•’ Data Retention

โฐ How Long We Keep Your Data

Data Type Retention Period Rationale
๐Ÿ” Account Information Until account deletion + 30 days Account management and legal compliance
๐ŸŽฏ Goal & Wellness Data Until deletion request + 90 days Continuity of behavior change and user insights
๐Ÿ“Š Analytics Data 26 months (anonymized) App improvement and trend analysis
๐Ÿ’ณ Payment Data 7 years (encrypted) Tax and regulatory compliance
๐Ÿ›ก๏ธ Security Logs 2 years Security monitoring and fraud prevention
๐Ÿ“ง Marketing Consent Until withdrawn + 1 year Consent record keeping

๐Ÿ—‘๏ธ Data Deletion: When retention periods expire, we securely delete or anonymize your data using industry-standard methods.

๐Ÿ”’ Data Security

๐Ÿ›ก๏ธ We protect your data using multiple security layers:

๐Ÿ” Technical Safeguards

  • ๐Ÿ”’ Encryption: AES-256 encryption for data at rest and in transit
  • ๐Ÿ”‘ Access Controls: Multi-factor authentication and role-based access
  • ๐Ÿ” Monitoring: 24/7 security monitoring and threat detection
  • ๐Ÿšง Firewalls: Advanced network security and intrusion prevention
  • ๐Ÿ”„ Backups: Encrypted, geographically distributed backups

๐Ÿ‘ฅ Organizational Safeguards

  • ๐ŸŽ“ Training: Regular security awareness training for all staff
  • ๐Ÿ“‹ Policies: Comprehensive data protection and security policies
  • ๐Ÿ” Audits: Regular security audits and penetration testing
  • ๐Ÿ“ž Incident Response: 24-hour breach response procedures
  • โœ… Compliance: ISO 27001 and SOC 2 Type II certified

๐ŸŽฏ Your Privacy Rights

โš–๏ธ Your Legal Rights Under GDPR and Other Privacy Laws

๐Ÿ” Right to Access

Request a copy of all personal data we hold about you, including data sources and processing purposes.

โœ๏ธ Right to Rectification

Correct inaccurate or incomplete personal data. Most data can be updated directly in the app.

๐Ÿ—‘๏ธ Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data when it's no longer necessary or you withdraw consent.

โธ๏ธ Right to Restriction

Limit how we process your data in specific circumstances, such as while verifying accuracy.

๐Ÿ“ค Right to Data Portability

Receive your data in a structured, machine-readable format or transfer it to another service.

๐Ÿšซ Right to Object

Object to processing based on legitimate interests, including direct marketing.

๐Ÿ”„ Right to Withdraw Consent

Withdraw consent for any processing activities that require your consent.

๐Ÿ‘ฅ Right to Human Review

Request human review of any automated decision-making that significantly affects you.

โฑ๏ธ Response Timeframes

  • ๐Ÿ‡ช๐Ÿ‡บ GDPR: 30 days (extendable to 60 days for complex requests)
  • ๐Ÿ‡บ๐Ÿ‡ธ CCPA: 45 days (extendable to 90 days)
  • ๐Ÿ‡จ๐Ÿ‡ฆ PIPEDA: 30 days
  • ๐Ÿ‡ฌ๐Ÿ‡ง UK GDPR: 30 days (extendable to 60 days)

๐Ÿช Cookies and Tracking Technologies

๐Ÿช We use limited tracking technologies:

๐Ÿ“ฑ In-App Analytics

  • ๐Ÿ“Š Usage analytics to improve app functionality
  • ๐Ÿ› Crash reporting for bug fixes
  • โšก Performance monitoring for optimization
  • ๐ŸŽฏ Feature usage tracking for development priorities

๐Ÿ“บ Advertising (Free Version Only)

  • ๐ŸŽฏ Personalized ad targeting (opt-out available)
  • ๐Ÿ“ˆ Ad performance measurement
  • ๐Ÿšซ No third-party advertising cookies in premium version

๐Ÿ”ง Managing Tracking Preferences

  • โš™๏ธ Access tracking settings in the app
  • ๐Ÿ“ฑ Use device-level privacy controls
  • ๐Ÿšซ Opt out of personalized advertising
  • ๐Ÿ’Ž Upgrade to premium for ad-free experience

๐ŸŒ Regional Privacy Information

๐Ÿ—บ๏ธ Specific Rights by Region

๐Ÿ‡ช๐Ÿ‡บ European Union (GDPR)

  • ๐Ÿ›๏ธ Contact your local Data Protection Authority
  • โš–๏ธ Right to lodge complaints with supervisory authorities
  • ๐Ÿ” Enhanced transparency and consent requirements
  • ๐Ÿ’ฐ Financial penalties for non-compliance

๐Ÿ‡บ๐Ÿ‡ธ United States

  • ๐ŸŒด California (CCPA/CPRA): Right to know, delete, opt-out of sale
  • ๐Ÿ›๏ธ Virginia (VCDPA): Similar rights to GDPR
  • ๐Ÿ”๏ธ Colorado (CPA): Consumer privacy rights
  • ๐Ÿ‚ Connecticut (CTDPA): Data protection rights

๐Ÿ‡จ๐Ÿ‡ฆ Canada (PIPEDA)

  • ๐Ÿ“ง Right to complain to Privacy Commissioner
  • ๐Ÿ” Right to access and correct personal information
  • โš–๏ธ Consent requirements for collection and use

๐Ÿ‡ฆ๐Ÿ‡บ Australia (Privacy Act)

  • ๐Ÿ›๏ธ Complaints to Office of the Australian Information Commissioner
  • ๐Ÿ“‹ Australian Privacy Principles compliance
  • ๐Ÿ” Right to access and correct personal information

๐Ÿšจ Data Breach Notification

๐Ÿšจ Our Breach Response Commitment

In the unlikely event of a data breach affecting your personal information:

  • ๐Ÿ“ง Within 72 hours: We'll notify relevant supervisory authorities
  • ๐Ÿ“ฑ Without undue delay: We'll inform affected users via app notification and email
  • ๐Ÿ” Full transparency: Details about what data was affected and our response actions
  • ๐Ÿ›ก๏ธ Immediate action: Steps to secure systems and prevent further unauthorized access
  • ๐Ÿ’ฌ Support: Dedicated support team to address your concerns

๐Ÿ‘ถ Age Verification and Child Protection

๐Ÿ”ž Strict Age Requirements:

  • ๐Ÿ“… Age verification required during registration
  • ๐Ÿšซ Automatic rejection of users under 18
  • ๐Ÿ›ก๏ธ Additional protections for users 18-21 in some jurisdictions
  • ๐Ÿ‘ฅ Parental notification systems where legally required
  • ๐Ÿ” Regular audits to ensure compliance

๐Ÿ”„ Privacy Policy Updates

๐Ÿ“ How we handle policy changes:

  • ๐Ÿ“… 30-day notice for material changes via email and in-app notification
  • ๐Ÿ“ฑ Version control with clear change logs
  • โฐ Historical versions available upon request
  • โœ… Re-consent required for significant changes affecting your rights
  • ๐Ÿ”” Multiple channels for important updates (email, SMS, push notifications)

๐Ÿ“ž Contact Us

๐Ÿ’ฌ Privacy and Data Protection Contacts

๐Ÿ” Privacy Team:
๐Ÿ“ง Email: [email protected]
โฐ Privacy inquiries responded to within 24 hours

๐Ÿ’ฌ General Support:
๐Ÿ“ง Email: [email protected]
โฐ Hours: Monday-Friday, 9 AM - 6 PM GMT

๐ŸŒ Website: drydays.me/privacy

๐Ÿ“‹ Summary of Key Privacy Points

  • ๐Ÿ›ก๏ธ Your data is never sold - we're committed to your privacy
  • ๐Ÿ” Bank-level security with AES-256 encryption
  • โš–๏ธ Full compliance with GDPR, CCPA, and other privacy laws
  • ๐ŸŽฏ Transparent processing - you always know how your data is used
  • ๐Ÿšซ Easy opt-out from any data processing activities
  • ๐Ÿ“ค Data portability - take your goal data with you anytime
  • ๐Ÿ’ฌ Responsive support - we answer privacy questions within 24 hours
  • ๐Ÿ” Regular audits - third-party security and privacy assessments
  • ๐ŸŽฏ Multi-goal support - comprehensive behavior change tracking
  • ๐Ÿ”ฌ Evidence-based - built on validated behavior change research
ZANEC Inc. operates DryDays as the service provider, while CyberLiver Limited (Company Registration: 08052630) acts as the data controller for personal data processing under GDPR and other applicable privacy laws.

CyberLiver Limited
๐Ÿ“ First Floor, Burnells, 5 Garland Road
Stanmore, Middlesex, HA7 1NR, United Kingdom

Data Protection Officer: [email protected]

This policy was last updated on the 28th of July 2025. We may update it at any time.

Please find the previous version of this with last updated date below