The short version. Daycut reads what you play in your own music service, turns it into one
daily drop, and shows it to the friends you added. Nothing is sold, nothing is shared with
advertisers, and you can delete everything at any time.
What we collect
Account. Your handle, an identifier from Google or Apple if you sign in with them,
and the email address they pass us at sign-in. We use the email only to reach you about your account.
If you use Sign in with Apple and choose Hide My Email, we only ever see Apple's relay address.
We never see your password. Your device's region setting (a country code such as “US”) and its
time zone travel with requests: the region tells us which countries Daycut is used in, and the time
zone sets when your day starts and ends. Both are system settings, not your location.
Listening history. Track title, artist, album art and time of play, from the services you connect (Yandex Music, Last.fm/Spotify, Apple Music).
Social activity. Friends you add, drops you publish, reactions, likes, comments, gifted tracks and reports you file.
Profile photo, only if you choose one. We resize it and strip the camera metadata,
including where the shot was taken, before storing it. Removing it deletes the file.
Messages you send us. The feedback form on this site takes your message and, if you add one,
a way to reach you. An older waitlist form takes an email address.
Promo cards. If Daycut shows a promo card in your feed, we note that you saw or tapped it,
against your account, so the same card doesn't keep coming back.
Our own visit counts. This site keeps its own statistics: page viewed,
referrer domain, the campaign tag of the link you opened (if any), taps on the App Store
button, and time of visit. We count uniques with a hash that changes
every day, so our counts can't link your visits across days. We also record the country
your address belongs to: the country only, never the city, the coordinates or the address
itself. Address-to-country data by
DB-IP, used under CC BY 4.0.
PostHog. The same site statistics, under the same daily hash and with no profile of you,
also go to PostHog, an analytics service hosted in the EU. When you finish a setup step in the app
(picking a handle, connecting a service, turning on notifications), PostHog gets the name of that
step with your Daycut account number, so we can see where setup loses people.
Google Analytics. We use Google Analytics on this site and in the app (version 1.0.4 and
later) to see how many people visit, install and finish setup. On the site, Google sets its own
cookies (_ga) in your browser. If you visit from the EU, the EEA, the UK or Switzerland,
Google sets no cookies and gets only cookieless signals: that a page was viewed, and taps on the
App Store button. In the app, Google
Analytics stays off until you turn on Share usage stats during setup or in
Profile → Settings, and turning it off stops it again.
With it on, Google creates an ID for your install of Daycut. The app doesn't give Google your
device's advertising ID or its vendor ID, and Daycut never asks to track you across apps.
Google gets the pages and app screens you open, the setup steps you finish, your device
model, OS and app version, and a rough location it works out from your IP address; Google
Analytics doesn't store the address itself. We don't send Google your handle, email,
listening history or friends list.
We do not collect your precise location, your contacts, your photo library or advertising
identifiers, and Daycut never asks for location permission.
Why we need it
To build your daily drop and show it to your mutual friends, to open a track in your own service,
and to confirm that a gifted track was actually played. Email lets us answer you about your account;
country and region tell us where Daycut is being used; the analytics show us where people get stuck
in setup. Reports and feedback reach us so we can act on them. That is all.
Who else sees it
Your mutual friends see your drop. If you turn on a public profile, followers see it too.
Your music service. We request your listening history from it using the access you granted.
Apple iTunes and Deezer. Public search used to find album art and 30-second previews. They receive the track title and artist, never your identity.
PostHog receives the site statistics and setup steps described above.
Google receives the analytics data described above and handles it under
its own rules.
We don't give it your account details or what you listen to.
Telegram. Our team gets alerts in a private Telegram chat: the handle of each new
account, each report (who reported whom, and the reason you wrote), and each feedback message
with the contact you left. Only the Daycut team is in that chat.
We do not sell data, and we do not share it with advertisers or data brokers.
Where it lives
Everything in this policy lives on our own server in the Netherlands, apart from the copies that
PostHog, Google and Telegram keep. Access tokens for your music services are stored encrypted.
Your listening history stays on the server while your account exists; deleting the account removes it.
Google Analytics data lives on Google's servers. Google keeps the event records for 2 months
and the per-install records for 14 months, then deletes them. We don't link these records to
your account, so we can't look yours up there; switch Share usage stats off and the app
sends nothing new.
Your control
Hide or skip. Remove a track from a drop or skip the day entirely, free and with no limits.
Disconnect a service at any time in Profile → Settings; we stop reading it immediately.
Delete your account in Profile → Settings → Delete account, or write to us. Everything
goes: history, drops, reactions, friendships.
Get a copy of your data on request.
Children
Daycut is not intended for children under 13 (or the minimum age in your country).
Changes
If this policy changes in a way that matters, we will say so in the app before it takes effect.