Daisy Privacy Policy

Last updated: August 2026

Daisy is a gentle self-love and garden companion. We tried to keep this short and human. The short version: your garden, journal, moods and chats live on your phone, we do not sell your data, and we only send your chat messages to a secure server so Daisy can write you a reply.

What stays on your device

Your garden, flowers, watering progress, daily ritual, mood check-ins, journal and reflection entries, settings, and what Daisy remembers about you are stored only on your phone, unless you choose to turn on garden protection (see below). By default we keep no copy and our servers never store any of it. On Android we also switch off cloud backup for this data; on iPhone, your own device backup may include app data like any app, protected by Apple under your backup settings.

Protecting your garden (optional backup)

If you tap “protect my garden” in Settings and sign in with Google or Apple, Daisy keeps one private backup of your garden so you can bring it to a new phone: your garden and flowers, chats, mood check-ins, what Daisy remembers, and the words of Daisy’s letters (never the paintings, and never your exact date of birth). The backup lives in Google Firestore in the United States and only your signed-in account can read it. It refreshes quietly as you use the app and you can delete it, or delete the backup and the sign-in together, anytime in Settings. If you never sign in, nothing is ever uploaded. Signing in shares your account email with us solely so the backup is recoverable; we use it for nothing else.

How Daisy writes to you

So Daisy can reply, our secure server (a Firebase Cloud Function) passes the relevant pieces to a third-party AI through OpenRouter and streams her words back. That happens when you send her a message (your recent messages, what she remembers, and your recent mood check-ins), when she writes her morning letter, when you open your reflections page (recent mood labels and messages, to write your insights), when she writes your affirmations or paints your manifestation vision (what she remembers plus your wish), and once a day to tidy what she remembers. None of it is kept on our servers after the reply is written, it is used only to write back to you, and your exact date of birth never leaves your phone (the optional backup deliberately leaves it out too).

Please do not share information you would not want processed this way. Daisy is a supportive companion, not a medical, legal, or crisis service.

Photos you share

If you share a photo with Daisy (a screenshot or a picture, a Daisy Plus feature), the original stays on your device. To understand it, the image is sent once to a third-party AI vision service through OpenRouter, which returns a text description so Daisy can respond. The image is not kept on our servers after it is described, and only the description (not the image) becomes part of what Daisy remembers. Please avoid sharing images with other people's private information.

Voice input

Daisy has no microphone feature of its own and never asks for microphone access. If you prefer to speak instead of type, you can use the microphone button on your own phone keyboard; that is your device's built-in feature (Apple or Google), handled entirely by them under their terms, and none of that audio passes through us.

Keeping Daisy safe

We use Firebase App Check to confirm requests come from the genuine Daisy app, plus a random anonymous install id and gentle daily limits to prevent abuse. Neither is linked to your identity.

Crash reports

If the app crashes, Firebase Crashlytics sends us a technical crash report (device model, what the code was doing) so we can fix it. Crash reports never include your chats, moods, journal, or what Daisy remembers.

Anonymous usage analytics

We use Firebase Analytics to understand basic, anonymous usage so we can improve Daisy, such as how many people finish setup, where they heard about Daisy, and whether they start a subscription. We never send the content of your chats, moods, journal, or what Daisy remembers.

Purchases

Daisy Plus subscriptions are processed by Apple or Google and managed through RevenueCat. We receive your subscription status (active or not), never your card details. Apple, Google and RevenueCat handle payment data under their own privacy policies.

Notifications

If you allow them, Daisy schedules a gentle daily reminder locally on your device. No notification data leaves your phone.

Age

Daisy is for adults (18+). We ask your date of birth once to confirm this and to wish you a happy birthday. It is stored locally.

No ads, no selling your data

We do not show ads and we do not sell or rent your personal information to anyone.

How long we keep things (data retention)

On your phone: everything Daisy stores on your device stays there until you clear it in the app or delete the app. We hold no copy of it.

The optional backup: kept only while garden protection is switched on, and each refresh replaces the last one. Delete it in Settings (or by emailing us) and it is removed from our servers straight away.

Messages sent so Daisy can reply: processed and then discarded. Our servers do not retain your messages, your photos, or Daisy's replies after her reply is written.

Crash reports are kept by Google Firebase for up to 90 days and anonymous usage statistics for up to 14 months, then deleted automatically. Your subscription status is kept by RevenueCat for as long as your subscription needs managing. If you email us, we keep the email only as long as it takes to help you.

Your choices

You can clear what Daisy remembers anytime in Settings. Deleting the app removes the data stored on your device; if you turned on garden protection, delete the cloud backup in Settings first (or afterwards by signing back in on any device, or by emailing us). For any privacy question or request, email us at daisy@everwell.ltd.

Changes

If this policy changes, we will update the date above and post the new version here.

AI providers

Daisy's words come from DeepSeek's AI model, and her paintings from an image model, reached through OpenRouter. Depending on the task, the actual processing runs on infrastructure hosts such as DeepSeek, Fireworks, Together, or DeepInfra, under their own privacy terms.

questions? daisy@everwell.ltd