PRIVACY AT DALIA

Your data, in your hands.

This notice explains what information Dalia uses, why it is needed, and the choices you can make about it.

What we collect and why

• Account data: email address and sign-in method, to secure your account.
• Cycle data, observations, and notes: to create and retain your cycle records.
• Minimal operational logs: sign-ins, sign-outs, exports, and administrative actions, for security and troubleshooting. They do not include cycle content.
• Optional usage analytics: if you enable it, Dalia records only the app sections you open. You can turn it off at any time from Account.

Access and sharing

Only you can see your cycle data by default. Administrators cannot browse your cycle data. If you later authorize a mentor, you will see a separate request stating its scope and duration; you may revoke it at any time.

Your GDPR rights and controls

From Account, you can download personal data, cycle records, authorizations, and audit events separately as JSON, or download one complete copy. You can also delete your account and its associated data. Operational events that must be retained for security are disconnected from your identity.

You may also request correction, restriction, or objection, withdraw any applicable consent, and complain to your data-protection authority.

Service providers

Dalia uses Supabase for accounts and database services, and Vercel to host the application.