Privacy notice

Last updated: 5 November 2026 1. Who we are Daylio is operated by Coastal Web (“we”, “us” or “our”). This notice explains how we collect, use, store and share personal information when providing daylio.com.au. For privacy questions or requests, contact [SUPPORT EMAIL]. 2. Information we collect Depending on how you use Daylio, we collect: • Account information, including your name, email address, password hash, timezone and preferences. • Household names, membership details, roles and permissions. • Information you enter about bills, amounts, due dates, recurring schedules, appointments, tasks, notes and payment records. • Files and attachments you choose to upload. • Additional reminder recipients’ names or labels and email addresses. • Subscription references, payment status and related billing records. • Reminder delivery records, account activity, security events and technical information such as IP addresses and browser details. • Information you provide when contacting us for support. We collect information directly from you, through your use of the service, from household members who invite you or enter shared information, and from service providers such as Stripe. A working email address is needed to create and verify an account. Other information may be needed to provide particular features. Only enter information needed for your household organisation. Do not upload bank login credentials or full payment-card details. Obtain appropriate permission before entering another person’s information, including information about children. 3. How we use information We use information to: • Create accounts and manage household access. • Store and display your bills, calendar items, attachments and history. • Schedule reminders and send them to your selected recipients. • Send verification, password-reset, security and service messages. • Manage plans, subscriptions and billing. • Respond to support requests and complaints. • Investigate technical problems, prevent misuse and protect the service. • Meet applicable legal obligations. We do not sell your personal information or use private household content for targeted advertising. 4. Household sharing and private items Shared items are visible to household members according to their access permissions. Marking an item private restricts its visibility to its creator within the household. However, reminders about that item may still be sent to additional email recipients you explicitly select and who complete the required confirmation. The private setting controls access within Daylio. It does not prevent authorised technical access where necessary to operate, maintain or secure the service, investigate a problem or meet a legal obligation. Email reminders may contain information about the relevant item. Our email provider and the recipient’s email provider process those messages to deliver them. Once delivered, copies may remain in recipients’ mailboxes. Review your sharing settings and recipient addresses before adding personal information. 5. Service providers and other disclosures We use hosting, email and payment providers to operate Daylio. These providers may process information needed to supply their services. We may also disclose information to professional advisers where necessary, with your permission, or where disclosure is required or otherwise permitted by applicable law. We limit access and disclosures to what is reasonably necessary for the relevant purpose. 6. Payments through Stripe Stripe processes subscription payments and collects payment details through its checkout and billing services. Daylio receives information needed to manage your subscription, such as customer and subscription references, payment status and billing events. Full card numbers and card security codes entered into Stripe checkout are not stored in the Daylio application. Stripe also handles information for its own payment, security, fraud-prevention and legal purposes. Its Privacy Policy explains those practices. 7. Storage and overseas processing Daylio’s application and email hosting are located in [HOSTING AND EMAIL COUNTRIES]. Backup copies, where maintained, are stored in [BACKUP COUNTRIES]. Some providers process information outside Australia. Stripe’s processing includes transfers to the United States and may involve affiliates and service providers in other countries, as described in its privacy and service-provider information. The countries involved may have privacy laws that differ from Australian law. Overseas processing remains subject to any privacy obligations that apply to us. 8. Security and cookies Daylio uses HTTPS connections, account access controls, password hashing and two-step verification for Super Admin accounts. We take reasonable steps to protect personal information against misuse, loss and unauthorised access or disclosure. No online service can guarantee complete security. Keep your account credentials and recovery codes private, and contact us promptly if you suspect unauthorised access. We use essential session cookies to keep you signed in and protect account functions. Blocking these cookies may prevent Daylio from working correctly. Stripe may use its own cookies and similar technologies on its payment pages. 9. Retention and account closure We retain information while it is needed to provide the service and for legitimate purposes such as maintaining shared household records, handling disputes, protecting security and meeting legal obligations. Closing an account disables access and replaces identifying account details. It does not automatically delete every associated record. Private items are archived, and their contents and attachments may remain stored. Shared household records, activity