PRIVACY POLICY

Last updated: March 06, 2026

This Privacy Policy describes how roadcarry, doing business as DailyAttic ("Company," "we," "us," or "our"), collects, uses, and shares your personal information when you use the DailyAttic mobile application (the "App") and any related services (collectively, the "Services").

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

1. INFORMATION WE COLLECT

1.1 Information You Provide

When you create an account or interact with the Services, we may collect:

Email address — provided during account registration.

1.2 Information from Social Media Logins

You may register or log in using your Google or Facebook account. When you do, we receive certain profile information from the provider, such as your name, email address, and profile picture. We only use this information to create and manage your account. Please refer to the respective provider's privacy policy for how they handle your data.

1.3 Information Collected Automatically

When you use the Services, we automatically collect certain information, including:

Log and usage data — IP address, access times, pages/screens viewed, app activity, and referring URLs.
Device data — device type, operating system, unique device identifiers, and hardware model.
Analytics data — we use Google Analytics for Firebase to understand how users interact with the App, including screen views, feature usage, and engagement patterns.

1.4 Purchase and Subscription Data

When you subscribe to the Services, we collect and store transaction and subscription information (such as subscription plan, purchase date, renewal status, and transaction identifiers) through RevenueCat, our subscription management provider. This data is stored in our database for service delivery and internal statistical analysis. We do not directly collect or store your payment card details — all payment processing is handled by the Apple App Store or Google Play Store.

1.5 Push Notifications

We may send you push notifications related to the Services or promotional content. You can opt out of push notifications at any time through your device settings.

2. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

To provide the Services — delivering content, managing your account, and processing subscriptions.
To communicate with you — responding to your inquiries and sending service-related notices.
To improve the Services — analyzing usage patterns, diagnosing technical issues, and enhancing user experience.
To send promotional communications — marketing content via push notifications. You can opt out at any time through your device settings or by clicking the unsubscribe link in marketing emails.
To comply with legal obligations — meeting regulatory requirements and responding to lawful requests.

3. LEGAL BASES FOR PROCESSING (EU/UK USERS)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), we process your personal information based on the following legal grounds under the GDPR:

Performance of a contract — to deliver the Services you have subscribed to and fulfill our contractual obligations.
Consent — where you have given explicit consent, such as for marketing communications. You may withdraw consent at any time.
Legitimate interests — to improve and secure the Services, provided this does not override your fundamental rights.
Legal obligation — to comply with applicable laws and regulations.

4. DISCLOSURE OF YOUR INFORMATION

We do not sell, rent, or share your personal information for advertising purposes. We may disclose your information to the following types of third-party service providers who assist us in operating the Services:

Category	Purpose
AI Platforms	Content generation (briefings, audio)
Cloud Computing & Data Storage	Hosting and storing application data
Authentication Services	User account registration and login
Analytics Services	Understanding app usage and performance
Subscription Management	Processing and managing subscriptions
Website & App Hosting	Serving the application

These service providers are contractually obligated to process your information only as necessary to provide their services to us and in accordance with applicable data protection laws.

We may also disclose your information when required by law, regulation, or legal process, or to protect our rights, safety, or property.

5. AI-BASED SERVICES

DailyAttic uses artificial intelligence to generate content briefings and audio. Your personal information may be processed by our AI service providers in connection with delivering these features. If you wish to opt out of AI-based processing of your personal information, please contact us at roadcarrycom@gmail.com.

6. INTERNATIONAL DATA TRANSFERS

We are based in South Korea, and our servers and third-party service providers are located in the United States. If you are located in the EEA or UK, your personal information will be transferred to and processed in the United States.

We ensure appropriate safeguards are in place for such transfers, including the European Commission's Standard Contractual Clauses (SCCs), to provide adequate protection for your personal information.

7. DATA RETENTION

We retain your personal information for as long as you maintain an account with us. When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, unless we are required by law to retain it for a longer period.

8. SECURITY

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS), access controls, and secure authentication. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. YOUR PRIVACY RIGHTS

9.1 All Users

Regardless of your location, you may:

Access and update your account information through your account settings;
Request deletion of your account and personal information by contacting us;
Opt out of marketing communications via device settings or unsubscribe links.

9.2 EEA and UK Users (GDPR)

If you are located in the EEA or UK, you have additional rights under the GDPR:

Right of access — request a copy of your personal information.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your personal information.
Right to restrict processing — request that we limit how we use your data.
Right to data portability — receive your data in a portable format.
Right to object — object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent.

To exercise these rights, please contact us at roadcarrycom@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9.3 US State Privacy Rights

If you are a resident of a US state with applicable privacy laws (including California, Colorado, Connecticut, Virginia, and others), you may have additional rights, including:

Right to know — what personal information we collect, use, and disclose.
Right to delete — request deletion of your personal information.
Right to correct — request correction of inaccurate personal information.
Right to opt out — of the sale or sharing of personal information. We do not sell or share your personal information.
Right to non-discrimination — for exercising your privacy rights.

9.4 Categories of Personal Information (CCPA Disclosure)

The following table describes the categories of personal information we have collected within the last 12 months:

Category	Collected	Examples	Retention
A. Identifiers	Yes	Email address, account name	As long as account exists
B. Commercial Information	Yes	Subscription plan, purchase history, transaction identifiers	As long as account exists
F. Internet Activity	Yes	App usage data, screen views, feature interactions	As long as account exists

We do not sell or share personal information for cross-context behavioral advertising. We have not sold or disclosed personal information to third parties for business or commercial purposes beyond what is described in this Privacy Policy.

To submit a privacy request, please contact us at roadcarrycom@gmail.com. We will verify your identity before processing your request. If you are unsatisfied with our response, you may appeal by contacting us at the same email address.

10. CHILDREN'S PRIVACY

The Services are not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at roadcarrycom@gmail.com.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes at least seven (7) days before they take effect. Changes relating to security updates or legal requirements may take effect immediately. The "Last updated" date at the top of this page indicates when this Privacy Policy was last revised.

12. CONTACT US

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

DailyAttic (operated by roadcarry)
Email: roadcarrycom@gmail.com