Last updated: 26 October 2026
This website is operated by Daywia.
Trade name: Daywia
Legal name of operator: Kodavatikanti Niranjan (individual merchant)
Registered / operating address: 1/101 Papireddypalle, Cuddapah, Andhra Pradesh, India 516503
Support: support@daywia.com · +91 91107 53692
This policy explains how Kodavatikanti Niranjan, trading as Daywia (“Daywia”, “we”, the data fiduciary under India's Digital Personal Data Protection Act, 2023), handles personal data when you use the Daywia app and daywia.com.
We don't sell personal data. Adults may see Google AdMob ads, which use your advertising ID; teens never get AdMob ads. You can delete your account any time (how).
1. What this covers
The Daywia Android app, daywia.com (policy pages, share previews, password-reset bridge) and the services behind them. It doesn't cover other websites you open from Daywia.
2. Data we collect
2.1 Account and profile
- Email, password (stored only as a secure hash by our login provider), username, display name, bio and profile photo — a photo and username are required to finish setup
- Date of birth — required, used only to work out your age tier (under 13, 13–17 teen mode, or 18+). It's stored separately from your profile, is never shown to other people, and can't be changed after you confirm it.
- Parental consent (13–17 only) — when your parent or guardian agreed, and their email or mobile number, so we can contact them to confirm
- Mobile number (India, +91) — required at signup. It also lets people who already have your number saved find you, unless you turn off contact discovery in Privacy settings.
- Login session tokens, kept encrypted on your phone
2.2 Location
- The city, state and country on your profile, and who can see them (Public / Contacts / Private)
- During setup we ask for location permission to detect your city and state. We store only the city, state and country — never your exact GPS coordinates from this step.
- Precise location only in the moment, for features you use (Parallel capture, and optional place or weather stamps on posts, which send approximate coordinates to our weather and place lookup providers)
- For ads and the Business directory we use state and district only — never distance from you
2.3 What you create and send
- Frames, Drifts, Parallels, captions, hashtags, comments, reactions, saves, Highlights, and each post's audience (including subscriber-only)
- Direct and group messages and media (including voice messages and view-once photos and videos), read and delivery status, typing and online status, reactions, replies (including replies to posts) and forwards, and edits — seen by the people in the chat. Text in 1:1 chats between adults, and in groups where every member is an adult, is end-to-end encrypted: we store it only in encrypted form and can't read it, and your phone publishes public encryption keys to our servers so others can start encrypted chats with you. Photos, videos and voice messages in those chats are stored only encrypted. If you turn on encrypted chat backup, we store a copy of your encrypted messages that only your backup password can open. If you report an encrypted message, your phone sends us the text of that one message.
- Call records: who called whom, voice or video, when it started, was answered and ended, its length, and missed calls. These show in the chat. The sound and video of calls go between phones (or through an encrypted relay) and are never recorded or stored.
- Whether a post was taken with the Daywia camera (Captured) or uploaded from your gallery
- Sounds: for your public camera Drifts, a copy of the audio track as a separate audio file, its length and a small waveform, whether you let others use it and how many posts use it; for posts you make with someone's sound, which sound and which part of it you used. Shared sounds, with your name and photo, are shown to other people.
- Re-Drops and tags: which posts you added to your Drop and who re-dropped yours; who you tagged on a post, whether they accepted, and when. Accepted tags, with names and photos, are shown to people who can see the post.
- Drops: the photo, caption, audience (Friends or Everyone), music and who viewed it. Everyone Drops can be opened from a daywia.com/drop link, which shows your name, photo and the time left to anyone with the link.
- Which chats you pinned or archived and, for business accounts, the labels you put on chats — visible only to you. Chat drafts and starred messages stay only on your phone.
- Long videos you download to watch offline. The files stay only on your phone, inside Daywia; we keep the list of what you downloaded on your phone too, and you can remove downloads any time in Videos → Downloads.
- Reports you make about content, users, products or ads
2.4 Connections and settings
- Follows, blocks, hidden ads, profile lock, privacy and notification settings
- Mutual contacts (people whose numbers you each have saved), used for your Contacts chats and feed, calls and friend lists
2.5 Contact matching
- If you allow Contacts and run a sync, the app turns phone numbers into one-way hashes on your phone and sends only those, to find people already on Daywia who allow discovery. Numbers of people not on Daywia stay on your phone.
- Revoking the Contacts permission clears matches made from your phone. We never sell contacts.
2.6 Purchases and Credits
- For Credit packs, Google Play takes the payment. We receive the purchase token, order ID, product, time and country to check and deliver the purchase. We never receive your card, UPI or bank details for purchases.
- Your Credits balance and history: purchased and promotional Credits, amounts held for ads or collabs, and any Credits owed after a refund
- Tips and subscriptions you send or receive. Creators see the username of people who tip or subscribe to them.
2.7 Business accounts, Shop and collabs
- Business details you publish (category, address, hours, phone, WhatsApp, website, map link)
- Products (photos, videos, title, price, description), product reviews by our team, product tags on posts, and enquiry and share counts
- Your shop plan and its renewals
- Collab offers, invites, applications, submitted posts, ratings and disputes
2.8 Ads (Boost)
- If you advertise: the campaign, goal, budget, audience (state and district), review decision and results
- If you see ads: which ads were shown to you, whether they were qualified views, whether you tapped them, and ads you hide or report. We use this to charge advertisers fairly, stop invalid views, cap how often you see an ad, and pay creators.
- Daywia Boost ads are chosen on our servers using coarse signals such as your state and district and the content you engage with.
- For adults, the app also runs the Google Mobile Ads SDK (AdMob). It receives your advertising ID, device and app information, and ad interactions to show and measure ads. It does not run for anyone aged 13–17. See the Advertising policy.
2.9 Creator Program, Rewards and payouts
- Creator application and eligibility signals, analytics (views, engagement, earnings)
- KYC (Creators only, before a withdrawal): a photo of your PAN card and a selfie, kept in private storage (we don't collect Aadhaar); PAN is also used for tax deducted at source
- Bank details (name, account number, IFSC) when you request a creator withdrawal or a Rewards payout
- Withdrawal and claim history; Money Challenge submissions and checks
2.10 Device and security
- Device model, Android version, app version, language, crash reports (Firebase Crashlytics)
- Push notification token (Firebase Cloud Messaging); notifications may show a small preview image
- IP address and security signals for login protection, rate limits and fraud prevention
- A device identifier: a one-way, salted hash of your phone's Android ID and of a random ID made when Daywia is installed. We use it only to tell whether several accounts use the same phone, so invites and other rewards can't be farmed. We never receive the raw IDs.
- Viewing signals (whether a post was on screen long enough, Drift watch time) for ranking, ad billing and creator pay
2.11 Permissions (only when you allow them)
- Camera and microphone — posts, chat media, voice messages, voice and video calls, KYC selfie. During a call the app keeps the camera and microphone running in the background with a visible notification.
- Photos and videos — Frame and Drift uploads, profile photo, chat attachments, product photos
- Nearby devices (Bluetooth) — to play calls through Bluetooth headsets
- Full-screen alerts — to show incoming calls on the lock screen
- Location — city and state at setup; in-the-moment features
- Contacts — optional friend matching
- Notifications — activity alerts
2.12 Website and support
- Server logs (IP, browser, page) for security; share previews load public post, profile and product details
- Messages you send to support
3. Why we use it
- Run Daywia: accounts, feeds, media delivery, chat, calls, search, Parallels, notifications
- Work out your age tier, apply teen mode and parental consent for 13–17, and close accounts of people under 13
- Check and deliver Google Play purchases, keep Credits balances, run subscriptions and plan renewals, hold and release Credits for ads and collabs, and prevent payment fraud
- Run the Shop, review products and ads, and show the Business directory
- Deliver and bill ads, detect invalid views, and calculate the creator ad pool
- Run the Creator Program, Rewards, KYC, withdrawals and tax deductions
- Keep people safe: spam and abuse detection, reports, enforcement
- Fix bugs and improve performance; meet legal obligations
4. Legal basis
Under the DPDP Act we process personal data with your consent (given when you sign up and when you turn on optional features and permissions) and for legitimate uses the Act allows, such as meeting legal obligations and responding to emergencies. You can withdraw consent by turning a feature off, revoking a permission or deleting your account; some features won't work without the data they need.
5. Who we share it with
We don't sell personal data. We share it only with:
- Service providers that run Daywia for us: hosting and database, media storage and CDN, video streaming, call relay (Cloudflare, which passes encrypted call traffic without storing it), email, push notifications, crash reports
- Weather and place lookup — only when you add a place or weather stamp
- Google Play — to process, check and refund purchases
- Google AdMob (adults only) — the Google Mobile Ads SDK receives your advertising ID, IP address, device and app information, and ad interactions to show, measure and prevent fraud on ads. See how Google uses this data.
- Other users — what you make public or send them. Businesses see messages you send them about products; creators see who tips or subscribes; collab partners see each other's offers, posts and ratings.
- Banks — only to send payouts you ask for
- Authorities — when the law requires (for example tax deducted at source, or a lawful order), or to protect someone from serious harm
- Professional advisers under confidentiality
6. Where it's stored
Data is stored with cloud providers. Where possible for Indian users we choose settings consistent with Indian law. Media may be cached on CDN servers around the world for speed.
7. How long we keep it
We keep your data while your account is open. After deletion we delete or anonymise it within a reasonable time, except: backups and security logs for a limited period; purchase, Credits, payout and tax records that tax and accounting law require us to keep; KYC records kept only as long as compliance needs; records needed for fraud prevention or disputes; and content others still hold (for example Parallel posts or messages you sent them). View-once media in a 1:1 chat is deleted from our storage after it's opened. Drops (24-hour photo stories) — the photo, caption and who viewed it — are permanently deleted 24 hours after posting, or within about an hour if you delete one sooner. Call records are kept as part of the chat and are deleted with it. The readable text of end-to-end encrypted messages exists only on your phones; we hold only the encrypted form, deleted with the chat. Date-of-birth and consent records are deleted with the account. Content involved in a child-safety case, and the case record, are kept as evidence for as long as the law and the case require, even if the author tries to delete it. Accounts found to belong to someone under 13 are deleted.
8. Security
We use encryption in transit, access controls, rate limits and monitoring. KYC files are kept in private storage. No system is perfectly secure — use a strong password and a screen lock, and never share codes or tokens. We'll tell you and the Data Protection Board of India about a personal data breach as the law requires.
9. Your rights and choices
- Change your profile, privacy, location audience, messaging and discovery settings in the app
- Block, report, hide ads, or turn off permissions
- Delete posts, products or your account
Under the DPDP Act you can ask for a summary of your personal data, correction or completion, erasure, withdrawal of consent, and nominate someone to act for you if you die or can't act. Email support@daywia.com. If you're not satisfied with our response, you can complain to the Data Protection Board of India.
10. Children and teens
Daywia isn't for children under 13, and we don't knowingly collect their data; accounts showing an age under 13 are blocked and deleted. Under India's DPDP Act, anyone under 18 is a child, so for users aged 13–17:
- We process their data only with the consent of a parent or guardian, who can withdraw it at any time by emailing support@daywia.com. We'll add a way for parents to verify consent before the DPDP Rules take effect.
- We don't track them across other apps, build advertising profiles of them, or show them personalised ads. They never see Google AdMob ads; the only ads they see are Daywia Boost ads, chosen only by state and district.
- They can't buy anything, earn money, run a business or shop, or share their location publicly, and they can't be found by phone number. Other people can't screenshot, screen-record or save their posts, Drifts, Drops, videos or profile in the app, and their long videos carry no ads. Their public profile and posts can appear in search, suggestions and feeds, but only people they follow who follow them back can message, call or comment on them, notify them with an @mention, or add them to a group.
If you think a child under 13 is using Daywia, or a parent wants a teen's account closed, email support@daywia.com. See Child safety.
11. Automated decisions
We use automated systems to rank feeds (gallery posts reach your friends as normal but are shown less in Discover, Explore and Drifts than Captured ones), detect spam and invalid ad views, score Rewards and split the creator ad pool. Every ad and product is reviewed by a person before it goes live, and account enforcement can be reviewed by a person on request.
12. Changes
We may update this policy. The “Last updated” date will change, and we'll tell you in the app about important changes.
13. Contact
Privacy questions and requests: support@daywia.com
1/101 Papireddypalle, Cuddapah, Andhra Pradesh, India 516503 · +91 91107 53692
daywia.com/grievance