Daily Dose of Happiness / App Privacy Policy
This Privacy Policy applies to the Daily Dose of Happiness mobile app for iOS and Android and its web version (the “App”), the Creator Dashboard at creator.daily-dose-of-happiness.de, and public share pages. It explains what personal information we process, why, who we share it with, how long we keep it and which rights you have. Visits to the website daily-dose-of-happiness.de are covered by our separate website privacy policy.
If you live in Washington, Nevada or Connecticut, please also read our Consumer Health Data Privacy Policy.
Data Protection Officer: We are currently appointing an external Data Protection Officer and will add their contact details here once appointed. Until then, please contact us at info@lioverse.de for all privacy matters.
UK Representative (Article 27 UK GDPR): We are currently appointing a representative in the United Kingdom and will add their contact details here once appointed. Until then, UK residents can contact us directly.
Privacy Officer for Canada (PIPEDA, Québec Law 25): Annika Latz, Managing Director, info@lioverse.de.
3.1 Information you give us
| Category | Examples | When |
|---|---|---|
| Age confirmation | that you are 18 or older (no date of birth) | at first launch |
| Consent records | which consent, version, language, date, withdrawal date | when you agree or withdraw |
| Check-ins (health data) | chosen emotion, intensity, date | when you check in |
| Reflections (health data) | gratitude notes, backpack notes, journey answers, answers to creator questions, letters to your future self and your reflections on them | when you write them |
| Community content | anonymous Small Wins, feature wishes, votes, likes, saves, cheers | when you submit or react |
| Share packages | chosen content, optional sender name and message, optional memory text | when you create a share link |
| Premium gifts | code, purchase and redemption data, optional sender name, chosen pre-written message; for email delivery the recipient's address, language and send time | when you buy, send or redeem a gift |
| Reports and requests | report reason and details, privacy requests and complaints | when you contact us |
| Account (optional) | email address and password hash, or Apple / Google sign-in identifier and the email address you release | when you create an account |
| Creator profile (creators only) | real name (internal only), display name, bio, profile picture, website, categories, uploaded media | when you apply as a creator |
| Onboarding source (optional) | where you heard about us | if you answer |
3.2 Information collected automatically
| Category | Examples |
|---|---|
| Technical identifiers | internal user ID, pseudonymous public ID, access tokens |
| Device and app settings | language, time zone, app version, platform, reminder settings |
| App Store country | the country of your App Store or Google Play account (two-letter code only), used to show the right legal texts, crisis numbers and features |
| Push token | Firebase/APNs token, if you allow notifications |
| Purchase status | store, product, entitlement status, original purchase date (no payment card data) |
| Product interaction | first-party events such as “Premium screen viewed” or “review prompt shown” (no mood or text) |
| Server logs | IP address, time, requested path, status code, browser or app version, operating system |
We do not collect precise location, contacts, photos, advertising IDs, biometric data or browsing history from other apps or websites.
3.3 Premium gifts
You can buy Early Access Premium for someone else. Buying and redeeming require an account. We send a purchase confirmation to your account email address. You pass the code on yourself or have us email it, right away or at a time you choose. We review an optional sender name by hand before an email with that name goes out. When a gift is redeemed, we record which account redeemed the code and when; you are only told that your gift was redeemed, not by whom.
If someone sends you a gift: we got your email address from the person giving the gift. We use it only to deliver this gift, not for advertising. You do not need an account for this. You can object at any time at info@lioverse.de. Anyone who knows the code can see the sender name and message.
The legal bases apply under the EU GDPR and UK GDPR. Section 12 explains additional points for the USA and Canada.
| Purpose | Data | Legal basis |
|---|---|---|
| Provide the App and its features | identifiers, settings, community content, share packages | contract (Art. 6(1)(b)) |
| Check-ins, reflections, weekly review, personalised daily content | check-ins, reflections | explicit consent (Art. 6(1)(a) and Art. 9(2)(a)) |
| Show the right legal texts, crisis numbers and regional features | App Store country | contract; legal obligation where local law requires it (Art. 6(1)(b), (c)) |
| Confirm you are an adult | age confirmation | legal obligation and legitimate interest in protecting minors (Art. 6(1)(c), (f)) |
| Account, login and security | account data, logs | contract; legitimate interest in security (Art. 6(1)(b), (f)) |
| Premium purchase and restore | purchase status, public ID | contract (Art. 6(1)(b)); statutory records (Art. 6(1)(c)) |
| Buying, delivering and redeeming Premium gifts | gift data, purchase status, email addresses | contract (Art. 6(1)(b)); for the email to the recipient and the sender-name review, legitimate interest in the requested delivery and a safe service (Art. 6(1)(f)); statutory records (Art. 6(1)(c)) |
| Push notifications | push token, settings | consent (Art. 6(1)(a)) |
| Moderate community content, handle reports and appeals | community content, reports | legitimate interest in a safe service; legal obligations such as the UK Online Safety Act and the EU Digital Services Act (Art. 6(1)(c), (f)) |
| Answer privacy requests and complaints | request data | legal obligation (Art. 6(1)(c)) |
| Improve the App with first-party product events | product interaction | legitimate interest (Art. 6(1)(f)) |
| Keep records of consent | consent records | legal obligation (Art. 7(1)) |
Consent to the processing of check-ins and reflections is voluntary. Without it, you can still use the App's content, garden and other features; check-ins and personalised content are switched off.
We do not sell personal information. We only share it with service providers that process it on our behalf under a written contract (processors), with platform providers acting on their own responsibility, or where the law requires it.
| Recipient | Purpose and data | Role | Location and safeguard | Privacy notice |
|---|---|---|---|---|
| netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany | hosting of servers, database, file storage and backups; all App data (encrypted as described) and connection data | processor | Germany | netcup privacy |
| Google Firebase Cloud Messaging (Google Ireland Limited, Google LLC) | delivering push notifications; push token, installation ID, platform, delivery data. No check-in content. | processor | EU/USA; EU-US Data Privacy Framework and UK Extension, Standard Contractual Clauses | Firebase privacy |
| Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland | Sign in with Apple, App Store purchases, Apple Push Notification service; Apple identifier, released email, transaction data, push token | independent controller; processor for APNs | Ireland/USA | Apple privacy |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA | Sign in with Google, Google Play purchases; Google identifier, released email, transaction data | independent controller | Ireland/USA; EU-US Data Privacy Framework, Standard Contractual Clauses | Google privacy |
| RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA | verifying purchases and Premium status; pseudonymous public ID, platform, product, receipt or purchase token, entitlement status, SDK device data. No email, name, mood or texts. | processor | USA; Standard Contractual Clauses | RevenueCat privacy, DPA |
| Sendinblue SAS (Brevo), 9–17 rue Salneuve, 75017 Paris, France | sending account and service emails, purchase confirmations and gift emails; email address, message content (for gifts: sender name, message and code), delivery data | processor | EU; sub-processors under adequacy decisions or Standard Contractual Clauses | Brevo privacy |
| Mango Technologies, Inc. dba ClickUp, 350 Tenth Ave, Suite 500, San Diego, CA 92101, USA | handling website contact requests and creator applications; contact details, request content, attachments; for creator applications display name, bio, website | processor | USA; Standard Contractual Clauses | ClickUp privacy, DPA |
| Authorities, courts | where legally required | – | – | – |
Apart from our hosting provider, none of these recipients receives your check-ins or reflections. Creators never see individual answers, user IDs, moods or emotions; they only see aggregated statistics.
We are based in Germany and store App data in Germany. Some processors (section 6) process data in the USA. For EU and UK users, we rely on the EU-US Data Privacy Framework and its UK Extension where the recipient is certified, and otherwise on Standard Contractual Clauses or the UK International Data Transfer Addendum. You can request a copy of the safeguards.
Users in Canada: your information is processed outside Canada, in Germany and the USA, and may be accessible to courts, law enforcement and national security authorities of those countries. For Québec, we carried out a privacy impact assessment before transferring information outside Québec.
Users in the USA: your information is processed in Germany and the USA.
| Data | Retention |
|---|---|
| Check-ins and reflections | until you delete them, withdraw consent or delete your account |
| Account and other App data | until you delete your account |
| Inactive accounts | deleted after 24 months without use (we warn you 30 days in advance if we have your email) |
| Share links | valid for 7 days; packages not saved by the recipient are deleted 30 days after expiry |
| Push tokens | until you turn notifications off, the token becomes invalid, it is unused for 180 days, or you delete your account |
| Server and access logs | 30 days |
| Backups | deleted data can remain in backups for up to 30 days and is not restored into the live system |
| Consent records | as long as your account exists |
| Reports, appeals, privacy requests | 3 years after closing |
| Contact and support requests | 12 months after closing |
| Purchase status | as long as your account exists, plus statutory retention periods |
| Premium gifts | Codes never expire. We delete the recipient's address after sending, after delivery has finally failed, or on cancellation; a shortened form (e.g. l***@example.org) stays for your gift list. We delete that form, the sender name and the message 90 days after redemption or deactivation. The purchase record (code, transaction, product, dates) stays even after account deletion, then without a link to the account; a gift email already scheduled is still sent. |
| Product interaction events | 12 months |
| Creator profile and media | until deletion; then removed from active delivery without undue delay |
Server logs: when you use the App, its web version or share pages, we process the connection data listed in section 3.2 to deliver the service and protect against attacks (legitimate interest, Art. 6(1)(f)). We do not combine it with other data.
Local storage: the App and its web version store access tokens, settings and cached content on your device, which is strictly necessary for the service you request.
Contact and support: when you email us or write to us through the App, we process your details to handle the request. Creator applications and requests from the website contact form are handled in ClickUp (section 6).
No system is completely secure. If a breach affects you, we will notify you and the competent authorities as required by law.
You can use these rights in the App (Settings › Privacy & data), on our privacy requests page or by email to info@lioverse.de. We answer within 30 days.
If you use the App without an account, we identify you through the App's technical ID. Requests by email without an account may be limited if we cannot verify that the data belongs to you.
United States. In the last 12 months we collected identifiers, commercial information (Premium purchase status), internet or other electronic network activity (logs, product interaction), user-generated content and sensitive personal information (consumer health data: check-ins and reflections). Sources are you, your device, Apple and Google and, for gifts, the person giving the gift. We disclose information only to the service providers in section 6, for business purposes. We do not sell personal information, do not “share” it for cross-context behavioural advertising and do not use sensitive data to infer characteristics. You can access, correct and delete your data and obtain a copy. If we deny your request, you can appeal in the App or by email to info@lioverse.de with the subject “Appeal”. We respond to appeals within 45 days. If your appeal is denied, you can contact your State Attorney General. Residents of Washington, Nevada and Connecticut: see our Consumer Health Data Privacy Policy. The App is not directed to children under 13 and we do not knowingly collect their data.
United Kingdom. The lawful bases in section 4 apply under the UK GDPR. Check-ins and reflections are special category data processed with your explicit consent. You can complain to us first; this does not limit your right to complain to the ICO.
Canada. We rely on your express consent for check-ins and reflections, and on the consent you give by using the App for the other processing described here. You can withdraw consent at any time, subject to legal or contractual restrictions; we will tell you the consequences. This policy is available in French. We do not use technology that identifies, locates or profiles you, and our highest privacy settings apply by default.
Daily Dose of Happiness is only for people aged 18 and over. If we learn that a user is under 18, we delete the account and its data. If you believe a minor is using the App, please contact info@lioverse.de.
Daily Dose of Happiness is a general wellbeing app and not a medical device. It does not diagnose, treat, cure, prevent or monitor any disease or condition, and it does not replace advice or treatment from a doctor, psychotherapist or other professional.
We make no promises of healing. Our impulses, exercises and reflections, like the content from creators, are general ideas for your everyday life. We hope they do you good, but we cannot and do not promise any particular effect on your mood or your health.
The App is not intended for people who are ill. We made it for the everyday lives of healthy adults. It is not designed to detect or treat any physical or mental illness. If you are ill, under severe strain or in treatment, you deserve support from professionals, and the App cannot provide that. Please do not pause any treatment or medication because of the App. If you are unsure, talk to your doctor or therapist before trying an exercise.
You decide how you use the App. You use all content on your own responsibility and to the extent that you can and want to. What you try, how often and how far you go is up to you. Nothing here is mandatory. If something does not feel right, skip it or stop.
The App is not an emergency or crisis service. If you are in danger, call your local emergency number. Crisis lines for your country are listed on Help now.
When we change this policy, we update the version and date above. If a change needs your consent, we ask you in the App before the new processing starts. We inform you about material changes in the App.
Previous version (German): version 4.0 (August 28, 2026)