Privacy Policy

Last updated: June 19, 2026

This policy describes how Dalà handles your personal data when you use our mobile app and associated services. We built Dalà with one simple rule: your data belongs to you. No advertising, no resale, no profiling.

1. Who we are

Dalà is published by Lucie & Joël SORO, individuals residing in France. For any questions regarding your data, contact us at: parler@dala-app.com.

2. What data do we collect?

Account data

• Email address: used as a login identifier and to sync your data across your devices.

Data you enter

You fill in all the content in the app yourself: calendar events, lists, memos, avatar and cover photos, household member info, firsts, wishes, expenses, basic medical info (allergies, primary doctor, blood type), countdowns, etc.

Minimal technical data

• Anonymous unique identifier assigned by our authentication provider (Supabase) to link your data to your account.
• Login dates kept by our provider for security reasons (detecting abnormal access attempts).

3. What we do NOT collect

• Your location
• Your phone contacts
• Your browsing history
• External health data (Apple Health, Google Fit)
• Advertising identifiers (IDFA, IDFV)
• Behavioral usage metrics (clicks, screens visited, time spent)

4. How do we use your data?

Your data is used only to provide the service you expect:

• Sync your information between your devices and those of your household members
• Enable sharing with co-parents you explicitly invite via a six-digit code
• Authenticate you securely

We do no behavioral analytics, no ad targeting, no resale to third parties.

5. With whom do we share your data?

With other household members

Information you add is visible to other members of the household you created or joined, according to the permissions you've defined for each (a child doesn't see the budget by default, for example).

With co-parents you invite

If you share a child's profile with another household via a six-digit code, the child's essential information (identity, allergies, doctor, blood type, firsts, wishes) will be visible to the invited co-parent.

With our storage provider

Your data is hosted with Supabase (Supabase Inc., headquartered in the United States, with European storage infrastructure for European accounts). Data is encrypted in transit (TLS 1.3) and at rest (AES-256 on server volumes).

6. How long do we keep your data?

Your data is retained as long as your account is active. You can delete your account at any time from the app (Settings → Account → Delete my account) or by contacting us at parler@dala-app.com. Deletion is final and irreversible: all your data is erased within 30 days, except for legal obligations.

7. Your rights (GDPR)

Under the General Data Protection Regulation (EU 2016/679), you have the following rights:

• Right of access: get a copy of your data
• Right to rectification: correct inaccurate information
• Right to erasure: delete your account and data
• Right to portability: get your data in a machine-readable format
• Right to object: object to certain processing
• Right to withdraw consent at any time

To exercise these rights, contact us at parler@dala-app.com. We respond within 30 days maximum.

If you believe your rights are not respected, you may file a complaint with the CNIL (French Data Protection Authority) at www.cnil.fr, or your local Data Protection Authority.

8. Security

We take the security of your data seriously:

• Encryption in transit (TLS 1.3) on all communications
• Encryption at rest (AES-256) on storage drives
• Strong authentication via email + password (complexity policy enforced)
• Optional local locking via Face ID / Touch ID
• Strict data partitioning per household (Row Level Security enabled on the database)
• Server access limited to Dalà administrators, with logging

9. Children's data

Dalà allows parents to manage their minor children's information. This information is entered by the parents, who remain solely responsible for it. We do not directly collect data from children under 13, in compliance with COPPA and GDPR-K.

User accounts are strictly reserved for adults. A child may appear as a household member (added by a parent) without having a personal account.

10. Cookies and trackers

The Dalà mobile app uses no third-party cookies, no advertising SDK, no behavioral analytics tools (Google Analytics, Firebase Analytics, Mixpanel, Amplitude, etc.).

The dala-app.com website uses only a technical session cookie if you contact us via a form (where applicable). No advertising tracking cookies.

11. International transfers

Our servers are operated by Supabase, which may process certain technical metadata in the United States. Supabase complies with the European Commission's standard contractual clauses for transfers outside the EU, in accordance with GDPR.

12. Changes to this policy

We may update this policy to reflect legal or technical changes. Any substantial change will be notified in the app at least 30 days before it takes effect. The last update date appears at the top of this page.

13. Contact

For any question, request, or complaint regarding this privacy policy or the processing of your data:

📧 parler@dala-app.com
Response guaranteed within 7 business days (usually within the day).