Who answers for this data
Maxime Gauché-Daumet
contact@thedayedition.com
In two sentences
The Day Edition is for preparing a day together. To do that it keeps what you write into it: your account, your event, your guests, your photos.
Nothing is sold, nothing is handed on, and there is no advertising tracker — not in the app, not on this site.
What you entrust to us
Your account: your email address, the name you choose to show, your password as a fingerprint, your language, a picture if you add one, and your phone number if you give it. That number is shown only to the people preparing an event with you, never in the community or on a public page. If you sign in with Apple or Google, we keep the identifier they give us — never your password with them.
Your taste, if you give it: the mood, setting and regions you like, or, for a vendor, their style and the regions they travel to. It is used to show you vendors who suit you, and only you see it.
If you are a vendor, your page: your business name, your introduction, your photos and, if you give them, your prices, your website and your Instagram account. Photos are re-encoded when sent, which removes where they were taken. It is shown to couples only if you turn it on, and you can take it down at any time. What they then see: the page, your trade, your regions and your style, never your name or your email address.
Your favourites: the vendors you like or pass in “Discover”. They keep the same page from being shown to you twice, and the vendor does not see them.
Your messages with vendors: what you write to each other, when each of you read it, and, if you write from an event, its kind and date. Only you and the vendor read them. Either of you can close the conversation, and it is erased when either of you deletes their account.
Your day: its title, its date, its places, the schedule, the tasks, the documents and the photos you put there, and the messages and photos you exchange with the people preparing it with you — readable by them alone, never by the community. Each of them sees how far the others have read: that is what writes “Seen” under a message. A place is also stored as coordinates, so the pin lands where it should. How you arrange your home, and the notes you write on it, are seen by you alone.
Your guests: what you write about them — a name, a household, an answer, a note. They have no account with us; this comes from you, and it is yours to answer for, like your own address book. You can import them from a file, which we read without keeping, or pick them from your phone’s contacts: the app reads them only when you ask, and only the names you tick reach us.
Your vendors and your budget: the details of the vendors you note (a name, a contact person, a phone number, an email address, an address, links to their website or social accounts), where you are with each, what you spend, and who pays what, under the names you choose (“Camille’s parents”). Only the people organising with you see them; a guest who joined by a link does not. As with your guests, this comes from you. A vendor added from the Google search also keeps the place’s Google identifier, so it is not added twice; its reviews, photos and address are not kept.
If you add a vendor found in “Discover” to your event, they stay tied to their account. Once at least three couples have asked that vendor for a quote or booked them, what they planned for them gives a price range shown to other couples: the smallest amount rounded down to the hundred, the largest rounded up, with no name, event or anyone’s own amount. The vendor sees neither the range nor the amounts. In “Discover”, your budget also tells you whether a page is within your means; nobody else sees it.
You can invite one of your vendors to the app: we make a link, and you send it to them yourself, from your phone. We do not write to them. If they accept it with a vendor account, they are tied to the entry you had written, and a conversation opens between you; they see your name, the kind and date of your event, never the rest of your day.
The page’s album, from the day itself: the photos your guests add, with the first name they give. They are seen by everyone with the page’s link, and deleted a year after the day; a month before, the organisers are told so they can download them. Before it is sent, each photo is made smaller and cleared of what the camera writes inside it, such as where it was taken. Whoever added it can take it back from their phone, and the organisers can remove any of them.
The community, if you join it: a handle you choose, your introduction (the month and year of your wedding, your region and what brings you, if you give them), your messages. It is deliberately kept apart — the community never learns your real name, your event, or your guests.
What use produces: the devices allowed to receive your notifications, your open sessions, and counters that limit sign-in attempts. For each notification we send you, we note whether it went out, without its content. When you close an announcement from the team, we note it, so it is not shown to you twice. When you sign up, the app draws a random identifier and keeps it on the phone; we keep only a fingerprint of it, not linked to your account, to limit how many accounts one phone opens, and it is deleted after 30 days.
If you test the app on Android while it is in Google’s test: you join the testers’ group yourself. We can see your Google account’s address there, and no other tester can. To leave the test, leave the group.
If you write to us from the app: the subject, the message and any picture you attach, with your name, your address, your type of phone and the app’s version. They go by email to contact@thedayedition.com and are not kept in the app; the picture is deleted as soon as it is sent. The email stays in our mailbox while we answer you.
Why, and on what grounds
To do what you asked: hold your day, open it to whoever you invite, send the notifications you set. That is the contract between us.
To protect the service: refusing a password already leaked, limiting attempts, keeping a record of moderation decisions. That is our legitimate interest, and yours.
To send you news about the app by email now and then, and to note who each one was sent to. That is our legitimate interest: you can refuse when you create your account, in the settings, and through the link in every email.
To meet our obligations: the backups, and the records a business has to keep.
Who else sees anything
Nobody but the providers that run the service, and each sees only what it needs:
- OVH (France) — The server and the database. Our emails leave from there too.
- Cloudflare R2 — Photos, documents and profile pictures. Files are reachable only through signed links that expire.
- Apple — Sign in with Apple, and notifications sent to an iPhone.
- Google — Sign in with Google, when you choose it, notifications sent to an Android phone (Firebase), the day passed to a Wear OS watch when you have one, and the search for vendors on Google Maps in “Discover”. For that search, only the trade, the town and the language leave, never your account; the photos in the results are loaded by your phone or browser, directly from Google.
- OpenStreetMap — Finding a place from an address.
- MapTiler (Switzerland) — Drawing the maps. Map tiles are requested by your phone, so MapTiler sees its IP address, not your account.
- MET Norway — The weather for the day, from nine days before. Only the place’s coordinates leave, rounded: never your event, never your account.
- Sentry — Crash reports, so a failure gets fixed instead of endured. Request bodies, cookies and who you are are stripped before sending; only a stack trace leaves. The server reads back only totals, such as the number of errors in a week. Hosted in the European Union.
- Have I Been Pwned — Refusing a password already known from leaks. Only the first five characters of its fingerprint leave — never the password, never your address.
None of these providers may use your data for anything else. The server, the database and the crash reports stay inside the European Union.
What is public, and what is not
Nothing is public until you publish it. When you publish your day’s page, only the selection you chose appears — the title, the date, the place, the sections you wrote. Never your guest list, never their answers, never your tasks.
A page for those who have the link has an address containing a code that cannot be guessed, and search engines do not index it.
Your guests’ answers are seen by the organizers only. A guest answered you, not each other.
Businesses in the directory
To help people preparing an event find their vendors, the app also shows businesses taken from the French public register of companies (SIRENE, through the State’s company search API): their name, trade and town, nothing else. We take companies only, never a sole trader working under their own name. They are shown after the vendors who chose to be, with no photo and no review.
A business finds its listing by its SIRET number at thedayedition.com/annuaire. It can take it down at once, without creating an account: we then keep only its SIRET number, so that the next update does not bring it back. It can also take it over with a vendor account; our team checks the request.
For how long
As long as your account exists. A day that has passed stays yours: it is a memory, not a file that expires.
What goes sooner: abandoned uploads and files nothing points at are removed every night, sign-in codes expire within minutes, attempt counters within hours.
Database backups are kept long enough to recover from an incident, then overwritten.
Your rights, and how to use them
Take your data with you: the app hands back everything about you, in one file, from your settings. Without writing to us and without waiting.
Delete your account: from your settings as well, or by writing to contact@thedayedition.com from the account’s address if you no longer have the app. Your address, your name, your number, your picture, your sessions, your devices and your community identity go.
What survives a deletion, and why: what you wrote in a conversation with others stays there, without your name. A conversation other people took part in is not yours alone, and erasing it would make what they wrote unreadable. A day you were organizing with somebody else stays theirs.
You can also ask us to correct what is wrong, object to a use, or write with any question. And if our answer does not satisfy you, you can complain to the CNIL, the French data protection authority.
How it is kept
Passwords are not stored, only their fingerprint. Traffic goes over HTTPS. Files are reachable only through signed links that expire, never through a guessable address. Access to your day is checked on every request, and never inferred from a link.
So the app works without signal, a copy of your events (the schedule, the guests, the seating plan) is kept on your phone, for seven days at most. What you change without signal stays there too, until it is sent, and so do long texts you are still writing. All of it is deleted when you sign out.
Minors
The service is for adults. The community asks you to confirm your age before you enter it. If you believe a minor has an account, write to us and we will close it.
If this page changes
The date at the top says when. A change that genuinely affects you will be announced in the app rather than left here in silence.