Legal.
Privacy and legal notice for Dayo.
Privacy Policy
Last updated: July 2026Your data stays yours. Here you can read what we collect, why, and how you stay in control.
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Overview
We process personal data only to the extent necessary to operate this website, or where you give us your consent. This website primarily serves to inform you about the launch of Dayo and to let you sign up for the waitlist.
Access data and hosting
When you access this website, the hosting provider automatically collects information that your browser transmits. This generally includes the IP address, the date and time of access, the page accessed, the previously visited referrer, and details of your browser and operating system. This data is technically necessary in order to deliver the website and to ensure its stability and security.
The legal basis is our legitimate interest in the secure and reliable operation of the website pursuant to Art. 6 (1) (f) GDPR. Hosting is provided by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, with whom a data processing agreement pursuant to Art. 28 GDPR is in place. Data may be transferred to the USA in the process. The transfer is based on the standard contractual clauses of the EU Commission.
Waitlist
If you sign up for the waitlist, we process the email address you provide, along with technical details of the sign-up (such as the time of sign-up, the place on the website where you signed up, and a referral code if you were invited by someone). We use this data to inform you about the launch of Dayo as well as about news, updates and future products. The waitlist is operated by the service LaunchList (getlaunchlist.com): when you submit the form, your data is transmitted directly to LaunchList, which stores the sign-ups, manages the referral programme and sends these emails. According to its provider, LaunchList processes data in the USA, so your data is transferred to a third country in the process.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in every email or by an informal message to the address given above. The lawfulness of the processing carried out up to the withdrawal remains unaffected. After withdrawal, or once the waitlist has served its purpose, we delete your data.
Spam protection (Google reCAPTCHA)
To protect the waitlist form against automated sign-ups and abuse, we use Google reCAPTCHA v3, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). reCAPTCHA is only loaded once you interact with the form. It analyses your interaction with the website (such as IP address, browser and device information, mouse movements and time spent on the page) in the background to assess whether the sign-up is made by a human. reCAPTCHA may set a cookie for this purpose.
The legal basis is our legitimate interest in protecting the website against abuse and spam pursuant to Art. 6 (1) (f) GDPR. Data may be transferred to Google LLC in the USA in the process. The transfer is based on the standard contractual clauses of the EU Commission; Google LLC is also certified under the EU-US Data Privacy Framework. For more information, see Google’s privacy policy and terms of service.
Cookies and analytics
This website does not use cookies for advertising purposes and does not embed any analytics services that build a profile of you. Apart from the reCAPTCHA cookie described above, cookies are only used where technically necessary to operate the website.
To understand how the website is used (for example which pages are visited and how often), we use Vercel Web Analytics, a privacy-friendly analytics service of our hosting provider Vercel. It works without cookies and without persistent identifiers that could track you across websites: page views are recorded with anonymised visitor data, and your IP address is not stored. The legal basis is our legitimate interest in analysing and improving our website pursuant to Art. 6 (1) (f) GDPR; the data processing agreement and safeguards described in section 03 apply.
Sharing of data
Your data is only shared with third parties where this is necessary to fulfil the purposes stated above (for example with our hosting provider Vercel, the waitlist service LaunchList and Google as the provider of reCAPTCHA), or where we are legally obliged to do so. Your data is not sold.
Retention period
We store personal data only for as long as is necessary for the respective purposes, or as required by statutory retention periods. After that, the data is deleted.
Your rights
Under the GDPR you have the following rights:
To exercise your rights, an informal message to hey.jannic@outlook.com is enough. You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.
Data security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. This website is transmitted in encrypted form via HTTPS.
Changes to this policy
We will update this privacy policy as soon as the legal situation or our processing changes. The version published on this page applies in each case.