Daisy Connections Ltd ("Daisy Connections", "we", "us") operates an event-based attendee-networking service comprising a web app at app.daisyconnections.co.uk and mobile apps published on the Apple App Store and Google Play. This policy explains what we collect, why, who we share it with, and how to exercise your rights over it.
Daisy Connections is a UK company. For privacy matters write to hello@daisyconnections.co.uk.
1. What we collect
When you use Daisy Connections we collect the following categories of personal data.
- Account data — your email address (required for sign-in via magic link).
- Profile data you provide — name, pronouns, bio, profile photo, interests, personality type, connection preferences, age range, and any optional contact details you choose to share (phone, Instagram, LinkedIn, X / Twitter).
- Event activity — events you register for, check-in timestamps, interactions you log with other attendees (via QR-code scans), feedback you submit (vibe tags, friendship intent, optional private notes).
- Match data — connections and contact-sharing decisions made between you and other attendees at events you both attended.
- Device and diagnostic data — push-notification tokens, app version, operating system, anonymised crash reports and performance metrics.
We do not collect precise location data. We do not collect payment information.
2. Why we use it
- To create and maintain your account and let you sign in.
- To deliver the core service — event registration, check-in, attendee discovery, matches.
- To deliver notifications you've opted into (matches announced, contact shared, etc.).
- To diagnose crashes and fix bugs so the app keeps working.
- To respond to your support requests and enforce our terms of use.
We do not sell your data. We do not use your data for advertising or build advertising profiles about you.
3. Legal bases (UK GDPR)
- Contract — we process your account and event data so we can provide the service you've signed up for.
- Consent — for push notifications and optional profile fields, where you've turned them on.
- Legitimate interests — for diagnostics and abuse prevention, balanced against your privacy rights.
- Legal obligation — where we have to retain or disclose data to comply with law.
4. Who we share data with
We rely on a small number of third-party processors to run the service:
- Sentry (Functional Software, Inc.) — anonymised crash reports and performance traces. Used solely to fix bugs.
- Expo (Exponent, Inc.) — over-the-air JavaScript updates and push notification routing.
- Apple Push Notification service and Google Firebase Cloud Messaging — to deliver push notifications to your device.
- Event organisers — when you attend their event, organisers can see the attendee list, your check-in status, and the matches the system surfaces for that event. Optional contact details you choose to share with a specific match are visible to that match.
Our core database is operated by Daisy Connections on infrastructure we control
(backend.daisyconnections.co.uk). We do not transfer personal data outside the
UK or EEA except where the processors above operate globally; in those cases we rely on
Standard Contractual Clauses or equivalent safeguards.
5. How long we keep it
- Account and profile — until you ask us to delete it or until 24 months of inactivity.
- Event activity — retained for the life of your account so you can revisit past matches and feedback.
- Crash reports — retained by Sentry for 90 days.
- Push tokens — invalidated when you uninstall the app or sign out.
6. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data — most fields are editable directly in your Profile screen.
- Delete your account and the data associated with it.
- Object to processing that relies on legitimate interests.
- Withdraw consent (e.g. disable push notifications) at any time.
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, email hello@daisyconnections.co.uk. We aim to respond within 30 days.
7. Security
Data in transit is encrypted with TLS. Data at rest is encrypted at the database level. Access to production systems is restricted to authorised Daisy Connections staff and audited. We will notify affected users and the ICO promptly if we ever suffer a breach that puts your data at risk.
8. Children
Daisy Connections is not directed at children under 16 and we do not knowingly collect data from anyone under that age. If you believe a child has provided us with personal data, email hello@daisyconnections.co.uk and we will delete it.
9. Changes
If we materially change this policy we'll post the new version here and update the "last updated" date. For substantive changes we'll also notify active users by email or in-app message.
10. Contact
Daisy Connections Ltd
United Kingdom
hello@daisyconnections.co.uk