Privacy Policy

Last updated: 26 October 2026

Who is responsible

DailyWall is developed and published by Serkan Kaplan, who is the controller of the data described here. For any privacy question or request, write to [email protected].

Data that stays on your device

Your notes, drawings, lists, habits, photos you attach to notes, stickers you cut out of your own photos, wall preferences and settings are held only in your device's own storage (and in your own iCloud if sync is on, see below). We have no access to this data; it is not sent to us. The only exceptions are the things described below.

Calendar and Reminders. If you allow access, today's events and reminders are shown on your wall and a reminder can be completed from its paper. This happens on your device only; nothing from your calendar or reminders is sent to us or to anyone else.

iCloud sync

If iCloud is switched on, your walls sync to your other devices and are backed up through Apple's iCloud. Some iCloud features are part of DailyWall Pro. That data sits in the private area of your own iCloud account. As the developer we cannot read, list or download it. If iCloud is off, sync switches itself off and the app carries on working. "Delete everything" in Settings removes your papers, boards and history from the device and from this iCloud backup.

This data is governed by Apple's own terms: apple.com/legal/privacy

Shared walls

A shared wall lives in Apple's CloudKit. The wall, its papers, any photos on it and the name, emoji and colour you choose for yourself are stored in the iCloud account of the person who created the wall and shared with the people they invite. Apple hosts that data; we cannot read, list or download it. The people on a wall can see what is on it and who hung each paper. Leaving a wall removes you from it; the owner can remove papers and participants and delete the wall entirely, which deletes it from iCloud.

Invitation links. To make invitations short, the app sends the iCloud sharing link to our own server (a Cloudflare Worker) and receives an eight-character code in return. The server stores that link under that code for 180 days, after which it deletes itself. So that the invitation page and the link preview can say who is inviting you to which wall, the code also stores your first name, the wall's name and the app's language, for the same period at most. The name is included unless you switch off "Show my first name in the invite link" on the invitation screen; switching it off deletes the name from our server. No surname, identifier, e-mail or device information is sent. The shared walls themselves stay in iCloud as described above, and the long link keeps working without our server.

Reporting and blocking. You can report a paper on a shared wall. The paper is hidden on your device straight away, and a short report is sent to our server: the reason you chose, a copy of the paper's text (at most 500 characters), random identifiers of the wall and the paper, and a shortened one-way hash of the author's participant identifier, so that repeated reports about the same person can be recognised. Your name, iCloud identity and device details are not sent. To limit abuse, your IP address is mixed with a random key that changes every day and used only in a daily counter; it is deleted within 2 days and never stored with the report. We use reports only to look into abuse; they are deleted after 180 days. You can also block a participant: their papers are then hidden on your device, including in widgets and on the Lock Screen. Blocking happens only on your device; nothing about it is sent to us.

Notifications. If you turn on notifications for a wall, Apple's push service wakes the app silently when the wall changes and the notification is composed on your device. Your device's push token is used only by Apple's CloudKit; it is not sent to our server, and we send no push notifications ourselves.

Camera. If you choose "Scan QR code" to join a wall, the camera is used on your device to read the code. No image is stored or uploaded.

Wall design links

If you share a Wall Designer design as a link, the design itself (colours, pattern, texture and brush strokes) is uploaded to our server and kept under a random eight-character code for 180 days, after which it deletes itself, so that the person you send the link to can open it. No note, photo, name or device identifier is included.

2027 Wish Wall

The 2027 Wish Wall is a public wall: everyone who uses DailyWall, and anyone who visits the Wish Wall pages on dailywall.app, can read the wishes on it and share them. Hanging a wish is optional. Before your first wish the app shows the rules, says that the wish will be checked with OpenAI, and asks you to agree; nothing is sent until you confirm.

When you hang or edit a wish, the app sends our server (the same Cloudflare Worker):

Sent	What for
Your wish (at most 90 characters; 45 in Chinese, Japanese and Korean)	Shown on the wall
The paper, tape, sticker, handwriting and style you picked — always items from the app's own catalogue, never your photos or your own stickers	To draw your paper
Your first name, only if you switch the name on (at most 20 characters)	Shown on your paper
Your device's region setting (for example "TR")	Shown as a flag only if you switch the flag on; otherwise it is not shown publicly
Your time zone (for example "Europe/Istanbul")	So that your paper lights up at your own midnight and editing closes at your own New Year
The app's language	To show wishes by language
Whether you have Pro	So that Pro decorations and extra wishes can be used
A random number kept in your device's keychain	So the wish stays yours: only you can edit or delete it, and the number of wishes per device is limited

Our server never stores that random number itself, only a keyed one-way hash of it that cannot be turned back into the number. The number stays in your device's keychain if you reinstall the app, so you keep your wish; it is not linked to your name, e-mail, Apple Account or advertising identifier. Requests are signed with Apple's App Attest (see "Protection against fake traffic" below).

Automatic moderation with OpenAI. Before a wish appears, our server checks it in steps. First our own rules remove links, e-mail addresses, phone numbers and social media handles and look for banned words. Then the wish text and the first name (if any) are sent to OpenAI's moderation model. If the result is unclear, the same text, with its language and the automatic findings, is sent to an OpenAI language model that decides whether it fits the wall rules. A wish that is reported is checked again the same way. Nothing else goes to OpenAI: no device number, region, time zone or IP address. OpenAI processes this data as our service provider under its API terms. Under OpenAI's API data policy, data sent through the API is not used to train its models unless the customer opts in, and OpenAI may keep it for up to 30 days to detect abuse: openai.com/enterprise-privacy. There is no human review queue, but we can remove any wish ourselves.

If a wish is rejected, its text is not stored. A wish that may express thoughts of self-harm is never published: only you can see it, and the app shows you where to find help.

Hearts, reports and blocks. When you tap "Me too", report a wish or block its author, the hashed device number is stored with that action so that it counts only once. The author is never told who reported their wish. A wish reported from three different devices is hidden and checked again. Blocking hides that author's wishes from you. Hearts given on the website are counted with a summary of the visitor's IP address and browser that changes every day; the website uses no cookies.

IP address. For the Wish Wall our server uses your IP address only to limit abuse: in short-lived rate counters (deleted within 2 days) and as a keyed hash that changes every day, for daily limits and for counting reports. The IP address is not stored with your wish, and your country is never worked out from it.

How long, and deleting your wish. You can edit your wish until midnight on 31 December in your own time zone and delete it at any time: on the Wish Wall, touch and hold your wish, then "Delete wish". Deleting it removes the wish text, name and decorations from the wall and from our server straight away, together with its reports. Wishes that are not deleted stay on the wall as a keepsake. The wall is archived and all wishes are deleted automatically on 1 January 2028, from the moment that date begins in the first time zone to reach it: from then on no wish is shown anywhere, and our server deletes the wish texts and names together with the reports, hearts, blocks and the hashed device numbers that go with them. Only anonymous totals remain, such as the number of wishes per country and per day and the total number of hearts. To ask us to remove a wish, or for anything urgent, write to [email protected].

Notifications. Wish Wall reminders, such as the countdown to midnight, are scheduled locally on your device.

"Wall from a sentence" and smart add

When you type a line like "dentist tomorrow at 2pm", the app turns it into a date, a time and items. This happens entirely on your device: with Apple Intelligence where your device supports it, and otherwise with the app's own rule-based parser. What you type in the quick-add field is not sent to us or to anyone else.

Wall from a sentence. You can also type or say several things at once ("not tomorrow, the day after: dentist, and buy pizza today") and have them split into separate notes. On devices with Apple Intelligence this happens entirely on your device. On devices without it, the app asks you once whether the sentence may be sent to OpenAI through our server for a better result. Only if you tap "Allow" is the sentence you typed or dictated (its text, your language and region setting, today's date, the time and your time zone) sent through our server to OpenAI, which returns the notes. Our server does not store or log the text and asks OpenAI not to store it; OpenAI processes it as our service provider under its API terms, does not use it to train its models, and may keep it for up to 30 days to detect abuse: openai.com/enterprise-privacy. If you choose "Use simple on-device splitting" instead, or later switch it off on the same screen, nothing leaves your device and the app's own rule-based splitter is used. Your voice is never sent anywhere: speech is turned into text on your device (Apple may download a speech model for your language once).

Some older versions of DailyWall could send a quick-add line to our server and OpenAI for the same purpose; it was not stored there either. Current versions never do, and our server no longer accepts such requests.

Photos

DailyWall never writes to your photo library on its own, and never deletes anything. Only when you press "Save to Photos" does it add the wall image it generated to your library — and to its own "DailyWall" album only if you gave it full library access in an earlier version. It asks only for permission to add photos and never reads your existing ones. When you pick a photo for a note, a wall, or a custom sticker, a copy is kept inside the app's own storage; on a shared wall, a photo attached to a note is stored with that wall in CloudKit as described above. Photos and your own stickers can never be put on the Wish Wall.

Lock Screen wallpaper and faces in photos

The wallpaper is rendered on your device and handed to the Shortcuts app. It does not pass through Photos or any server. If a photo on your wall may contain a person, iOS can reframe the wallpaper around the face. To prevent this, DailyWall can soften the face area of the wallpaper copy. The app asks you before it looks for faces; only if you agree does it use Apple's on-device Vision framework to find face areas in the photos on your wall. This runs entirely on your device: no face data is stored, kept after the wallpaper is made, sent to us or shared with anyone, and it is never used to identify anyone. You can change your answer at any time in Settings. The setup guide's short video plays from inside the app; nothing is recorded.

Subscriptions and payment

Subscriptions are sold by Apple through the App Store. We never see or store your card details, name or billing address.

To manage subscriptions across your devices the app uses RevenueCat, a subscription infrastructure service. RevenueCat receives an anonymous, randomly generated app user identifier, the identifier for vendor of your device, and the App Store receipt showing whether your subscription is active. It does not receive your name, e-mail or Apple Account. This data is used only to unlock Pro features and to give us aggregate subscription figures; it is not used for advertising. RevenueCat keeps it under its own retention policy: revenuecat.com/privacy

Usage statistics in the app

To see whether the app works for people and to improve it, DailyWall can send usage statistics to our own server. Starting with version 1.8.5, the app asks you first, and nothing is sent unless you agree; you can switch statistics off at any time in Settings. When you switch them off, the app stops sending, deletes the statistics it has not sent yet and throws away its random number, so later statistics cannot be connected to earlier ones. (Version 1.8.4 and earlier sent these statistics without asking; updating the app gives you the choice.)

What is sent: which screens are opened and for how long, which features are used (for example "a note was hung" or "the price page was opened"), steps of the purchase flow (for example "buy was tapped" or "the purchase was cancelled") and whether Pro is active, how long a session lasts, error counts, the app and iOS version, the device model, the language and your App Store country. A random number created by the app ties these together; it is not linked to your name, your e-mail address, your Apple Account or your advertising identifier, and it is never shared with anyone. What you write on your notes or wishes is never part of these statistics. Your IP address is not stored with them.

Daily counters. In the same way the app sends anonymous step names to our server at a few moments — for example: the app was set up, the first note was hung, the Lock Screen automation ran, an invitation was sent or accepted, a rating request was made — together with the day and how often decorations were used. Steps sent from the same device on the same day carry one random marker so that a step is counted once; that marker is thrown away every night and cannot link one day to another.

How long: individual statistics events are deleted after about 14 months, and daily counters after 400 days. Per-session and per-device summaries (session length, number of screens and events, country, language, device model, versions, Pro status, first and last day seen), tied only to the random number and not to you, are deleted after 26 months. After that, only overall totals with no identifier at all remain. Because the random number is not linked to you, we cannot find "your" statistics by your name or e-mail; switching statistics off is the way to stop and disconnect them.

Crash reports. DailyWall contains no crash reporter. If you have allowed your iPhone to "Share with App Developers" (Settings › Privacy & Security › Analytics & Improvements), Apple may send us anonymous crash and energy reports under Apple's own terms.

Protection against fake traffic

Requests to our server are signed with Apple's App Attest, which uses a key created on your device for this app, so that only the real app can use our features. The server keeps only the public part of that key and a counter, to check signatures; it is deleted 400 days after it was last used (the Wish Wall keeps its copy until 1 January 2028 at the latest). To limit abuse, the server keeps the requesting IP address in short-lived rate counters for at most two days; it is not logged or stored anywhere else.

Tracking and advertising

DailyWall contains no third-party analytics tool, no ad network and no advertising SDK. We do not track you across apps or websites, we do not use the advertising identifier, and nothing is used for advertising or sold.

This website

dailywall.app uses no cookies and stores nothing in your browser. Visits (which page, where the visit came from, campaign tags in the link, the type of device, browser and screen size, and the country, which our hosting provider works out from the IP address at the moment of the visit) are counted with an anonymous summary that changes every day, so a visit cannot be linked to you or to another day. Your IP address is not stored. Individual page events are deleted after about 14 months and per-visit summaries after 26 months; only totals without any identifier of you remain.

Notifications and reminders

Reminders for your notes, habits and the optional morning and evening reminders are scheduled locally on your device. If you allow notifications, they are shown by iOS; we do not send or receive them, and none of them is advertising. You can turn each of them off in the app's Settings or in iOS Settings.

Sharing to other apps

When you share a wall image — for example to Instagram or Facebook Stories, Messages or Mail — the image is handed to the app you choose on your device, and that app's own privacy policy applies. We do not receive a copy.

E-mail to us

If you write to us, we use your e-mail address and message only to answer you. We keep the conversation in our mailbox only as long as it is useful for helping you, and delete it when you ask.

Who receives data

We do not sell or rent data, and we share it only with the service providers below, which process it on our behalf for the purposes described above and are bound to protect it at least as well as we do:

• Cloudflare — hosts our server and website (Workers, Pages and their storage); data described above as "our server" is stored with Cloudflare.
• OpenAI — checks Wish Wall wishes, and splits a sentence into notes only if you allowed it.
• RevenueCat — subscription status.
• Apple — App Store purchases, iCloud and CloudKit (your own data and shared walls), App Attest, push delivery and on-device Apple Intelligence.

These providers may process data in the United States and other countries. Where the law requires it, transfers rely on the providers' standard contractual clauses or equivalent safeguards. We may also disclose data if the law requires it, or to protect people from harm.

How long we keep data — overview

• Notes, photos and settings: on your device and in your own iCloud until you delete them; we never hold them.
• Invitation and design links: 180 days, then deleted automatically. Your name in an invitation: until you switch it off, at most 180 days.
• Shared wall reports: 180 days.
• Wishes: until you delete them, and in any case deleted automatically on 1 January 2028 (see above). Rejected wish texts: never stored.
• Usage statistics: individual events about 14 months; daily counters 400 days; per-session and per-device summaries 26 months; totals without any identifier remain.
• App Attest public keys: 400 days after last use.
• IP addresses: only in rate counters, at most 2 days.
• Text sent for "Wall from a sentence": not stored by us; up to 30 days at OpenAI for abuse detection.

Your choices and your rights

Each kind of sharing can be stopped by you, and stopping it ends our use of that data:

• Usage statistics: switch them off in Settings.
• "Wall from a sentence" with OpenAI: choose on-device splitting on that screen.
• Face softening on the Lock Screen: switch it off in Settings.
• Your name in invitation links or on a wish: switch it off on the invitation screen or when editing your wish.
• A wish: delete it on the Wish Wall.
• Calendar, Reminders, camera, microphone, photos and notifications: change the permission in iOS Settings at any time.
• All local data: Settings › About and your data › "Delete everything", or delete the app.

Data on our server is not linked to your name or Apple Account, so we usually cannot find it by who you are. Under GDPR, the UK GDPR, KVKK, CCPA and similar laws you may ask us for access, correction, deletion or a copy of your data, object to its use, or complain to your data protection authority. Write to [email protected]; we will answer within 30 days. We rely on your consent for usage statistics, face softening and sending a sentence to OpenAI, and on providing the features you use (and our legitimate interest in preventing abuse) for everything else.

Security and data breaches

Data is sent to our server only over encrypted connections (HTTPS), access to our server and its data is limited to the developer, and we keep as little as possible. If a data breach affects data collected through DailyWall, we will inform the affected users and the authorities as the applicable law requires — through the app, on this website and, where we have your e-mail address, by e-mail.

Children

DailyWall is not directed at children under 13 and does not knowingly collect personal data from children. There is no account to create at any age. Children under 13 should not post on the public Wish Wall. If you believe a child has sent us personal data, write to us and we will delete it.

Changes to this policy

If anything here changes, the new version is published at this address with a new date. Material changes are also mentioned in the app's release notes, and where the law requires it we will ask for your consent again.