Effective Date: Oct 2, 2026
daplit is operated by PIN YOUR MEMORY LLC (“we,” “us,” or “our”). This Privacy Policy explains how information is handled when you use our mobile application, Shared Note, invitation pages, and related services (the “App” or “Services”).
Ordinary photos and memories are processed locally on your device. Shared Note is an optional cloud sharing feature: submitted entries and notebook information are stored and synchronized through Apple CloudKit, and daplit operates a separate invitation service. Purchase, authentication, usage, diagnostic, and support information may also be processed by us or our providers as described below.
For privacy questions or requests, contact [email protected]. This policy explains our practices; it does not replace consent where applicable law requires it.
Photos, labels, and other content you import or create in the App's local memory features remain on your device and are not uploaded to daplit's servers by those features. Your device and any backups you arrange may contain copies under your device and backup settings.
Shared Note drafts are saved locally and are not uploaded to the shared CloudKit notebook through the normal draft-saving process. Submitting an entry changes how it is handled, as described below. Shared Note currently supports written text, without shared photo, audio, or video attachments.
Shared Note creates a notebook for its owner and one other person who accepts an invitation. To provide it, the App processes and sends to Apple CloudKit:
The App also keeps local copies of notebooks, synchronized entries, drafts, and synchronization information. App identity and display-name profile information, including an app identifier and CloudKit user record identifier, are stored using local Keychain storage and private CloudKit records. Display names are chosen by users and are not verified legal identities.
Entries may contain personal or sensitive information that you or the other person chooses to write, including information about third parties. Consider what you include and whether you have the right to share it.
The public invitation links you receive use share.daplit.com. When the App creates one of these links, our invitation service receives the original iCloud invitation URL and associates it with the creator's app identity. It stores a short code, the destination URL, a fingerprint of that URL, creation time, and invitation status. When a claim is successfully recorded, it clears the destination URL and retains the code, app identity identifier, destination fingerprint, and creation and claim times until the invitation record is deleted under the 180-day retention rule below. Recording a claim can be delayed or retried.
To authenticate requests and help prevent abuse, we process app and installation identifiers, security verification records, and authentication status. These identifiers can distinguish an app identity or installation; they are not necessarily anonymous.
Submitted note bodies synchronize through CloudKit. They are not part of the intended request data sent to our invitation endpoints. This does not exclude content you voluntarily send to support.
Our Services and their providers may process device model, operating system and app version, interaction events, installation or app identifiers, crash reports, errors, request times, and technical network information such as IP addresses and request headers. Invitation pages use browser and language headers to choose presentation and language. Invitation service logs can include invitation codes, app identity identifiers, operation status, and errors.
We use Firebase for app usage analytics and crash diagnostics. We do not send names, contact details, photos, or note text to Firebase.
Invitation pages and our website load fonts from Google Fonts. Loading those resources connects your browser to Google and exposes technical request information, such as your IP address and browser information. The invitation page does not intentionally display note bodies or participant names.
For subscriptions or one-time purchases, we receive information needed to verify purchases and manage access, such as purchase confirmation, product type, transaction identifiers, and subscription status. Apple processes payments through the App Store. We do not collect or store payment card information. A subscription service provider may process purchase status, identifiers, and entitlements on our behalf.
If you contact us, we receive your contact details and whatever information you choose to include. You do not need to send private notes or photos to ask for help. Send only what is necessary to explain your request.
We use information to:
We do not sell personal information or use your photos or note text for advertising or marketing. We do not use information for targeted advertising or track your activity across other companies' apps or websites for that purpose. This does not prevent the sharing required to operate Shared Note or the provider processing described in this policy.
Accepting an invitation provides access to the shared notebook and its history, rather than only a single day's response. The other person receives notebook and prompt text, display names, submitted entries, dates, and related activity information.
Submitting an entry makes it part of the shared notebook. The App normally displays the other person's entry only after both people submit for that date, but submitted content can synchronize to the other person's device before it appears in the interface. Delayed display is an App behavior, not a cryptographic barrier to access to shared records. Local drafts are excluded from the normal upload process.
The other person may retain copied text, screenshots, or other independent copies. Removing access, leaving, or deleting a notebook cannot reliably recall those copies.
Providers handle information under applicable service arrangements and their privacy policies. Any channel you use to send an invitation also handles it under its own practices.
Provider policies: Apple, Google, and Firebase.
We may disclose information available to us when required by law or a valid legal request, or when permitted by law and necessary to investigate abuse, address security threats, or protect people's rights or safety. This does not mean we possess or can retrieve all content stored on your device or in CloudKit.
Submitted entries are stored and shared through Apple CloudKit. daplit does not add end-to-end encryption.
Shared Note uses CloudKit access permissions with public sharing disabled. Accepted notebook participants have read and write access to the shared records. The App enforces its normal rules for submission, editing, archiving, and delayed display.
No storage or transmission system can guarantee absolute security. Protect your device, iCloud account, and invitations, and choose recipients carefully. A forwarded or exposed invitation can allow an unintended person to attempt acceptance; a daplit short link does not authenticate the recipient or independently grant CloudKit access.
With notification permission, Shared Note notifications may show notebook titles, contributor display names, dates, and join, leave, or archive activity. Entry text is not included in the normal notification body. Notification details may appear on your lock screen or other surfaces according to your settings.
Uploads, access changes, and deletions synchronize asynchronously and may be delayed by connectivity, iCloud account status, or service availability. An offline device can retain cached data until it receives the change. Independent recipient copies and any provider backups may persist beyond an App deletion; their handling depends on the circumstances and applicable provider practices.
Deleting the App removes its local app data, but does not itself delete a CloudKit notebook, remove another person's history, erase invitation service records, or cancel a subscription. Signing out of or switching iCloud accounts clears the App's Shared Note cache, synchronization state, and local identity and display-name information; unsynchronized changes can be lost. This does not delete the owner's CloudKit notebook.
All invitation links and their associated invitation records are deleted after 180 days from link creation, whether claimed or unclaimed. This includes the stored short code, any remaining destination URL, destination fingerprint, app identity association, status, and invitation timestamps. Claiming a link does not restart this period. After cleanup, the short link no longer resolves to an invitation. Deleting an invitation record does not itself delete the CloudKit notebook or revoke access already accepted through Apple.
Recording an invitation as claimed clears its destination URL after a successful update, while the associated record and fingerprint remain subject to the same 180-day limit. Viewing the landing page alone does not claim it. Archive, leave, and notebook deletion do not themselves trigger earlier deletion of the related invitation record. Copies in provider backups and information in separate logs remain subject to their separate retention practices.
Authentication records, logs, purchase records, and support communications have separate retention from notebook content and invitation records. The 180-day invitation rule does not set the retention period for these separate categories. Their retention depends on the service purpose, ongoing authentication and abuse-prevention needs, support or dispute handling, legal requirements, and provider retention and backup practices. A notebook action should not be treated as a request to erase all these records. Contact us about retention or to make a deletion request.
You can choose whether to use Shared Note, whom to invite, what to submit, and whether to use the notebook controls described above. You can change notification permissions and previews in your device settings. You can also request deletion of support communications and other personal information handled by daplit at [email protected].
Depending on applicable law, you may have rights to request access, correction, deletion, a portable copy, restriction of processing, or to object to processing. Where processing relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal. You may also have rights to appeal a decision or complain to a privacy regulator. We may need information to verify your request, and legal exceptions and the rights of others may affect its scope. We will address requests as required by applicable law.
Leaving a notebook is not an erasure request. If you want your contribution removed from the owner's retained history, contact us to make a privacy request; ordinary App controls and the submitted-entry editing restriction do not replace your statutory rights. We will assess the request and explain available steps and any applicable limitations. An owner may also delete the entire notebook through the App. We cannot guarantee recall of copies another person has independently retained.
daplit does not impose a minimum age for Shared Note. Applicable children's privacy laws and Apple's account requirements still apply. Depending on the user's age, location, and the circumstances of processing, the law may require parental notice, verifiable parental consent, or other safeguards. Having no daplit age limit does not remove those requirements or children's privacy rights.
Parents or guardians with questions or requests concerning a child's personal information can contact [email protected].
Our providers operate internationally, and information may be processed outside your country, where laws may differ. Applicable legal requirements for international transfers continue to apply; use of the Services does not waive them. Contact us with questions about where your information is processed.
We may update this policy and its effective date as our Services or practices change. We will provide notice of material changes and obtain consent where required by law before applying a change that requires it.
For privacy questions, rights requests, or concerns about Shared Note, contact PIN YOUR MEMORY LLC at [email protected].