Privacy Policy

Last updated: July 15, 2026

This policy describes how Dalà handles your personal data when you use our mobile app and related services. We built Dalà around one simple rule: your data belongs to you. No ads, no resale, no profiling.

1. Who are we?

Dalà is published by Lucie & Joël SORO, private individuals residing in France. For any question about your data, contact us: parler@dala-app.com.

2. What data do we collect?

Account data

• Email address: used as your identifier to sign in and sync your data across your devices.

Data you enter

You fill in all the app's content yourself: calendar events, lists, memos, avatar and cover photos, household member information, firsts, wishes, expenses, basic medical info (allergies, primary doctor, blood type), countdowns, etc.

Minimal technical data

• Anonymous unique identifier assigned by our authentication provider (Supabase) to link your data to your account.
• Sign-in dates stored by our provider for security reasons (detecting abnormal access attempts).

3. What we do NOT collect

• Your location
• Your phone contacts
• Your browsing history
• Your external health data (Apple Health, Google Fit)
• Your advertising identifiers (IDFA, IDFV)
• Your behavioural usage metrics (clicks, screens viewed, time spent)

4. How do we use your data?

Your data is used only to provide the service you expect:

• Sync your information across your devices and those of your household members
• Enable sharing with the co-parents you explicitly invite via a sharing code
• Authenticate you securely

We perform no behavioural analysis, no ad targeting, no sale to third parties.

5. Who do we share your data with?

With other members of your household

The information you add is visible to the other members of the household you created or joined, according to the permissions you set for each one (a child does not see the budget by default, for example).

With the people you invite

Dalà lets you share a child's page with someone outside your household: the other parent (separated co-parent) or a loved one from the extended circle (grandparent, nanny, etc.). This sharing is never automatic — each time an invitation code is generated, the app asks for your explicit consent and reminds you exactly what will be shared.

When you accept, two things happen: your identity (first name, last name, photo) is sent as a “visit card” to the invited person, so they know who is sharing the child with them; and if your household uses end-to-end encryption, that child's data perimeter is taken out of it so the other household can read it. The rest of your household remains encrypted.

What is shared depends on the role: a separated co-parent receives full access to the child (identity, medical info, first times, wishes, agenda on a case-by-case basis); a member of the extended circle receives read-only access adjusted to their role — for example, medical information stays private for grandparents. Personal notes about a person are never shared.

You stay in control: you can delete an invitation code or revoke access at any time from the child's page.

With our storage provider

Your data is hosted by Supabase (Supabase Inc., headquartered in the United States, with storage infrastructure in Europe for European accounts). Data is encrypted in transit (TLS 1.3) and at rest (AES-256 on server volumes).

6. How long do we keep your data?

Your data is kept as long as your account is active. You can delete your account at any time from the app (Settings → Account → Delete my account) or by contacting us at parler@dala-app.com. Deletion is permanent and irreversible: all your data is erased within 30 days, except where legal obligations require otherwise.

7. Your rights (GDPR)

Under the General Data Protection Regulation (EU 2016/679), you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate information
• Right to erasure: delete your account and your data
• Right to portability: retrieve your data in a readable format
• Right to object: object to certain processing
• Right to withdraw consent at any time

To exercise these rights, contact us at parler@dala-app.com. We will reply within 30 days at most.

If you believe your rights are not being respected, you may lodge a complaint with your national data protection authority — in France, the CNIL at www.cnil.fr.

8. Security

We take the security of your data very seriously:

• Encryption in transit (TLS 1.3) on all communications
• Encryption at rest (AES-256) on storage disks
• End-to-end encryption of the Vault: documents are encrypted on your device and the decryption key is never sent to our servers.
• Optional end-to-end encryption of sensitive content (contacts, notes, calendar, budget…) with a household key stored only on your devices.
• Strong authentication via email + password (complexity policy enforced)
• Optional local lock via biometrics (Face ID, Touch ID or fingerprint)
• Strict per-household data isolation (Row Level Security enabled at the database level)
• Server access limited to Dalà administrators, with logging

9. Children's data

Dalà lets parents manage their minor children's information. This information is entered by the parents, who remain solely responsible for it. We do not directly collect data from children under 13, in line with COPPA and GDPR-K.

User accounts are strictly reserved for adults. A child can appear as a household member (added by a parent) without having a personal account.

10. Cookies and trackers

The Dalà mobile app uses no third-party cookies, no advertising SDK, no behavioural analytics tool (Google Analytics, Firebase Analytics, Mixpanel, Amplitude, etc.).

The dala-app.com website uses only a technical session cookie if you contact us via a form (where applicable). No advertising tracking cookies.

11. International transfers

Our servers are operated by Supabase, which may process certain technical metadata in the United States. Supabase complies with the European Commission's Standard Contractual Clauses for transfers outside the EU, in accordance with the GDPR.

12. Changes to this policy

We may update this policy to reflect legal or technical changes. Any substantial change will be notified to you in the app at least 30 days before it takes effect. The last-updated date is shown at the top of this page.

13. Contact

For any question, request or complaint regarding this privacy policy or the processing of your data:

📧 parler@dala-app.com
Guaranteed reply within 7 business days (usually the same day).