Last Updated: June 18, 2026
Young Dai Zi Innovation ("we," "our," or "us") is the Data Controller committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the LuveDay application (the "App").
By creating an account or using LuveDay, you agree to the collection and use of information in accordance with this policy.
We collect only the information necessary to provide our services, improve performance, and ensure security.
To create an account and verify your identity, we collect:
To ensure absolute privacy, LuveDay utilizes End-to-End Encryption (E2EE). The following content is encrypted on your device before being transmitted to our servers, meaning we have zero technical ability to read, view, or access it:
While the contents of your messages, files, and events are completely encrypted, certain non-content data (metadata) must remain visible to our servers to route communication and sync your data across devices. We collect and process:
This metadata does not contain any readable personal content or message context.
We store the financial data you manually and voluntarily input to provide tracking features. This includes amounts, categories, and notes.
Important: We DO NOT collect or process bank account numbers, credit card numbers, or online banking login credentials. We do not connect to banking APIs.
Providing this information is voluntary. By entering data into the Finance Tracker, you provide explicit consent for us to process this information solely for your viewing and analytics.
We collect non-personal technical data to troubleshoot issues and improve App stability:
To protect your privacy, we strictly do not collect:
To provide specific features, LuveDay may request access to:
You can revoke these permissions at any time in your device settings.
We use the collected data for the following purposes:
Strict No-Sale Policy: We do not sell, trade, or rent your personal data to third parties for marketing purposes.
We retain your data only as long as necessary to provide our services to you.
| Data Type | Retention Period |
|---|---|
| Encrypted Text Messages & Metadata | Stored indefinitely until you manually delete them. |
| Encrypted Images & Files | Stored indefinitely until you manually delete them. |
| Encrypted Calendar & Anniversary Events | Stored indefinitely until you manually delete the entries. |
| Finance Data | Stored indefinitely until you manually delete the entries. |
| Account Info | Retained until you delete your account. |
We use trusted third-party service providers to help us operate LuveDay. These providers process data on our behalf and are subject to strict confidentiality and security obligations.
We use Amazon Web Services (AWS) for secure data hosting and server infrastructure. Third-party infrastructure hosts only your encrypted data payloads and metadata; they have no structural capability to read your encrypted content.
We use third-party email providers to send verification emails and support communications.
Your information, including personal data, is processed at our operating offices and in any other places where the parties involved in the processing are located (including AWS servers). This means that this information may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.
We take the security of your data seriously. We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, or destruction.
However, please be aware that no method of transmission over the internet or method of electronic storage is completely secure. Therefore, we strive to protect your data, we cannot guarantee its absolute security.
To preserve end-to-end security, your account's cryptographic private keys are saved on our database in an encrypted format. They are encrypted locally on your device using a key derived from your account password or custom passkey before being transmitted.
Because your raw password or passkey is never stored on our servers, we do not possess the key to decrypt your private key. If you lose access to your master password or passkey, we cannot recover or decrypt your end-to-end encrypted messages, files, or events.
In the event of a personal data breach, we will notify the Personal Data Protection Commissioner of Malaysia within 72 hours. If the breach is likely to result in a high risk to your rights and freedoms, we will notify you without unnecessary delay. Note that because your content is end-to-end encrypted, a server breach would still protect your actual message text, files, and events from being read by unauthorized parties.
Depending on your jurisdiction, you may have specific rights regarding your personal data, including:
You may delete your account at any time within the App. Upon account deletion, the following occurs:
Learn how to delete your account HERE
Please Note: Once an account is deleted, this action is irreversible and data cannot be recovered.
LuveDay is not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If we discover that a child under 16 has provided us with personal information, we will immediately delete this information from our servers.
We may update this policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You will be deemed to have accepted such policy changes by continuing to use the Service, so do review it frequently.
This Privacy Policy shall be governed and constructed in accordance with the laws of Malaysia, without regard to its conflict of law provisions.
If you have any questions or concerns about this Privacy Policy, please do contact us: studio@youngdaizi.com