Privacy Policy

Last updated: 8 October 2026

DailyClassical (“we”, “us”) is an app that offers one classical work a day with a listening guide. This policy explains what information the app and our server handle, why, and the choices you have.

The short version

• You can use DailyClassical without an account. In that case we store nothing about you on our servers.
• If you create an account, we store your email address, a protected form of your password, your language and your favourites.
• Purchases are handled by Apple. We never see your payment details.
• There are no ads, no analytics or tracking tools, and we never sell or share your data for marketing.

Information we handle

When you use the app without an account. The app downloads the day’s piece, the guides and the paintings from our server. As with any internet service, each request carries technical information such as your IP address, the time and the app version. Our hosting provider processes it to deliver the content and keep the service secure. We do not use it to identify you or build a profile.

Your settings (language, theme, daily reminder time) and the pieces you have opened are stored only on your device.

When you create an account. We store:

• your email address;
• your password, only as a salted one-way hash (we cannot read it);
• the language you use the app in;
• when the account was created and when your email address was confirmed;
• your favourite pieces and when you saved them;
• whether Premium has been granted to your account by us (for example to testers).

Sign in with Apple. If you continue with Apple, Apple tells us a stable identifier for your Apple ID in this app and your email address, which Apple has verified. You can choose to hide your email; we then receive a private relay address from Apple that forwards to you. We also keep a token Apple issues so that we can disconnect DailyClassical from your Apple ID when you delete your account. We do not receive your name, your password or anything else from your Apple ID.

To confirm your email address or reset your password we send you a short code or a link. These are stored only in hashed form and expire after 10 and 30 minutes.

Protection against abuse. To stop automated sign-in and sign-up attempts, our server counts recent attempts per IP address and per email address. These counters are stored only as one-way hashes and are deleted after at most one hour.

Purchases. Premium is bought through Apple’s App Store. Apple processes the payment; we receive no payment or card details. We use RevenueCat to check whether you have an active purchase: it receives the App Store receipt for your purchases and an identifier for the app install (your DailyClassical account id when you are signed in), so Premium can be confirmed and restored.

Daily reminder. The reminder is a local notification scheduled on your device. We do not use a push notification server.

Home Screen widget. The widget shows the day’s piece. It reads your language setting from the app on your device and downloads the day’s piece from our server, like the app does.

What we do not do

• We do not show advertising.
• We do not use analytics, advertising or tracking software, and we do not track you across other apps or websites.
• We do not sell your information or share it with anyone for their marketing.

Why we use your information

We use account information to provide the service you asked for: signing you in, keeping your favourites across devices and giving you access to Premium. We use technical request data and abuse counters because we have a legitimate interest in keeping the service available and secure. Where the law requires us to keep or disclose information, we do so only to that extent.

Service providers

We rely on a few companies that process data on our behalf, only to run DailyClassical:

• Railway hosts our server (United States).
• Neon hosts our database (United States, AWS us-east-2).
• Resend delivers our emails (verification codes, password resets).
• RevenueCat manages in-app purchases and subscription status (United States).

Because these providers are in the United States, your information may be processed outside your country. We choose providers that protect data with industry-standard security and contractual safeguards.

Emails

We only send emails you need for your account: email confirmation codes, password reset links and a welcome message. We do not send newsletters or marketing emails.

How long we keep information

We keep your account information for as long as you have an account. You can delete your account at any time in the app (Settings › Account › Delete account). Your email address, password hash and favourites are then deleted from our database immediately. Copies may remain in encrypted database backups for a short time, after which they are overwritten.

Your rights

Depending on where you live (for example under the EU General Data Protection Regulation or Türkiye’s Personal Data Protection Law, KVKK), you have the right to access, correct, delete or export your personal data, and to object to or restrict how we use it. You can delete your account and data yourself in the app. For any other request, email us at the address below. You also have the right to complain to your data protection authority.

Other services we link to

The app links to Spotify so you can listen to the recordings, and credits museums and Wikimedia Commons for the paintings. When you open those links, the other service’s own privacy policy applies. We are not affiliated with Spotify.

Children

DailyClassical is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the date above. If the changes are significant, we will let you know in the app.

Contact

Questions or requests about your privacy: hello@dailyclassical.co