The short version: we store the trip data we need to make the app work. We never sell any of it. Journal entries are encrypted on your device before they leave — even we can't read them. Full policy below.
To make dani.go work, we store:
We don't track you across the web. We don't fingerprint your device. We don't read your journal — by design we can't, because it's encrypted on your device before it leaves.
Every memory you write into dani.go is encrypted on your device with a key derived from your account password. The server sees only ciphertext. If someone breached our servers, they would see nothing — not photos, not notes, not titles. If we received a subpoena for your journal, we would have nothing to hand over.
This is real end-to-end encryption, not a marketing term. It also means: if you forget your password, nobody can recover your journal for you. We don't have the key. That tradeoff is the point.
Nobody, unless you explicitly ask us to. Specifically:
We do not share data with advertisers, data brokers, or third parties for marketing.
You can export every trip, every memory, and every file associated with your account at any time from Settings → Export. You can delete your account at any time — doing so permanently destroys your journal key, making all encrypted content irrecoverable, and queues the rest of your data for deletion within 30 days.
Questions, concerns, or data requests: privacy@dani.go. We respond within 7 business days.
Download dani.go and tell dani where you want to go. She'll take it from there.
The short version: we store the trip data we need to make the app work. We never sell any of it. Journal entries are encrypted on your device before they leave — even we can't read them. Full policy below.
To make dani.go work, we store:
We don't track you across the web. We don't fingerprint your device. We don't read your journal — by design we can't, because it's encrypted on your device before it leaves.
Every memory you write into dani.go is encrypted on your device with a key derived from your account password. The server sees only ciphertext. If someone breached our servers, they would see nothing — not photos, not notes, not titles. If we received a subpoena for your journal, we would have nothing to hand over.
This is real end-to-end encryption, not a marketing term. It also means: if you forget your password, nobody can recover your journal for you. We don't have the key. That tradeoff is the point.
Nobody, unless you explicitly ask us to. Specifically:
We do not share data with advertisers, data brokers, or third parties for marketing.
You can export every trip, every memory, and every file associated with your account at any time from Settings → Export. You can delete your account at any time — doing so permanently destroys your journal key, making all encrypted content irrecoverable, and queues the rest of your data for deletion within 30 days.
Questions, concerns, or data requests: privacy@dani.go. We respond within 7 business days.
Download dani.go and tell dani where you want to go. She'll take it from there.