Privacy policy
Last updated 24 August 2026
Dayling is a shared logbook for whoever is looking after a child. It records naps, feeds, nappies and hours so that a parent and a nanny can both see the same day. This page says exactly what it keeps, who can read it, and how to make it go away.
Dayling is operated by Western Cloud ("we", "us"), and in the language of South Africa's Protection of Personal Information Act we are the responsible party for the information described here. Under the UK and EU General Data Protection Regulation the equivalent term is data controller.
What Dayling records
Your account
- Your email address and a password, which is stored only as a hash and never in a form we or anyone else can read.
- The name you choose to display, and a profile photo if you set one.
- If you sign in with Google, the name and email address Google gives us. We never receive your Google password.
- When you last signed in.
Your household
- The household's name, its join code, and the country, currency and time zone it uses.
- Who is in it, whether each person is a parent or a nanny, and how they are related to the child.
- Invitations you send, including the email address you send them to.
About the child
- Their first name, surname, date of birth, a photo if you add one, and any notes you write about them.
What gets logged during the day
This is the heart of the app, and some of it is information about a child's health. We are naming it plainly rather than hiding it under a general heading:
- Naps and play, with start and end times.
- Feeds, including the amount in millilitres.
- Meals, including what was eaten and how much of it.
- Nappies and potty visits, including what kind.
- Baths.
- Medicine given, including the name of the medicine and the dose.
- Temperature readings.
- Incidents, such as a bump or a fall, and any notes about them.
- Who logged each of these, and when.
Work and pay
- Shifts worked, with start and end times and any correction a parent makes.
- Hourly or monthly rates, overtime rules, and payments recorded as made.
- Overtime requests, including the reason given.
Lists and plans
- Shopping list items and calendar entries you add.
Your device
- A push notification token, so alerts can reach your phone. It identifies the installation, not you.
- Which alerts you have switched on or off.
When you write to us or something breaks
- Support messages and feature suggestions you send from inside the app, together with your name, email address, the app version and the type of phone.
- Automatic error reports when something in the app fails: the error message the app produced, which screen you were on, the app version and the type of phone. These never include anything you typed, and never include anything logged about a child.
Why we hold it
| What | Why | Lawful basis |
|---|---|---|
| Account and household | To sign you in and to work out which household's records you may see. | Performance of a contract with you. |
| The child's details and the day's log | This is the service. Without it there is no logbook. | Performance of a contract, and your consent for the health related entries. |
| Shifts, rates and payments | So a nanny's hours and pay have one agreed record. | Performance of a contract. |
| Push tokens and alert settings | To send the notifications you asked for. | Your consent, withdrawable in Settings. |
| Support messages and error reports | To answer you, and to find and fix faults. | Our legitimate interest in the app working. |
Who can see it
Everything you log belongs to one household, and only the people in that household can read it. This is not a promise about how carefully the app is written. It is enforced by the database itself: every table refuses to return a row to anyone who is not a member of the household that owns it, so a request that asks for another household's records is refused at the source.
A parent decides who joins. A nanny cannot invite anyone. Someone removed from a household immediately loses access to everything in it.
Western Cloud can read household records through direct database access, and does so only to investigate a fault or a support request you have sent us.
Who else is involved
We use a small number of companies to run the service. They process information on our instructions and for no purpose of their own:
| Who | What for | Where |
|---|---|---|
| Supabase | The database, accounts and file storage | Ireland (eu-west-1) |
| Resend | Sending account and support emails | United States and European Union |
| Sign in with Google, and delivering push notifications to Android phones | United States and European Union | |
| Expo | Building the app and routing push notifications | United States |
Where it is kept
Dayling's database is hosted in Ireland. If you are in South Africa, that means your information leaves the country. We rely on the European Economic Area's data protection laws, which offer a level of protection substantially similar to POPIA, and on the contractual terms our providers are bound by. Push notifications and emails may be handled in the United States by the providers above.
How long we keep it
- Household records are kept while the household exists.
- Closing your account removes your account and everything attached to it, including your support messages and error reports. You can do this yourself in Settings, under Close your account. It is not reversible.
- Entries in a child's log stay in the household while the household exists, because they are a shared record rather than yours alone. A parent can delete an individual entry.
- Error reports and support messages are kept while they are useful and no longer than the account they came from.
A child's information
Dayling is for adults. It is not designed for or directed at children, and nobody under 18 should have an account.
It does record information about a child, entered by their parent or by a carer the parent invited. If you enter information about a child, you confirm you are their parent or guardian, or that you have their parent's permission. A parent can see, correct and delete everything held about their child, and closing the household's account removes it.
Your rights
Under POPIA, and under the GDPR where it applies to you, you can ask us to:
- tell you what we hold about you,
- give you a copy of it,
- correct anything that is wrong,
- delete it, which you can also do yourself in Settings,
- stop using it in a particular way, or object to that use.
Ask by writing to the address below and we will answer within 30 days. If you are not satisfied you may complain to the Information Regulator of South Africa at inforegulator.org.za, or to your local supervisory authority if you are in the EU or the UK.
Security
Traffic between the app and our servers is encrypted in transit, and the database is encrypted at rest. Passwords are stored only as hashes. Access to a household's records is refused by the database itself rather than by the app being careful, which is the difference between a rule and a habit.
No system is perfect. If information is ever exposed in a way that is likely to harm you, we will tell you and the Information Regulator as the law requires.
Changes
If this policy changes in a way that matters, we will update the date at the top and tell you in the app before the change takes effect.
Contact
Western Cloud
privacy@westerncloud.co.za