Daylyf — Your Data Rights & How to Delete Your Account
Last updated: 25 June 2026
Operator: Daylyf Ltd
Contact: [email protected]
1. Your rights at a glance
Under the UK GDPR and EU GDPR you have the right to:
| Right | What it means | How to use it on Daylyf |
|---|---|---|
| Access | Get a copy of all the personal data we hold about you. | Email [email protected] or use Profile → Legal & Account → Request my data. We respond within 30 days. |
| Rectify | Correct anything that's wrong. | Most fields you can edit yourself in Profile. For the rest, email us. |
| Erase | Have your data deleted. | Use Profile → Legal & Account → Delete my account, or email [email protected]. |
| Restrict | Pause our use of your data while a question is resolved. | Email [email protected]. |
| Object | Object to a particular use of your data. | Email [email protected]. |
| Portability | Receive a structured copy of the data you gave us. | Email [email protected] — we'll deliver a JSON export. |
| Withdraw consent | Pull back any consent you previously gave. | Marketing emails: unsubscribe link in any email. Push notifications: device settings. Other consents: email us. |
| Complain to the ICO | Lodge a complaint with the UK regulator. | https://ico.org.uk/make-a-complaint/ |
We never charge a fee for any of these requests unless they are clearly excessive (in which case we'll explain why before charging anything).
2. How to delete your Daylyf account
You can delete your account at any time. The simplest way is inside the app:
- Open Daylyf.
- Go to Profile (bottom-right tab).
- Scroll to Legal & Account.
- Tap Delete my account.
- Read the deletion notice, type the confirmation word, and confirm.
- You'll be signed out immediately. The deletion job runs within minutes.
You can also email [email protected] from your registered address with the subject "Delete my account" and we will action it within 30 days.
3. What gets deleted
When you delete your account, we delete:
- Your sign-in record (auth user, password hash)
- Your profile (name, avatar, phone, role)
- Your verification flags (Verified ID / Email / Phone status)
- Your trust score history
- Your push notification token
- Your favourites
- Your enquiries
- Your chat messages on both sides of any conversation
- Your check-in photos and EXIF after their retention window expires
- Your draft listings (and active listings if you have no upcoming bookings)
Avatar files in storage and listing photos in storage are removed too.
4. What we keep, and why
UK and EU law requires us to retain a minimum amount of data even after you ask for deletion:
| Data | Why kept | How long |
|---|---|---|
| Booking and payment records | Tax and accounting law (UK Companies Act, HMRC) | 7 years |
| KYC outcome (approved / rejected — not the document) | Anti-fraud and AML obligations | 5 years |
| Marketing opt-in record (if you ever opted in and then out) | Proof you previously consented and then withdrew it | 12 months after withdrawal |
| Aggregated, anonymised analytics that cannot be traced back to you | Product improvement | Indefinitely |
This minimum legal footprint is encrypted, access-controlled, and used only when legally compelled (regulator request, fraud investigation, court order).
5. Active or upcoming bookings block deletion
If you have active or upcoming bookings, deletion is paused until those bookings are resolved.
- As a guest: cancel any upcoming bookings first (see Bookings tab), then come back.
- As a host: cancel or complete any upcoming bookings on your listings first. Daylyf will not silently void a guest's reservation.
If you genuinely cannot resolve the booking yourself (e.g. you've lost device access), email [email protected] and we'll help.
6. After deletion
- You will be signed out of all devices.
- You can sign up again later, but it will be a fresh account — old reviews, bookings, listings, and trust badges do not transfer.
- We aim to complete the irreversible deletion within 30 days, although the in-app job typically completes within minutes.
7. Children
If you are under 18 and have somehow created an account, contact [email protected] and we'll delete the account immediately.
8. Questions
Email [email protected]. We are obliged to answer within 30 days under UK GDPR.
End of Data Deletion Notice.