Privacy Policy

Last updated: September 28, 2026

Dally ("Dally," "we," "us," or "our") operates a campus events app for verified University of Maryland students. This policy explains what information we collect through the Dally app and this website, how we use it, who we share it with, and the choices you have.

By creating a Dally account or using this website, you agree to the collection and use of information as described here. If you don't agree, please don't use Dally.

1. Who this policy covers

This policy applies to the Dally mobile app and to this website (joindally.com and related domains). Access to the Dally app requires a verified @terpmail.umd.edu email address; during our current pilot, access is additionally limited to students on an invite list. This website's beta-signup form is open to prospective testers and is how we collect the waitlist described in Section 2.

2. Information we collect

Account & profile information

• Your @terpmail.umd.edu email address, used to verify you're a UMD student and to sign you in.
• Your display name, profile photo (optional), year, major, and interest tags you choose to add.
• A display handle we derive from your email and cannot be changed.

Content you create

• Events you host — title, description, tags, location text, date/time, an optional host note, and attendee limits.
• Your swipes (interested / not interested) on events — this is private to you; other students never see how you swiped, only whether a chat formed.
• Messages you send in a group chat once one forms for an event (text only — Dally chats don't support photo or file attachments).
• Reports you file and users you block.
• Friend links you generate and friend requests you send or receive.

Information about you from other users

If another student reports content or a chat message involving you, we keep a snapshot of that content for review, as described in Data retention. If a friend adds you through an invite link, we record that connection once you both accept it.

Device & technical information

• A push-notification token for your device (used only to deliver notifications you haven't turned off; you can revoke it any time by signing out).
• Standard technical data needed to run the app securely — e.g. app-integrity checks (Firebase App Check) that confirm requests come from a genuine copy of the Dally app, not automated abuse.

Dally does not collect your device's precise GPS location. An event's "location" is a short text description the host types in (e.g. "McKeldin Mall") — we do not track or store your real-time whereabouts.

Website beta-signup form

If you sign up for the waitlist on this website before the app is publicly available, we collect the email address you submit, along with a bot-check verification from Cloudflare Turnstile, so we can invite you when a spot opens.

3. How we use your information

• To operate core features: the events feed, swiping, forming group chats once an event reaches its minimum attendees, and showing "who's in" once a chat exists.
• To power friend connections and the post-event "people you met" prompt.
• To send notifications you've opted into (chat formed, event reminders, chat activity), and safety-relevant notices (like event cancellations) that aren't optional.
• To keep the community safe: reviewing reports, enforcing blocks, and moderating content.
• To verify eligibility (student status, pilot access) and secure the app against abuse.
• To invite you off the waitlist, if you signed up on this website.

We do not use your information to serve you ads, and we do not sell or rent your personal information to third parties.

4. How we share your information

We share information only as needed to run Dally:

• With other students, by design. Your display name, handle, year, major, interests, and profile photo are visible to other students as the app's features intend (e.g., to members of a chat you're in, or to confirmed friends). Hosts can see who's in their group only after a chat forms.
• Service providers who run our infrastructure — Google Firebase (authentication, database, file storage, push notifications, and app-integrity checks) and, for this website, Vercel (hosting) and Cloudflare (bot protection on the signup form). These providers process data on our behalf and are bound by their own security and confidentiality commitments; we don't allow them to use your data for their own purposes.
• Safety and legal reasons. We may access or disclose information if we believe it's necessary to comply with the law, respond to a valid legal request, enforce our Terms of Use, or protect the rights, property, or safety of Dally, our users, or the public.
• Business changes. If Dally is ever involved in a merger, acquisition, or asset transfer, user information may transfer as part of that deal, subject to this policy (or a policy at least as protective).

We never share your information for third-party advertising or marketing purposes.

5. Group chats

Group chats are temporary by design. A chat forms automatically once enough students swipe interested in an event, and it stays open to members until 24 hours after the event ends (or 14 days after formation, if the event never got an end time). Once a chat closes, all members lose access immediately.

After closing, we keep the chat's content for 7 additional days so we can review reports filed about it, and then it is permanently deleted. If content from a chat is reported before it closes, we retain a snapshot of the reported content for moderation purposes even after the surrounding chat is deleted.

6. Data retention

• Account and profile data is kept while your account is active.
• Group chats follow the schedule in Section 5.
• Reports and blocked-user records are kept for moderation and safety purposes.
• "People you met" prompts are deleted automatically 7 days after they're created.
• If you delete your account (see below), we permanently delete your profile and sign-in credentials, cancel events you're hosting, remove you from chats and friend lists, and revoke your links and notification tokens. Some records tied to reports you were involved in may be retained for a limited period where needed for moderation, safety, or legal compliance.

7. Your choices and rights

• Edit your profile — display name, photo, year, major, and interests, any time in the app.
• Manage notifications — turn chat-formed, event-reminder, and chat-activity notifications on or off in Settings. Safety notices like cancellations are always sent.
• Block or report — block a student to end any friendship and hide each other's content, or report content or a user for review.
• Delete your account — permanently, at any time, from Settings. This can't be undone.
• Access or export your data — email us at support.joindally@gmail.com and we'll help.

8. Security

We rely on Firebase's infrastructure and enforce server-side access rules so that, for example, only members of a chat can read it, only you can read your own reports and notifications, and no one can write data they don't own. Data in transit is encrypted. That said, no online service can guarantee absolute security, and we can't promise that information you share will never be accessed in an unauthorized way.

9. Children's privacy

Dally is restricted to people with a valid @terpmail.umd.edu address and is not directed at, or intended for use by, children under 13. We do not knowingly collect information from anyone under 13. If you believe a child has provided us with information, contact us at support.joindally@gmail.com and we'll delete it.

10. California / other state privacy rights

If you're a California resident, you may have rights under the CCPA and similar state laws to know what personal information we collect about you, request its deletion, and correct it. Because we don't sell personal information and don't share it for cross-context behavioral advertising, there's no "opt out of sale/sharing" to exercise. To make a request, email support.joindally@gmail.com; we'll verify your identity (typically via your terpmail address on file) before acting on it.

11. Where your data is processed

Dally currently operates as a pilot at a single U.S. campus. Our service providers (Google Firebase, Vercel, Cloudflare) may process and store data on servers located in the United States or other countries where they operate infrastructure.

12. Changes to this policy

We may update this policy as Dally grows — for example, as we leave pilot and add new features. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app or by email. Continuing to use Dally after a change means you accept the updated policy.

13. Contact us

Questions about this policy or your data? Email us at support.joindally@gmail.com.