Privacy policy

Last updated 31 January 2025

1. Introduction

At Right Day ("Right Day," "we," "us," or "our"), our mission is to help individuals achieve balance, personal growth, and well-being through structured routines, affirmations, and mindfulness practices. We are committed to enhancing your life while respecting your privacy. This Privacy Policy explains how we collect, use, and protect your Personal Data when you interact with our Services.

This Privacy Policy applies to Personal Data we collect from users, visitors, and other consumerswho engage with Right Day through our mobile application, website (https://www.right-day.com/), and other related services (collectively, the “Services”).

This Privacy Policy does not cover the practices of third-party companies, applications, or services that we do not own or control. We are not responsible for their policies and recommend that you review their privacy practices separately.

This Privacy Policy is incorporated into the Right Day Terms and Conditions, available at www.right-day.com/en/terms-conditions/. By accepting the Terms and Conditions and this Privacy Policy, you consent to the collection, processing, and use of your Personal Data as described herein and in accordance with applicable laws. You may revoke this consent at any time by emailing info@right-day.com.

Right Day is committed to transparency, security, and user control. We ensure that your data is handled responsibly, allowing you full control over your personal information, including the ability to access, modify, or delete your data at any time.

2. Data Controller and Scope of Services

The entity responsible for processing user data under this Privacy Policy is:

Company Name: Kam Exchange FZ-LLC
Registered Office: in5 Tech villa, King Salman Bin Abdulaziz Al Saud Street, United Arab Emirates
Contact Email: info@right-day.com

For any inquiries regarding privacy and data protection, you may contact Right Day at the email provided above.

Right Day provides users with structured routines, daily affirmations, motivational phrases, and other personal growth content (the “Content”). Users can access this content through the Right Day mobile application and website at their preferred frequency.

The Right Day application is available for free download on Google Play (Android) and Apple App Store (iOS). By downloading and using the application, you agree to comply with all app store terms and conditions related to app acquisition, updates, and usage.

3. How We Collect Personal Data

We collect Personal Data about you from various sources, including:

  • Directly from you: When you register, create an account, complete your profile, or interact with the Services.

  • Through automated data collection: When you use the application, visit our website, or engage with our content.

  • From third-party partners: If you subscribe or log in via Google, Apple, or other linked accounts.

Right Day collects only the necessary data required to provide and enhance the Services.

4. Personal Data We Collect

We may collect the following types of Personal Data:

4.1 Personal Data Provided by You

To use the Right Day Services, you must provide certain mandatory personal information during the onboarding process. This information includes:

  • Account Information: Name, email address, and login credentials for authentication and account management.

  • Subscription and Payment Information: Payment details if you subscribe to a paid plan (processed securely through Google Pay, Apple Pay, or other third-party providers).

  • User-Generated Content: Affirmations, habit-tracking data, journal reflections, and other personal inputs.

Onboarding Questionnaire: Right Day requires mandatory completion of an onboarding questionnaire during initial setup to personalize your experience. Users who do not complete this process may not be able to proceed with the application setup.

4.2 Data Collected Automatically

In addition to data voluntarily provided, Right Day automatically collects certain information for app performance and user experience improvements. This includes:

  • Device and Usage Data: IP address, device model, operating system, app version, and system settings.

  • Interaction Data: Features accessed, session duration, engagement frequency, and general usage patterns.

  • Cookies and Tracking Technologies: Used for analytics, personalization, and improving service functionality.

4.3 AI-Generated Content and Automated Processing

Right Day uses Artificial Intelligence (AI) and machine learning to generate personalized recommendations, habit insights, and affirmation suggestions.

By using AI-powered features, the USER acknowledges that:

  • AI-generated insights are based on algorithmic predictions and may not always be accurate or free from bias.

  • AI recommendations should not be interpreted as medical or professional advice.

  • AI-driven features are mandatory and can be enabled or disabled in the app settings.

5. Notifications and Reminders

Right Day includes an automated notification system designed to support users in maintaining daily habits and affirmation routines. These notifications serve as reminders to engage with the app’s content regularly.

  • Default Notification Settings: Notifications and reminders are pre-configured and automatically enabled upon account registration. Users do not have the option to modify the frequency or schedule of these notifications within the app.

  • Opting Out of Notifications: Users who do not wish to receive notifications may disable them entirely through their device settings. Right Day respects the USER’s device preferences and will not override notification settings configured at the system level.

By continuing to use Right Day, the USER acknowledges and agrees to the structured notification system as part of the service offering.

6. How We Use Personal Data

Right Day processes personal data to operate, enhance, and personalize its services. The collected data is used to provide, manage, and improve the Right Day mobile application and website. It enables secure user authentication, personalized affirmations, structured routines, and habit-tracking recommendations.

User data supports customer service by allowing responses to inquiries, service updates, policy changes, and technical notifications. Transactional emails, such as subscription confirmations and billing updates, ensure seamless communication.

AI-powered features analyze user behavior and preferences to improve content recommendations, affirmations, mindfulness exercises, and habit tracking. Users have the option to disable or adjust AI-generated suggestions in the app settings.

For payments and subscriptions, Right Day securely processes transactions through third-party providers like Google Pay and Apple Pay. Subscription plans, renewals, billing reminders, and failed payment notifications are managed accordingly.

Security measures protect users from unauthorized access, fraud, and abuse. System integrity is monitored to detect and prevent suspicious activity.

Data analytics and research help enhance user experience, optimize app performance, and refine content recommendations. Internal testing, troubleshooting, and diagnostics ensure technical stability.

Right Day complies with legal and regulatory requirements, enforcing its Terms and Conditions and preventing policy violations.

User data is processed based on specific legal grounds. Contractual necessity applies to authentication, service delivery, and subscription management. Legitimate interest justifies data processing for service improvement, fraud prevention, and security while protecting user rights. AI-driven recommendations, email notifications, and marketing communications rely on explicit user consent, which can be withdrawn at any time. Compliance with legal obligations may require the retention or disclosure of certain data, such as financial transaction records for tax purposes.

Right Day does not use personal data for targeted advertising. Any marketing communications are based on explicit user consent, which can be revoked at any time.

7. How We Share Personal Data

Right Day does not sell user Personal Data. However, we may share data under the following circumstances:

  • With Service Providers:

    • Payment processors for secure subscription management.

    • Cloud hosting services for data storage and infrastructure.

    • AI-powered analytics and personalization providers.

    • Customer support tools for handling inquiries and troubleshooting.

  • With Legal Authorities:

    • If required by law, court order, or government request, Right Day may disclose limited user information.

    • We will notify the affected user unless legally prohibited from doing so.

  • With Third-Party Platforms (If Authorized by User):

    • Right Day uses third-party services, including Firebase (by Google) for cloud storage and authentication and OpenAI’s API for AI-powered features. By using the Services, the USER acknowledges that their data may be processed and stored on Firebase servers, which comply with industry-standard security protocols. Additionally, AI-generated responses and recommendations within the Right Day application utilize OpenAI’s API, but Right Day does not share personally identifiable information with OpenAI. AI interactions are not stored beyond the duration required to generate responses.

  • In the Event of a Business Transfer:

    • If Right Day undergoes a merger, acquisition, or asset sale, user data may be transferred to the successor entity.

    • Users will be notified in advance of any such changes.

Right Day users have full control over their data-sharing preferences and can adjust permissions through the application settings.

8. Your Rights and Choices

Right Day respects user privacy rights and ensures compliance with global data protection regulations. Users have the following rights:

8.1 Access, Update, or Delete Personal Data

  • Users can access and update their personal details via the account settings.

  • To request data deletion, users must contact info@right-day.com.

  • Upon deletion, all personal information will be removed unless required by law to retain certain data.

8.2 Managing AI-Generated Content

  • Users can clear AI-generated affirmations or history upon request.

8.3 Opting Out of Notifications

  • Users can disable push notifications through device settings.

  • System alerts and security-related emails cannot be disabled, as they are essential for account safety.

8.4 Withdrawing Consent

  • Users can withdraw consent for data collection or processing by contacting info@right-day.com.

  • Withdrawal of consent may result in limited functionality of certain features.

8.5 Restricting or Objecting to Processing

  • Users can request that their data processing be restricted under certain legal conditions.

  • Right Day will assess requests on a case-by-case basis in compliance with applicable laws.

Right Day is committed to ensuring full transparency and user autonomy regarding personal data management.

9. Data Security and Retention

Right Day is committed to protecting user data through several security measures. We employ industry-standard encryption protocols to safeguard sensitive information, ensuring that data is stored securely and accessed only by authorized personnel. Our security practices include secure cloud storage, access restrictions, and regular audits to detect vulnerabilities.

To prevent unauthorized access, Right Day enforces multi-layer authentication processes and encourages users to use strong passwords and enable them to enter through third party platforms, such as Google or Apple. In the event of a security breach, affected users will be promptly notified in compliance with legal reporting obligations.

Regarding data retention, Right Day stores personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Account information is retained for the duration of the user's subscription, while user-generated content remains accessible until manually deleted by the user. Transaction records are stored in accordance with financial regulations. If an account is deleted, all associated personal data is permanently erased within 30 days unless retention is required by law.

Users who wish to review or delete their data may contact Right Day at info@right-day.com. Users may request a copy of their personal data before account deletion. Right Day provides an option to download habit tracking and to-do list entries upon request. Requests must be submitted via info@right-day.com before initiating permanent deletion. Once an account is deleted, all associated data is irreversibly erased within 30 days, except for financial records retained for regulatory compliance.

Right Day prioritizes user security by implementing industry-standard encryption protocols, multi-layer authentication, and secure cloud storage. Users can log in via Google or Apple authentication, ensuring an additional layer of security. Additionally, sensitive data is encrypted during transmission and storage to protect against unauthorized access. Users are advised to use strong passwords and enable platform-based security features for additional protection.

10. Changes to This Privacy Policy

Right Day may update this Privacy Policy from time to time to reflect new features, legal requirements, or improvements in security and privacy practices. Any material changes will be communicated to users through email notifications, in-app alerts, or updates on our website before they take effect.

Users who continue to use the Right Day Services after an update is published will be deemed to have accepted the revised terms. If a user does not agree with the updated Privacy Policy, they must discontinue use of the Services and may request account deletion.

For any questions regarding changes to this Privacy Policy, users can contact info@right-day.com.

11. Governing Law & Jurisdiction 

This Privacy Policy shall be governed by and construed in accordance with the laws of the United Arab Emirates. In case of disputes, the parties agree to submit to the exclusive jurisdiction of the courts of Dubai, UAE.
Users from other jurisdictions acknowledge that Right Day operates globally, and by using the Services, they consent to their data being processed in accordance with this Privacy Policy and applicable local laws.

12. Age Restriction

Right Day is intended for individuals aged 18 and above. The Services are not designed for minors or individuals under the legal age of digital consent in their country. We do not knowingly collect or process data from individuals under 18 years old. If we become aware that a minor has registered without parental consent, we will take immediate action to delete the account and associated data. If you believe a minor has accessed the Services, please contact info@right-day.com.