Privacy Policy

Effective Date: July 3, 2026

Everdaily ("the App", "we", "our") is an iOS application that helps Destiny 2 players track Eververse items and receive push notifications when tracked items become available for Bright Dust. This policy explains what data we collect, why we collect it, and how it is protected.

1. Data We Collect

We collect only the minimum data required to deliver the service:

Bungie Membership ID — a numeric identifier issued by Bungie, used to associate your account with your push notification preferences.
OAuth Access & Refresh Tokens — issued by Bungie.net after you authenticate. Stored encrypted on our server (AES-256-GCM) so we can query the Bungie API on your behalf each day.
APNs Push Token — issued by Apple. Required to send notifications to your device when a tracked item appears for Bright Dust.
Tracked Item Hashes — the internal Bungie item reference numbers for the Eververse items you have bookmarked in the app.

2. Data We Do NOT Collect

We have no interest in your personal identity, gameplay, or behavior. The following are never collected:

Your name, email address, or any contact information
Gameplay statistics, loadouts, or character data
Location data or device identifiers beyond the APNs token
Crash analytics or third-party analytics SDKs
Advertising identifiers (IDFA / IDFV)
Payment information of any kind

3. How We Use Your Data

Your data is used exclusively for:

Daily Bungie API check — each day we query the Bungie Eververse endpoint to see which items are available for Bright Dust. We compare this against your bookmarks.
Notification delivery — if a tracked item is on sale, we send a push notification to your device via Apple's APNs infrastructure.

We do not perform any profiling, advertising, or analytics using your data.

4. Data Storage & Security

Server infrastructure: Private PostgreSQL database hosted on a cloud VPS (DigitalOcean). Not shared with any external database service.
Token encryption: OAuth access and refresh tokens are encrypted at rest using AES-256-GCM before being written to the database. Encryption keys are stored separately from the data.
Transport security: All communication between the app and our server uses HTTPS (TLS 1.2+). HTTP connections are rejected.
Session cookies: Any web-based session cookies are set with HttpOnly and Secure flags. SameSite=Strict is enforced to prevent CSRF.
Access control: Database access is restricted to the application server only. No public-facing database ports are open.

5. Data Sharing

We share no data with third parties for advertising, analytics, or commercial purposes. The only external service we interact with is:

Bungie.net API — to fetch current Eververse store listings. Your Membership ID and OAuth tokens are used solely to authenticate these requests. Bungie's own privacy policy governs their use of this data.
Apple APNs — your APNs push token is transmitted to Apple's push notification servers to deliver notifications to your device. Apple's privacy policy governs this transmission.

We will not sell, rent, or trade your data. Ever.

6. Data Retention

Your data is retained for as long as your Everdaily account is active. If you delete your account, all data — including your Membership ID, encrypted tokens, APNs token, and item bookmarks — is permanently and irreversibly deleted from our servers within 30 days.

7. Your Rights & Controls

You have full control over your data at any time:

Export your data: In the app, go to Settings → Data & Privacy → Export. You will receive a JSON file containing all data we hold associated with your account.
Delete your account: In the app, go to Settings → Data & Privacy → Delete Account. This immediately schedules permanent deletion of all your data from our servers.
Revoke Bungie OAuth access: You can revoke Everdaily's API access at any time via bungie.net → Application History . This will prevent new token refreshes but does not automatically delete data already stored.
Disable push notifications: In iOS Settings → Notifications → Everdaily. This disables delivery but does not remove your APNs token from our system; delete your account to do so.

8. Children's Privacy

Everdaily is not directed to children under 13 years of age, and we do not knowingly collect data from children. Destiny 2 itself requires users to be at least 13. If you believe a child under 13 has provided us with data, please contact us immediately using the information below.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy. For material changes, we will attempt to send an in-app notification.

10. Contact

Questions, concerns, or data requests? We're reachable at:
iamogre.com

For Bungie API-related privacy concerns, refer to Bungie's Privacy Policy .