Privacy Policy

01

Introduction

Welcome to Daarli.

Your privacy is important to us. This Privacy Policy explains how AIONSE FZE ("AIONSE", "Daarli", "we", "our", or "us") collects, uses, shares, stores, protects, and otherwise processes your personal information when you use our services.

• the Daarli iOS Application
• the Daarli Android Application
• the Daarli Web Application available at Daarli.com
• our websites, customer support services, AI-powered features, communications, notifications
• and any other products or services operated under the Daarli brand (collectively, the "Services")

This Privacy Policy applies whenever you create an account, access, browse, or otherwise use the Services. By creating a Daarli account or using any part of the Services, you acknowledge that you have read, understood and agree to this Privacy Policy.

02

Company Information

Daarli is owned and operated by:

03

Our Commitment to Privacy

At Daarli, privacy is not simply a legal requirement — it is a fundamental design principle. Daarli is built for families. We understand that our users entrust us with highly personal information, including calendars, household activities, family communications, children's information, and location sharing.

Accordingly, we design our Services following the principles of:

• Privacy by Design
• Privacy by Default
• Data Minimization
• Purpose Limitation
• Security by Design
• Transparency
• User Control

We collect only the information reasonably necessary to provide the Services you request.

04

Scope of This Privacy Policy

This Privacy Policy applies to all personal information processed through our Services including: Daarli iOS App, Android App, Web App, Daarli.com, Customer Support, AI Assistant, Family Chat, Family Calendar, Shared Tasks, Grocery Lists, Meal Planning, Family Location Sharing, Safe Places, Push Notifications, Subscription Services, and future Daarli services unless a separate Privacy Policy applies.

This Privacy Policy does not apply to third-party websites, applications, products, or services that are not owned or controlled by AIONSE.

05

Definitions

• Account means a registered Daarli user profile.
• AI Assistant means Daarli's integrated artificial intelligence assistant providing family assistance, summaries, event suggestions, meal recommendations, and other AI-powered features.
• Child Account means an account created by a parent or family administrator for a minor.
• Family Administrator means the primary account holder responsible for creating and managing a family within Daarli.
• Personal Information means any information that identifies or can reasonably identify an individual.
• Sensitive Information includes precise location information, information relating to children, family relationships, household routines, and other information afforded enhanced protection under applicable law.
• Processing means any operation performed on personal information including collection, storage, use, disclosure, deletion, or transfer.

06

Applicable Privacy Laws

Daarli is available to users globally. Depending on where you reside, your personal information may be protected by one or more applicable privacy laws, including:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)
• European Union General Data Protection Regulation (GDPR)
• UK General Data Protection Regulation (UK GDPR)
• US Children's Online Privacy Protection Act (COPPA), where applicable
• California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)
• Other applicable US state and international privacy laws

Where local law grants you additional privacy rights, those rights remain unaffected by this Privacy Policy. AIONSE FZE is established in the United Arab Emirates. EEA and UK users may contact us directly using the details in Section 24 to exercise their privacy rights.

07

Eligibility

Daarli is intended for families. You must be at least the age required under the laws of your jurisdiction to create an account independently. Individuals under the applicable age of digital consent may only use the Services through a parent, legal guardian, or Family Administrator.

Parents remain responsible for supervising children's use of the Services, including the AI Assistant and any shared family features. Children may not independently purchase subscriptions or create family groups.

08

Privacy by Design

Daarli has been designed around privacy-first principles. Examples include:

• AI conversations are not permanently stored.
• AI conversations are never used to train artificial intelligence models.
• Voice recordings are processed only for speech transcription and deleted immediately after.
• Only the minimum information necessary is transmitted to AI processing providers.
• Employees do not routinely access AI prompts or conversations.
• Family chats are private and visible only to members of the same family group.
• Users control whether location sharing is enabled and may disable it at any time.
• Device biometric authentication never leaves your device — Daarli never receives, transmits, or stores your biometric data.

09

Information We Collect

To provide the Services, Daarli collects information directly from you, automatically from your device, and in limited circumstances from trusted third-party service providers. We collect only the information reasonably necessary to operate, maintain, improve, secure, and support the Services.

9.1 Information You Provide

Account Information: full name, email address, password (encrypted), date of birth, gender (optional), profile photo (optional). Family Information: family name, members, relationships, child accounts, shared household information. Calendar, Tasks, Grocery Lists, Meal Plans, and Family Chat messages — all visible only to authorized family members.

9.2 AI Assistant and Voice Interactions

Voice input is recorded, transmitted securely, converted to text, used to generate a response, then permanently deleted. AI conversations are not permanently stored and are never used to train AI models. Employees do not routinely access AI prompts or responses.

9.3 Location Information

Location sharing is disabled by default. When enabled, location is shared only with members of the same family and can be disabled at any time through Daarli settings or OS permission controls. Only the most recent location necessary is stored.

9.4 Device Information

We may automatically collect device model, operating system, app version, device identifiers, IP address, language settings, time zone, crash reports, and performance metrics to improve reliability and security.

9.5 Permissions

Depending on features you use, Daarli may request access to: Location, Camera, Microphone, Photos, and Calendar. All permissions are optional and may be revoked at any time through your device settings.

9.6 Subscription Information

Premium subscriptions are purchased through the Apple App Store or Google Play Store. We do not receive your complete payment card details. Billing is managed by Apple or Google under their respective privacy policies.

9.7 Cookies and Similar Technologies

When using Daarli.com, we may use cookies to authenticate users, remember preferences, maintain secure sessions, analyze website performance, and measure service usage. Where required by law, we will obtain your consent before placing non-essential cookies.

10

How We Use Your Information

We do not sell your Personal Information. We do not use your Personal Information for automated advertising profiling. We process information only where we have a legitimate business purpose, your consent, or another lawful basis.

• Account Management: create accounts, authenticate identity, prevent fraud, maintain security.
• Family Services: synchronize calendars, manage events, assign tasks, organize grocery lists, create meal plans, enable notifications.
• AI Assistant: generate requested responses using minimum necessary information, following our AI Processing Principles.
• Family Chat: deliver messages, synchronize conversations, notify recipients, protect against abuse.
• Location Services: display location to authorized family members, support Safe Places, send arrival/departure notifications.
• Security: detect unauthorized access, suspicious activity, fraud, and malicious behavior.
• Improvements: analyze aggregated data to improve performance and develop new features.
• Legal Compliance: comply with applicable laws, court orders, and regulatory requests.

11

Legal Bases for Processing

• Performance of a Contract: most processing is necessary to provide the Services you request — creating accounts, maintaining family groups, delivering chat messages, providing AI responses.
• Consent: for location sharing, camera, microphone, calendar access, optional marketing, and non-essential cookies. You may withdraw consent at any time.
• Legitimate Interests: improving Services, preventing fraud, maintaining security, analyzing performance, protecting users.
• Legal Obligations: responding to lawful requests, tax obligations, regulatory compliance, legal investigations.
• Vital Interests: in exceptional circumstances, to protect the vital interests of an individual where legally permitted.

12

Artificial Intelligence (AI) Services

Daarli includes AI-powered features intended to enhance productivity, family organization, and educational assistance. Our AI services are designed to assist — not replace — human judgment.

What AI Can Help With

Daily summaries, family schedules, event planning, recipe recommendations, grocery planning, educational explanations, homework assistance, productivity suggestions, and family organization.

AI Limitations

AI-generated responses may be inaccurate, incomplete, outdated, biased, or unsuitable for your circumstances. Users remain responsible for evaluating AI-generated content. AI responses do not constitute legal, medical, financial, or psychological advice. If you require professional assistance, consult an appropriately qualified professional.

AI Safety for Families

Daarli applies safeguards intended to make AI interactions suitable for family use. However, no AI system can guarantee perfectly appropriate responses in every situation. Parents remain responsible for supervising children's use of AI features.

13

How We Share Your Information

We do not sell your Personal Information. We do not rent your Personal Information. We do not disclose your Personal Information to third parties for their independent marketing purposes. We share Personal Information only as described in this Privacy Policy.

13.1 Within Your Family

Shared calendar events, tasks, grocery lists, meal plans, family chat messages, Safe Places, and family location (if enabled) are visible to authorized family members only. Family information is never publicly searchable.

13.2 Service Providers

We engage carefully selected third-party service providers who act on our behalf and are bound by contractual confidentiality and data protection obligations.

13.3 Legal Requests & Corporate Transactions

We may disclose Personal Information to comply with applicable laws, court orders, or lawful governmental requests. If AIONSE is involved in a merger, acquisition, or restructuring, Personal Information may be transferred as part of that transaction, subject to applicable legal protections. Users will be notified where required by applicable law.

14

International Data Transfers

Daarli is available worldwide. Your Personal Information may be processed in countries other than the country in which you reside. Our infrastructure is primarily located in France, within the European Union.

Whenever Personal Information is transferred internationally, AIONSE implements appropriate safeguards including Standard Contractual Clauses (SCCs), adequacy decisions, contractual data protection obligations, encryption during transmission and at rest, access controls, and organizational security measures.

15

Data Security

Protecting Personal Information is one of our highest priorities. Our security measures include:

• Transport Layer Security (TLS) encryption for data in transit
• Encryption of Personal Information at rest
• Role-based access controls and least-privilege access principles
• Biometric authentication processed entirely on-device — Daarli never receives, transmits, or stores your biometric data
• Passkey authentication where available
• Audit logging, infrastructure monitoring, vulnerability management
• Regular security updates, disaster recovery planning, incident response procedures

While we strive to use commercially reasonable means to protect Personal Information, no method of transmission over the Internet is completely secure. Users are responsible for maintaining the confidentiality of their account credentials.

16

Data Breach Notification

If we become aware of a security incident that results in unauthorized access to Personal Information likely to risk your rights and freedoms, we will: assess and contain the incident without undue delay; notify affected users within legally required timeframes (e.g., within 72 hours under the GDPR where feasible); notify relevant supervisory authorities where required; and provide information about the nature of the incident and steps to protect yourself.

17

Data Retention

We retain Personal Information only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law.

• Account information is retained while your account remains active.
• Family data is retained while required to provide the Services.
• AI conversations are not permanently stored.
• Voice recordings are deleted after transcription.
• Diagnostic and security logs may be retained for a limited period for security and legal compliance.

You may request deletion of your Daarli account at any time. Upon account deletion, your active Personal Information will be scheduled for deletion without undue delay. Certain information may be retained where required by applicable law.

18

Your Privacy Rights

Depending on your country of residence and applicable law, you may have the following rights:

• Right to Access: request confirmation of whether we process your Personal Information and a copy of it.
• Right to Rectification: request correction of inaccurate or outdated Personal Information.
• Right to Erasure: request deletion of your Personal Information where permitted by applicable law.
• Right to Restrict Processing: request temporary restriction of processing of your Personal Information.
• Right to Object: object to processing based on our legitimate interests where permitted by law.
• Right to Data Portability: request your Personal Information in a structured, machine-readable format.
• Right to Withdraw Consent: withdraw consent for location sharing, camera, microphone, optional cookies, or marketing at any time.

To exercise your rights, contact us at: support@aionse.com

19

Children's Privacy

Daarli is designed for families and supports family collaboration under the supervision of parents or legal guardians. Child accounts must be created, managed, and supervised by a parent, legal guardian, or Family Administrator.

For US users: we do not knowingly collect Personal Information directly from children under 13 independently of a parent or guardian's account creation and supervision, consistent with COPPA. We do not use children's information for behavioral advertising.

A parent or guardian may review, request deletion of, or refuse further collection of their child's information at any time by contacting support@aionse.com.

Children may not independently purchase Premium subscriptions. All subscription purchases must be completed by an adult.

20

Marketing Communications

Daarli primarily communicates with users regarding the operation of the Services: account verification, password resets, security notifications, subscription information, and important service announcements. We do not currently send promotional marketing communications. If we introduce optional marketing communications in the future, users will have the opportunity to opt in or opt out as required by applicable law.

21

Third-Party Links

The Services may contain links to third-party websites, applications, or services. AIONSE is not responsible for the privacy practices, content, or security of third-party services. Users should review the privacy policies of any third-party services before providing Personal Information.

22

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide appropriate notice through the Services, by email where appropriate, or by other means required by applicable law. The "Last Updated" date at the beginning indicates the date of the latest revision. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes your acknowledgment of the revised policy.

23

Region-Specific Privacy Rights

European Economic Area & United Kingdom

If you reside in the EEA or UK, you have rights under the GDPR or UK GDPR, including access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and lodging a complaint with your local supervisory authority.

United Arab Emirates

Where applicable, AIONSE processes Personal Information in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

California Residents (CCPA/CPRA)

California residents may request disclosure of categories of Personal Information collected, access to Personal Information, deletion, correction, and limitation of use of certain sensitive information. AIONSE does not sell or share Personal Information for cross-context behavioral advertising.

Other US States

If you reside in a US state with a comprehensive consumer privacy law (Virginia, Colorado, Connecticut, Utah, or others), you may have similar rights to access, correct, delete, and port your Personal Information, and to opt out of certain processing.

24

Contact Us

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact us:

We will make reasonable efforts to respond to privacy-related inquiries within the timeframes required by applicable law.

25

Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Emirate of Dubai and the applicable federal laws of the United Arab Emirates. Nothing in this Privacy Policy limits any mandatory rights afforded to consumers under the applicable laws of their country of residence.

26

Effective Date

Effective Date: July 3, 2026

Last Updated: July 3, 2026