Who operates Dearly Space
Johnson Crystal Kalu, operating Dearly Space in Nigeria, is responsible for the personal information described here. Contact contact@dearlyspace.com about privacy, access or deletion. The legal entity and business address must be confirmed before this draft is approved.
Your memories and your account
You can use Free features offline without an account. Profiles, photos, recordings, stories, letters and reminders are stored on your device. Signing in alone does not upload or synchronise them. Device and operating-system backup settings may separately copy app data.
If you create an account, we process your name, email address, hashed password, verification status, sign-in sessions and device/session label. We use these to provide authentication, account recovery, security and support. App sessions normally last 30 days and may end earlier after logout or a password change.
Optional cloud backups
If you have eligible Premium access and choose cloud backup, the archive can include your profiles, memories and app-owned media. It is uploaded to private Cloudflare R2 storage. We also store its account association, size, checksum, format version and timestamps to manage access, quota and restore. Automatic backup is opt-in and Wi-Fi-only by default. Background timing is controlled by your phone and is not guaranteed.
Connections use HTTPS and R2 provides storage encryption. This release does not encrypt archives on your device before upload and does not provide end-to-end encryption. Authorised server or storage access can read backup contents. Please avoid uploading information about other people without an appropriate basis or permission, especially sensitive information.
Billing and service providers
When checkout is enabled, Paystack or Stripe processes payment through its hosted page. We store payment references, amounts, dates, status and subscription identifiers; we do not collect your full card details through our forms. A payment provider processes information under its own privacy terms and may retain records independently.
Hosting, email delivery and Cloudflare support the website, verification/recovery messages and backups. Service providers may process information outside Nigeria, including cloud infrastructure in Europe and other locations. Before paid launch, the owner must confirm provider arrangements and appropriate safeguards for international transfers; this draft does not certify that review is complete.
Purposes and legal grounds
Account administration and requested paid services support our contract with you. Security, fraud prevention and essential operational records support legitimate interests, subject to your rights. Legal obligations may require retaining limited billing information. Optional backup is a feature you choose and can switch off; where consent is required for particular processing, it must be obtained and can be withdrawn. Switching off automatic backup does not erase existing cloud copies; use the backup controls or account deletion.
Cookies, logs and analytics
The website uses essential session and security cookies, including a remember-me cookie if selected. Hosting and application security logs may contain IP addresses, request details and error information. The admin dashboard reports business totals such as accounts, verified payments and backup usage. We have not added website advertising tracking or in-app event analytics. Those would require a separate review and notice before introduction.
Retention and deletion
Current Premium includes 100 MB across retained and pending backup copies, with up to two completed versions when they fit. Restore remains available for 30 days after paid access expires; cloud cleanup then removes the copies. Expiry does not clear phone memories. Failed storage deletions remain queued and retry.
Request account deletion in website Account settings. Personal account details and sign-ins are removed when the request is accepted. Renewal cancellation and cloud erasure are processed automatically and retried if a provider is unavailable. Minimal payment/subscription references remain for accounting, dispute handling and legal obligations, without the former account name or email. Deletion is not a promise of an automatic refund.
Account deletion does not remotely wipe a phone, files you exported, copies you shared or provider-held records. App logout clears its local library only after confirmation. Export anything you want to keep before deletion. The owner must confirm a documented retention schedule for financial records, server logs and any hosting snapshots before final approval; no fixed retention period has been approved yet.
Your choices and rights
Depending on applicable law, you may request access, correction, erasure, restriction, portability or object to processing, and withdraw consent where it applies. Contact us using the address above; we may need to verify identity without asking for your password. You may also complain to the Nigeria Data Protection Commission. Some requests may be limited by legal recordkeeping or the rights of others.
Children, security and changes
Account holders must have legal capacity to use the service or appropriate guardian authorisation. Saving a child's information requires appropriate authority and care. We do not knowingly invite children to provide account information without that authority. The intended audience and any age-specific safeguards must be confirmed before release.
We use access controls, hashed passwords and private storage, but no system guarantees complete security. Keep your device and credentials safe. Material changes to data practices will be reflected here with an updated effective date and additional notice where required.