Home

Privacy Policy

Last updated: August 30, 2026

1. Introduction

Welcome to Daily Intentions. This Privacy Policy explains how we collect, use, store, and protect your personal information when you create an account, sign in, or buy digital journaling templates on our site. By using the site, you consent to the practices described here.

Daily Intentions is committed to protecting your privacy and complying with applicable data protection laws, including the Kenya Data Protection Act (2019).

Business name: Daily Intentions
Location: Nairobi, Kenya
Data protection contact: [email protected]

2. Information we collect

2.1 Information you provide

We collect information you give us when you create an account or buy:

  • Account information: name and email address. If you choose a password, we store a hashed version — we cannot read the password itself.
  • Sign-in with Google: if you continue with Google, we receive the name, email address, and profile photo Google shares with us for that account.
  • Locale preference: the country and language you prefer for browsing and checkout.
  • Order information: the products you buy, amounts charged, and the Market you purchased from.

We sell digital downloads only. We do not collect a shipping address.

2.2 Information we collect automatically

  • Cart: items in your Cart, stored in a functional cookie so you can return and check out.
  • Session: sign-in cookies, plus IP address and browser user agent on the session so we can keep the account secure.
  • Device information: browser type and similar technical details needed to run the site.

2.3 Payment information

We use Paystack as our payment processor. We do not store or have access to your card or mobile-money details. Paystack handles payment information under its own privacy policy and security standards. We receive confirmation of the payment and a transaction reference.

3. How we use your information

We use your personal information to:

  • Create and maintain your account, including sign-in by email code, password, or Google
  • Process orders and grant you access to the files you bought
  • Send transactional email — sign-in codes, password resets, and order-complete messages with a link to your downloads
  • Provide customer support and respond to privacy requests
  • Prevent fraud and keep accounts and payments secure
  • Comply with the law in Kenya, including tax and record-keeping duties

We do not currently send marketing or promotional email.

4. Data storage and security

4.1 Where we store your data

Account and order records are stored on secure cloud infrastructure. Downloadable files are stored in Cloudflare R2. These systems may be located outside Kenya. Encrypted backups are kept so we can recover from a failure.

4.2 Data retention

We retain your account, order, and related personal information for 4 years from the date of your last order, which is the legal maximum retention period under Kenyan law. That lets us:

  • Re-deliver files if a download is corrupted or fails
  • Resolve disputes or legal claims
  • Comply with tax and accounting requirements
  • Keep business records as required by law

After 4 years, we securely delete the data. If you want it deleted sooner, contact us at [email protected], subject to legal retention requirements.

4.3 Security measures

  • Encryption of data in transit (TLS) and at rest
  • Hashed passwords and short-lived download links
  • Access controls on servers and file storage
  • Payment security handled by PCI-DSS compliant Paystack

If a data breach affects your personal information, we will notify you as soon as possible and take steps to limit the harm.

5. Data sharing and third-party services

5.1 Payment processing

When you pay, your payment details go directly to Paystack and are subject to Paystack’s privacy policy. We only receive confirmation of the charge and a transaction reference.

5.2 Google sign-in

If you sign in with Google, Google authenticates you and shares the profile information described above. Google’s use of that information is governed by Google’s privacy policy. We do not receive your Google password.

5.3 Email and file storage

We use an email delivery provider to send transactional messages, and Cloudflare to store the files you buy. Those providers process your information only as needed to deliver those services.

5.4 We do not sell your data

We do not sell, rent, or trade your personal information for marketing. We share data only with the service providers needed to run the site and fulfill orders.

6. Your data rights

Under the Kenya Data Protection Act (2019), you have the right to:

  • Access a copy of the personal data we hold
  • Rectification of inaccurate or incomplete data
  • Erasure of your data, subject to legal retention requirements
  • Data portability — receive your account and order data in a structured, machine-readable format
  • Object to processing for specific purposes
  • Withdraw consent for data processing at any time

To exercise these rights, email [email protected]. We will respond within 21 days as required by Kenyan law.

Some records must be kept for tax and accounting. We may not be able to delete everything immediately.

7. Cookies

We use cookies that are needed for the site to work:

  • Sign-in cookies: keep you signed in securely
  • Cart cookie: remembers items in your Cart
  • Locale cookies: remember your country and language preference, and whether you dismissed a locale suggestion

We do not use advertising or analytics cookies. You can control cookies in your browser. Disabling sign-in or Cart cookies will stop you from staying signed in or completing a purchase.

8. International data transfers

Daily Intentions is based in Kenya and sells in more than one country. Your data may be processed in other countries by Paystack, Google, Cloudflare, and our hosting and email providers. By using the site, you consent to that transfer. We expect those providers to keep appropriate security measures in place.

9. Children’s privacy

The site is for adults aged 18 and above. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not create an account or place an order.

If you believe a minor has given us personal information, contact [email protected] and we will remove it.

10. Email

We send transactional email only, including:

  • Sign-in and email-verification codes
  • Password-reset codes
  • Order-complete messages with a link to your downloads
  • Replies to support or privacy requests

These messages are part of running your account and orders. You cannot opt out of them while the account is active.

We do not currently send marketing email. If we ever do, you will be able to opt in or out.

11. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or the law. When we make significant changes, we will post the updated policy with a new “Last updated” date.

Continued use of Daily Intentions after a change means you accept the updated policy.

12. Contact us

Questions or requests about this policy or your data:

Email: [email protected]
Business name: Daily Intentions
Location: Nairobi, Kenya

We will respond within 21 days as required by the Kenya Data Protection Act.

13. Complaints

If you believe your data-protection rights have been violated, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

Office of the Data Protection Commissioner (ODPC)
Website: www.odpc.go.ke

Please contact us first at [email protected] so we can try to resolve it directly. See also our Terms and Refund Policy.