Privacy Policy

Last updated: 2026-09-24

This policy explains what the Daili Android app (com.gabrielepmattia.ilias) does with your data. It covers the app only: Daili is an unofficial app and is not authorised, affiliated with, sponsored or endorsed by Iliad, Spusu or any phone carrier.

Short version: Daili reads your account at the carrier and shows you what you would see on its own site. There is no Daili account, no Daili server keeping your usage, and your credentials stay encrypted on your phone. Signing in with Google or by email, described below, is always optional and is for something else entirely.

This page is a translation of the Italian version, which is the one that governs.

Who is responsible

Gabriele Proietti Mattia is the data controller for what is described below. Contact: apps@gpm.name.

Your account at the carrier

To show you usage, thresholds, options and voicemail, Daili connects directly to your carrier’s site — Iliad today, Spusu on the way — with your own credentials. That traffic goes from your phone to the carrier: Gabriele Proietti Mattia never sees it or collects it.

Under the carrier’s own 4G data network, sign-in happens without you typing a username or password, the same way the carrier’s own site would from a phone. Outside that network the app asks for your credentials, which you can choose to save.

Credentials you choose to save are encrypted, with a key generated and held by Android itself (the Android Keystore) — not a value you choose and not one the app can export. They stay in the app’s private storage, together with a local cache of what the app shows you — usage, active options, voicemail messages — so it does not have to be downloaded again every time you open the app. Neither ever leaves the phone.

Your credentials are never saved in any cloud. Beyond being encrypted as described above, Android’s own automatic backup is turned off for the whole app: they are never part of a Google Drive backup or any other cloud backup. The same holds for direct device-to-device transfer (Android 12 and later): your credentials are excluded there too, not only because cloud backup is off. The only place they are ever sent is your carrier’s own site, to sign you in. There is no Daili server: Gabriele Proietti Mattia does not receive them and does not see them.

Signing out or uninstalling the app removes both from the phone.

Backup & restore (Pro)

You can save your accounts and settings to a single file, wherever you choose with the system file picker — including your own cloud storage, if you want: that is your choice to make, not something Daili does on your behalf.

The file is always encrypted: you set a password of at least 12 characters, which Gabriele Proietti Mattia never sees and never stores — the encryption key (AES-256-GCM) is derived from that password and nothing else. Lose the password, and nobody can read that file again, Gabriele Proietti Mattia included.

Daili itself never uploads the file anywhere. If you choose to put it in your own cloud storage, it arrives there already encrypted, by your own choice.

Restoring a backup never requires Pro, in any build: your own data stays yours whether or not Pro has lapsed, or was ever bought. Creating one is a Pro feature in the Play build; it is free in the store-free build.

Diagnostics: you can turn it off from Settings

The first time you open the app, a dedicated screen asks whether you want to share crash reports and anonymous usage statistics. Both are pre-set to yes, because they help find problems faster than we could on our own — but you can say no right away, or change your mind at any time from Settings.

When they are on, in the Play build Firebase Crashlytics receives crashes, Firebase Analytics receives events such as “signed in”, “widget failed to refresh” or “support screen opened” (with the place in the app you opened it from and how a purchase went, if you made one: trial started, cancelled, failed), and Firebase Performance Monitoring receives loading times — never your usage figures, your credentials or your voicemail content: only a random identifier generated on the phone (not tied to your number or your name) and the usual technical details — phone model, Android version, app version. The store-free build does not include any of this: the switch still appears in Settings, but there is nothing to send anything to.

The app also bundles Firebase Cloud Messaging, Google’s push notification system: it is present in the code but is not currently used to send you anything.

Optional permissions

Daili can ask for two permissions. In neither case is what the app reads because of the permission sent to Gabriele Proietti Mattia or to anyone else:

Contacts (android.permission.READ_CONTACTS, a Pro feature): to show a contact’s name instead of a phone number in usage and voicemail. The lookup happens on the phone; no name or number is collected or transmitted.
Storage (android.permission.READ_EXTERNAL_STORAGE): to preview your wallpaper when you customise a widget’s transparency. The picture stays on the phone and is used only for that preview.

Neither is required for the app’s core features, and you can decline both.

Signing in with Google or by email — optional

Daili has no account of its own, and you never have to sign in to use its features (balance, options, voicemail). Proving your identity is only for three optional things, handled by Gabriele Proietti Mattia’s shared service for the whole family of apps (apps-management.gpm.name) and never by a Daili server, since Daili has none:

reading, inside the app, the replies to a bug report or a feature request, and voting for other people’s requests (one vote each);
appearing, under the name you pick, on the public supporters list described in the next section;
automatically receiving, on every launch, a Pro licence Gabriele Proietti Mattia granted by hand (to a tester, for instance) — a background check that sends nothing at all if you have never signed in.

You can prove your address two ways:

with your Google account (Play build only): the app asks Google to confirm your account’s email is verified, with nothing to type — only that confirmation reaches the family’s service, never your name or your picture;
with your email and a code, in both builds: type your address, receive a six-digit code by email, enter it in the app. No password, no account to create.

Either way, the family service hands back a key, stored encrypted on your phone: it only remembers that you have already proved your address, so you are not asked again every time you open the app. It works for Daili alone, and you delete it immediately by signing out from Settings — at the service too, not only on your phone. None of these three things is ever required to use Daili.

The supporters list — optional

From Settings you can appear, under the name you pick, on the list of people who support Daili’s development — in the app and on this site. Nobody is on it without asking, and you can remove your name at any time.

With a Play subscription, you prove nothing: the app sends the service your purchase’s own token, which Google has already told it about. Google never tells an app who bought, so this is the only proof there is — and it still counts once the subscription has lapsed, for having supported the app at least once.
If you donated (store-free build, through Ko-fi or Stripe), you prove your address as above: the payment platform tells the service which address donated, and the service matches the two.

What becomes public is only the name you choose — never your address, never the amount, never how you paid.

The Pro subscription

From this version on, Daili Pro is a subscription, monthly or yearly, with a free trial of at least 7 days on both plans, handled entirely by Google Play Billing. Google processes the payment; Daili keeps only the subscription state and the purchase token on the phone, encrypted — not to know who you are, but to recognise you have Pro without asking Google again on every launch, and to be able to show you, if you choose, on the supporters list even after the subscription has ended. What Google itself collects about the payment is covered by Google Play’s own privacy policy.

If you already bought Daili Pro as a one-time purchase, before this version, it stays valid for good: Daili recognises it on every launch and never asks you to subscribe, or offers to, for the features you already had.

The store-free build, which compiles no Google Play Billing at all, has nothing to buy: every feature is already unlocked, and the app asks instead, once a week, for a small donation — see above.

The Wear OS watch (Pro)

If you have Pro and a Wear OS accessory paired with your phone, with the Daili companion app installed on it, the phone sends the watch a summary of each saved SIM: name, number, carrier and plan, colour, credit, renewal date, data used and the threshold (at home and abroad), minutes/SMS/MMS used, and the period’s extra cost. This is what lets you see the same thing on your wrist — a screen, a tile and configurable complications — without picking up the phone.

That summary travels only over Google Play Services’ Wearable Data Layer, from the phone to your own paired watch, the same way a file passed between apps on the same Google account would — it never passes through any server, neither Daili’s nor the family’s. The watch app never makes a network request of its own: it only reads what the phone has sent it and shows it. Without Pro, the phone sends the watch an empty list (no SIMs) and the watch shows a locked screen with a button that opens the purchase on the phone.

This feature exists only in the Play build: the store-free build has no Google Play Services to talk to a watch with.

Deleting your account and your data

“Account” here means only the address you proved to sign in with Google or with an emailed code (the section above) — not your account at the carrier, which stays on the phone and never reaches Gabriele Proietti Mattia. If you have never signed in that way, there is nothing to delete beyond what is already described for your credentials and your backup.

If you have signed in, from the Info tab → your requests (where you see replies to your reports) you will find, below “Sign out”, a “Delete my account and data” button: after a confirmation, it deletes the account and everything tied to it straight away. Without the app, or after uninstalling it, the Delete your account page explains how to ask by email and what gets removed.

If signing in to your account fails several times in a row, the app asks you, in a plain dialog, whether you want to help find out why. If you agree, a “diagnostic sign-in” button tries again and, if it still fails, prepares a log with the carrier’s own response page and an excerpt of the app’s logs, then opens the app’s own Report a problem screen. Before showing it, the app strips from the log the number and password you typed, session cookies, email addresses, phone numbers, IBANs and tax codes. The log is attached only if you choose to, and you see all of it before it is sent; nothing goes out until you press Send. The automatic clean-up is thorough but not infallible: the carrier’s page can still contain personal data such as your name or your plan’s thresholds. Gabriele Proietti Mattia uses it only to understand the problem and then deletes it.

Writing to support

From the app you can report a problem or suggest a feature, or open your mail app with an email already addressed to Gabriele Proietti Mattia and prefilled text that includes the app version, whether you have Pro, your Android version, your phone model and the time. You can edit or delete any of it before sending, and nothing goes out unless you send it. If you type in your own email address, it is used only to reply to you.

What Daili never does

There is no Daili account, no password held by Gabriele Proietti Mattia, and you never have to sign in to use the app’s core features.
Your carrier credentials never leave the phone except to the carrier itself, are encrypted when you save them, and are never saved in any cloud.
The summary sent to your watch never passes through any server.
No advertising, and no sale of data to anyone.
No reading of messages, real call history beyond what the carrier already shows you, photos or files, beyond what is described above.

For readers in the EU/EEA and the UK: Gabriele Proietti Mattia does not receive your usage figures, your credentials or your voicemail content from this app.

Diagnostics (crashes and usage statistics) — your consent (Art. 6(1)(a)), given by leaving the pre-set switch on the first-launch screen on, or turning it on in Settings, withdrawable at any time by turning it off.
Signing in with Google or by email, and the Wear OS watch — your consent, given by requesting the code or choosing your Google account (and, for the watch, pairing it), withdrawn by signing out or unpairing the watch.
The Pro subscription — performance of a contract (Art. 6(1)(b)) with Google Play, to deliver what you bought.
A backup you choose to create or restore — your own choice, with Gabriele Proietti Mattia never involved: the file is never sent to them.
An email you choose to send to support is processed on the basis of your consent, given by sending it.

Retention

Encrypted credentials and the local cache stay on the phone until you sign out or uninstall the app. A backup file stays wherever you saved it, for as long as you want: Gabriele Proietti Mattia never has a copy of it. The summary sent to your watch is never kept anywhere: each send overwrites the previous one, on the watch alone.

The key that proves your identity (for Google/email sign-in, the supporters list and feature requests) is shared across every app in Gabriele Proietti Mattia’s family: if you do not use it in any of them for about six months, you get a warning email, and if it is still unused a month later it is deleted together with your address — opening any app in the family, even once, cancels the warning and restarts the clock. It is never deleted while you are on the supporters list, have a donation matched to your address, or have an active subscription: deleting it would remove the proof of something you paid for or chose. Your place on the supporters list stays for as long as you want it there, and disappears the moment you turn it off. A support email is kept while it is useful to resolve the request, then deleted; a failed-login diagnostic file is deleted after it has been reviewed.

Your rights

You may request access to, correction of, or deletion of your personal data. Because Gabriele Proietti Mattia does not hold your usage or your credentials, there is nothing to delete on that side for those: signing out or uninstalling removes them from the phone. For the key created by signing in with Google or by email, and for everything else Daili’s service side knows about you — reports linked to your address, votes, your place on the supporters list, the link between a Play purchase and your address — use Delete your account, from the app or from this site. For an email you sent us, write to apps@gpm.name to have it deleted. You may always lodge a complaint with a supervisory authority.

Children

Daili is not directed at anyone under 13 and does not knowingly collect data from anyone under that age.

Changes

This policy changes when what the app does changes, in the same release as the code. The date below moves with the text.

Last updated: 2026-09-24

Contact

apps@gpm.name