DaoJoy Privacy Notice

This is a pre-filled review draft based on the platform currently implemented. The operator name and registered address have been inserted; the final providers, cross-border arrangements and legal wording must still be reviewed before launch.

1. Scope and who is responsible

This Privacy Notice explains how DaoJoy collects, uses, stores, shares and protects personal information when travelers, guides and other users access the DaoJoy website, traveler application, guide application, customer support and related services. The personal information processor and platform operator for these services is DaoJoy LLC, registered address: China Jiangsu Nanjing. Privacy questions and rights requests may be sent to hello@daojoy.com.

This Notice does not replace a separate notice or consent presented for a specific feature, such as precise location sharing, an SOS request, identity verification or a cross-border transfer. If a separate notice conflicts with this Notice for that feature, the more specific notice applies.

2. Information we process

Depending on how you use DaoJoy, we may process:

• Account and identity information, including display name, account type, verified email or third-party sign-in identifier, linked identity provider, session and verification records.
• Traveler request and trip information, including destination, dates, party size, preferences, accessibility information you choose to provide, inquiries, proposals, itineraries and checklist progress.
• Guide information, including public profile, city, languages, biography, availability, service regions, credentials and evidence, assignments, service records, earnings and payout records.
• Booking and transaction information, including service selection, price, currency, payment status, policy snapshot, cancellation, refund, dispute, invoice and support history. DaoJoy does not store complete payment-card credentials; payment providers process payment details under their own terms.
• Communications and content, including trip messages, attachments, reviews, reports, support requests, profile media and trip recaps. Public content is published only through the applicable submission and review flow.
• Safety and location information. With an express action or consent, DaoJoy may process the latest shared location for an active trip, SOS location, incident notes and handling records. DaoJoy does not use these features to build a continuous location history.
• Device and security information, including device metadata, IP address, user agent, session timestamps, service access records and security events.
• Website and contact information, including language preference, contact-form content and basic technical logs. The public website may retain a language preference cookie for up to one year and store language or theme preferences locally in the browser. A contact-form draft containing name, email, subject, message and consent state may remain in session storage until successful submission, reset or the browser session ends.
• AI-assisted feature input and output, such as text submitted for translation, a temporary menu image, itinerary details or trip-recap drafting material. The feature interface describes any additional retention boundary.

Please do not provide passport numbers, financial credentials, medical records or other sensitive information unless DaoJoy specifically requests it through a protected field and explains why it is required.

3. How we obtain information

We obtain information directly from you; from the traveler, guide or administrator involved in the same request or order; from identity, payment, mapping, notification and support providers; automatically from your device and use of the service; and from lawful public sources when needed to verify publicly presented guide information.

If you provide another person’s information, you must have a lawful basis to do so and tell that person how DaoJoy will use it. An adult account holder who provides information about a minor traveler is responsible for having appropriate authority to do so.

4. Purposes and legal grounds

We process personal information only for a clear and reasonable purpose, including to:

• create and secure accounts, verify identity and maintain sessions;
• receive inquiries, prepare proposals, form and perform bookings, arrange guide services and provide trip tools;
• process payments, refunds, cancellations, payouts, reconciliation and tax or accounting records;
• enable trip communications, translation, notifications, customer support, complaints and dispute handling;
• publish approved guide profiles, reviews or trip recaps at the user’s request;
• provide location sharing and SOS handling after the required action or consent;
• detect fraud, abuse, unsafe conduct and policy violations, and protect users, DaoJoy and the public;
• comply with legal duties, respond to lawful requests and establish, exercise or defend legal claims; and
• improve reliability and accessibility using minimized or aggregated information where practical.

Our legal grounds may include your consent; necessity to enter into or perform a contract with you; necessity to comply with legal duties; necessity in an emergency to protect life, health or property; and other grounds permitted by applicable law. Where processing is based on consent, you may withdraw that consent through the feature controls or by contacting us. Withdrawal does not affect processing already lawfully completed.

5. Sensitive personal information and device permissions

Precise location, financial account information, identity evidence, medical or accessibility details and information about a child may be sensitive personal information. DaoJoy processes sensitive information only for a specific and necessary purpose, with enhanced safeguards and any separate consent required by law.

Camera, photo library, location, microphone and notification permissions are requested only when the related feature needs them. You can change device permissions at any time, although the related feature may stop working. Face-to-face voice translation processes only text generated by your device; DaoJoy does not retain audio or text from this feature. Machine translation can be wrong, so important safety, medical, allergy, price and address information must be confirmed with a person.

Trip messaging is not end-to-end encrypted. DaoJoy’s systems must process messages to deliver them and, where requested, to provide translation, reporting, support, safety handling or dispute review. Access is limited by role and may be audited. Private trip messages are not used to train general-purpose AI models. AI output does not independently approve a proposal, booking, payment, refund or moderation outcome; the applicable user or authorized reviewer remains responsible for the final action.

6. Sharing, entrusted processing and public disclosure

We disclose only what is reasonably necessary:

• Travelers, guides and authorized DaoJoy operations staff receive the information needed to handle the same inquiry, booking, trip, safety event, support case or payout.
• Identity, cloud hosting, database, media, email, push notification, mapping, payment, fraud-prevention and AI service providers may process information on DaoJoy’s instructions or under their own legally defined role.
• Professional advisers, insurers, auditors and authorities may receive information when required for compliance, safety, dispute resolution or legal claims.
• A successor may receive relevant information in a merger, restructuring or transfer, subject to applicable notice and protection requirements.
• Guide profiles, approved reviews and trip recaps are public only after the relevant publication action and review. Private trip messages, credentials and precise locations are not public content.

We do not sell personal information. We do not disclose personal information publicly unless you request publication, the law permits it or an emergency makes disclosure necessary to protect life, health or property. Service providers must be bound by appropriate confidentiality, security and purpose limitations.

Depending on the production configuration and feature used, service providers may support hosting, media storage, email, payments, sign-in, maps, notifications, reliability and security. The final production processor list and applicable notices will be reviewed before launch. The applications do not currently embed Google Analytics, Meta advertising pixels or advertising-attribution tracking; the public website may use privacy-oriented analytics.

7. Cross-border processing

DaoJoy serves international travelers and may use providers or authorized personnel in more than one country or region. Before transferring personal information outside the jurisdiction where it was collected, DaoJoy will use an applicable legal mechanism, provide any required notice, obtain separate consent where required and take measures intended to ensure an appropriate level of protection. A feature that requires a regulated cross-border transfer may remain unavailable until those requirements are completed.

8. Retention

We keep personal information for the shortest period reasonably necessary for the stated purpose, subject to legal, accounting, safety and dispute obligations. Current product rules include:

• E-commerce service and transaction records are retained for at least three years after the transaction is completed, or longer where another law or an unresolved claim requires it.
• Only the latest point is kept for an active trip-location share. Stopping the share clears that point, and the stopped sharing-session record is deleted after 30 days. For a resolved SOS event, precise location and free-form incident details are purged after 30 days; the minimized incident record is retained for seven years, or longer where law or an unresolved claim requires it.
• An unfinished temporary upload expires after 15 minutes. Temporary menu images that are not linked to an active record expire after 24 hours, and other unlinked temporary uploads expire after seven days. Face-to-face voice translation audio and text are not retained by DaoJoy.
• A refresh session expires after 30 days of inactivity and in all cases no later than 180 days after issuance, unless it is revoked earlier.
• Policy acceptance, service access records and security events may be retained as needed to prove authorization, agreement, system integrity and legal compliance.
• When account deletion is requested, new business is disabled and public content is withdrawn. If an order, refund, support matter or payout remains open, deletion completes after that obligation is resolved. On completion, sessions are revoked, linked sign-in identities are removed and account content is deleted or minimized, while records that must be retained by law or for unresolved claims are restricted to those purposes.

Backup copies and provider systems may take a limited additional period to expire securely. Where deletion is legally restricted, we will stop other use and keep the information protected.

9. Security and incidents

DaoJoy uses access controls, role-based permissions, encryption in transit, protected storage, media isolation and operational review appropriate to the risk. Private trip information is available only to authorized participants and personnel with a service, support, safety, moderation or dispute need. No system is completely secure; users should protect their devices and credentials and notify us promptly of suspected misuse.

If a personal information incident occurs, DaoJoy will investigate, contain and remediate it and will notify affected individuals and authorities when required by law.

10. Your rights

Subject to applicable law, you may request access, a copy, correction, completion, deletion, restriction, withdrawal of consent, an explanation of processing rules or account deletion. You may also object to or request review of a decision made solely by automated means where applicable.

Use the account and privacy controls in the application or email hello@daojoy.com. We may verify your identity and may refuse or limit a request only where the law permits, in which case we will explain the reason. Account deletion does not cancel outstanding contractual, payment, refund, safety or dispute obligations.

11. Children

DaoJoy accounts are intended for people aged 18 or older. DaoJoy does not ask for a date of birth and does not knowingly allow a child to hold an account. An adult may include a minor in a trip only where the adult has legal authority and remains responsible for the minor. If you believe a child has provided information without proper authorization, contact us so we can investigate and take appropriate action.

12. Changes and contact

We may update this Notice to reflect product, provider or legal changes. We will publish the new version and effective date and, where a change materially affects your rights or requires consent, provide prominent notice and request a new action before the change applies.

Operator: DaoJoy LLC. Registered address: China Jiangsu Nanjing. Privacy and rights requests: hello@daojoy.com. Any dedicated privacy representative must be reviewed and displayed in the production service where required before launch.