← perfect day
perfect day

Data Processing & Compliance

Last updated: July 25, 2026
Effective: July 25, 2026

Data controller: Mariya Shcherbyna, operating as perfect day (sole proprietor).

Address: 862 West 17th Avenue, Vancouver, British Columbia, Canada.

Data protection contact: hello@joinperfectday.com

This page is the operational companion to our Privacy Policy. It sets out, in one place, the providers that process data on our behalf, the legal basis for each activity, how long we keep data, the safeguards for international transfers, and how we handle your requests. It is written to meet the transparency requirements of the GDPR, the UK GDPR, Canada's PIPEDA, and the App Store guidelines.


1. Sub-processor register

We use the following providers as processors or sub-processors. Each operates under a data processing agreement that requires it to protect your data to the same standard set out in our Privacy Policy.

ProviderWhat they processPrimary locationTransfer safeguard
SupabaseAccount records, scripts, journal, quiz results, authenticationUnited StatesStandard Contractual Clauses, DPA
StripeSubscription and payment dataUnited States and CanadaStandard Contractual Clauses, PCI-DSS, DPA
AnthropicText you submit, for AI script generationUnited StatesStandard Contractual Clauses, DPA, no training on inputs
Fish AudioText and optional voice sample, for voice synthesisInternationalPer provider agreement and its privacy policy
OpenAIAudio you record, for speech-to-textUnited StatesStandard Contractual Clauses, DPA
ResendEmail address, for account and transactional emailUnited StatesStandard Contractual Clauses, DPA
RailwayApplication and backend hostingUnited StatesStandard Contractual Clauses, DPA
NetlifyWebsite hostingUnited StatesStandard Contractual Clauses, DPA

We will update this register when we add or change a processor, and notify active users of material changes.


2. Legal bases for processing

ActivityData usedLegal basis (GDPR)
Run your account and deliver the serviceEmail, scripts, journal, quiz, usageContract, Art. 6(1)(b)
Process your subscriptionBilling and subscription statusContract, Art. 6(1)(b)
Voice cloningVoice sampleConsent, Art. 6(1)(a) and Art. 9(2)(a)
Marketing emailEmail addressConsent, Art. 6(1)(a)
Security, abuse prevention, product improvementAggregated, non-identifying usageLegitimate interests, Art. 6(1)(f)
Keep tax and billing recordsBilling recordsLegal obligation, Art. 6(1)(c)

3. Retention schedule

DataHow long we keep it
Account and contentWhile your account is active
After deletion requestRemoved from live systems within 7 days, purged from backups within 30 days
Voice model (at Fish Audio)Erasure requested within 7 days of your request or account deletion
Billing and tax recordsAs required by law, up to 7 years
Marketing email addressUntil you unsubscribe
Error and security logsUp to 90 days

4. International transfers

We are based in Canada and several processors are in the United States. Where data is transferred out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum. Canada has been recognized by the European Commission as providing adequate protection for personal data in the commercial sector. Together these mechanisms keep your data protected to an equivalent standard wherever it is processed.


5. How we handle your requests

You can make any data request by emailing hello@joinperfectday.com. We handle requests to access, correct, delete, export, restrict, or object to processing, and requests to withdraw consent.


6. Security measures


7. Data breach notification

If a personal data breach is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, as the GDPR requires, and we will notify affected users without undue delay where the risk is high.


8. Automated decisions and profiling

We do not make decisions with legal or similarly significant effects about you by automated means. Our AI features generate content for you, such as a script or spoken audio. They do not evaluate you or make decisions about you.


9. Complaints and supervisory authorities

If you are unhappy with how we handle your data, contact us first at hello@joinperfectday.com. You also have the right to complain to a supervisory authority: in Canada, the Office of the Privacy Commissioner of Canada; in the EEA, your national data protection authority; in the UK, the Information Commissioner's Office.


Data protection contact: hello@joinperfectday.com
Mariya Shcherbyna, operating as perfect day. 862 West 17th Avenue, Vancouver, British Columbia, Canada.