DAYSTA FOR WINDOWS

Daysta Privacy Policy

Last updated: 2026-09-05 Effective date: 2026-09-05 Version: 1.3

Nyarrow Studio ("we", "us", or "our") respects your privacy. This policy explains how we handle personal information and data in connection with the software "Daysta" (the "Software").

1. Core Principle — Your Media Never Leaves Your Device

All video analysis and editing performed by the Software happens entirely on your device.

• The videos, photos, and music you load, and the videos you produce, are never transmitted to our servers or to any third-party server.
• The AI models used for face recognition, speech recognition (automatic subtitles), and scene analysis are bundled with the Software and run on your device. No cloud API is used.
• The only internet communication the Software performs is Microsoft Store licence verification, the purchase of paid features, and showing the Store's rating (review) screen. This communication takes place through Windows and the Microsoft Store, and the other party to it is Microsoft. We do not obtain any personal data about you through it.
• The Software makes no other connections. It sends no usage data and no crash reports.
• We obtain information about you only if you yourself contact our support channel (Section 2). Note that our website performs anonymous, cookie-free traffic measurement (Section 10).

2. Information We Collect

2.1 Information you enter in the support form

The "Contact support" item in this software leads to a support desk shared across all Nyarrow Studio products (the form opens in your default browser). What is sent is your message, the subject, the type of inquiry, an email address if you choose to give one, and technical information attached automatically so that we can reproduce problems (your browser type and version, your operating system type and version, and the version of this software). A thread identifier is also generated so the conversation can continue.

We use this only to answer your inquiry and to improve quality, and we store it on infrastructure operated by companies outside Japan (we cannot confirm that the server itself is in Japan). Delivery of reply notification emails is likewise entrusted to a company outside Japan. Your inquiry is anonymised automatically after a period of time, and the link that opens your thread expires after a period of time as well.

Full details — where it is stored, how long it is kept, who processes it, and how to request access or deletion — are set out in the support desk's privacy policy at https://support.nyarrowstudio.com/legal/privacy-en. For support inquiry data, that policy takes precedence over this one.

2.2 About Crash Information

We do not collect crash reports or diagnostic data from the Software.

Windows does, however, include Microsoft's own error reporting mechanism, and if the Software terminates abnormally Microsoft collects that information. What we receive from Microsoft is statistical only (counts and error types) and contains nothing that identifies you personally. That collection is performed by Microsoft and is governed by the Microsoft Privacy Statement and your Windows diagnostic data settings.

2.3 Purchase Information

Purchases of the Software are processed by the store (e.g. Microsoft Store). We receive only aggregated licence and sales reports from the store; we do not receive information identifying you personally, nor any payment information.

3. Handling of Face Data

The Software can recognise specific people appearing in your videos in order to prioritise scenes featuring them. Our policy on this is as follows:

1. Face embeddings (numeric data derived from face images) never leave your device. They are not transmitted to our servers or to any third party, and we do not collect them. Face embeddings may constitute an "individual identification code" under Japan's Act on the Protection of Personal Information; however, they are generated, stored, and matched entirely on your device, and we neither collect nor handle them.
2. The AI models used for face detection and matching are bundled with the Software and run entirely on your device.
3. Data for people you register is stored only on your device, in two places:
   • The person library: inside the %LOCALAPPDATA%\Daysta folder
   • Project files (.daysta): if you select a person when creating a video, a copy of that person's face embeddings is also stored inside that project file, so that the project remains self-contained. Project files are saved wherever you choose to put them.

To erase this data completely, delete the person from the library and also delete any project file in which that person was selected (or remove the selection and save the project again). In all cases, this data never leaves your device.

1. Because we do not collect face data, we cannot and do not provide or sell it to third parties, nor use it for advertising or any other purpose.
2. Face data is processed by you, on your own device, for your own purposes. We do not determine the purposes or means of that processing and cannot access the data.
3. If you work with videos showing other people, responsibility towards those people rests with you (see Section 6 of the Terms of Service).

4. Purposes and Legal Bases

The purposes and legal bases for information sent through the support form (Section 2.1) are set out in the support desk's privacy policy at https://support.nyarrowstudio.com/legal/privacy-en.

We do not use collected information for advertising, profiling, or automated decision-making.

5. Disclosure to and Processing by Third Parties

We do not disclose collected information to third parties except:

1. with your consent;
2. where required by law, or in response to a lawful request from a court or public authority;
3. where we engage service providers to process information on our behalf, to the extent necessary for the purposes set out in this policy.

Information sent through the support form (Section 2.1) is entrusted to companies outside Japan, to the extent necessary to operate the support desk. We enter into appropriate data processing agreements (DPAs) with these providers and supervise them as required. The categories of processor, their location, and how to request their specific names are set out in the support desk's privacy policy at https://support.nyarrowstudio.com/legal/privacy-en.

Information Microsoft collects in connection with distributing the Software and processing payment — including the error reporting described in Section 2.2 — is collected by Microsoft independently, as a separate controller; we neither provide personal data to Microsoft nor entrust processing to it. Microsoft's handling is described in the Microsoft Privacy Statement.

6. International Transfers (Provision to Third Parties in Foreign Countries)

• The only information we collect that crosses borders is information sent through the support form. As described in Section 5, it is entrusted to companies outside Japan, which under Japan's Act on the Protection of Personal Information constitutes the provision of personal data to a third party in a foreign country (Article 28 of the Act).
• The basis for these transfers, the equivalent safeguards in place, how to obtain information about the recipient country and its legal regime, and how to obtain a copy of the Standard Contractual Clauses used for transfers from the EEA and the UK are all set out in the support desk's privacy policy at https://support.nyarrowstudio.com/legal/privacy-en.
• The Software itself never transmits your media or usage data outside your country (Section 1).

7. Retention

Uninstalling the Software does not remove the project files and settings you created (this is intentional). To remove them completely, manually delete the %LOCALAPPDATA%\Daysta folder. Note that project files (.daysta) you saved elsewhere are not inside that folder and must be deleted separately.

8. Your Rights

You have the following rights in respect of information we hold about you:

• the right to request access;
• the right to request rectification, addition, or deletion;
• the right to request suspension of use or erasure (and, where the GDPR applies, restriction of processing);
• the right to data portability (where the GDPR applies);
• the right to object (Art. 21 GDPR): where we process information on the basis of legitimate interests (Art. 6(1)(f)) — such as retaining support correspondence — you may object at any time on grounds relating to your particular situation. We will then stop that processing unless we can demonstrate compelling legitimate grounds;
• the right to lodge a complaint with a supervisory authority (your national data protection authority where the GDPR applies; the Personal Information Protection Commission in Japan).

How to make a request: Please contact us using the details in Section 13. After verifying your identity, we will respond without delay in accordance with law. No fee is charged (actual postage may be charged if you request disclosure by post). The detailed procedure for requests concerning information sent through the support form — including how we verify your identity — is set out in the support desk's privacy policy at https://support.nyarrowstudio.com/legal/privacy-en.

We hold information only about people who have contacted us. The Software has no account feature, so if you have never contacted us, we hold no information about you at all.

9. Children's Privacy

The Software is not directed to children. We do not knowingly collect personal information from anyone under 13 (or under the age set by the relevant member state, generally 16, within the EU).

While the Software is intended for editing family videos, that concerns the content of the material being edited and does not mean the Software is intended for use by children.

10. Cookies and Similar Technologies

The Software does not use cookies (it is not a web browser and has no mechanism for storing cookies). On the enquiry form, the platform hosting the form may use cookies or similar technologies for anti-spam and security purposes. We do not use cookies for analytics or advertising.

Our website (daysta.nyarrowstudio.com) performs anonymous, cookie-free traffic measurement (Cloudflare Web Analytics). It does not identify individual visitors and does not track you across sites; we receive aggregated statistics only.

11. Security (Safety Management Measures)

We take the following measures to protect the information we collect:

• Data minimisation: the Software is designed not to collect personal data at all. It never transmits your media or usage data to us, and the only information we obtain is what you send us in an enquiry.
• Organisational and personnel measures: only pre-authorised staff can view and respond to enquiries, and access requires authentication.
• Technical measures: encryption in transit, unguessable thread links, and access controls on administrative functions.
• Supervision of processors: we conclude data processing agreements (DPAs) with our processors and review their handling.
• Understanding the external environment: enquiry information is processed by providers outside Japan, and the country in which the storage servers sit cannot be determined, because those providers do not publish it. The location of the processors, that country's data protection regime, and the measures we take having reviewed it are set out in the support desk's privacy policy at https://support.nyarrowstudio.com/legal/privacy-en. In connection with your use of the Software, the only personal data we handle in a foreign country is what you send us in a support enquiry (the Software shows no advertising and sends no crash or usage data; see Sections 1 and 2.2). For the traffic measurement on our website, see Section 10 (it does not identify individual visitors, and we receive aggregated statistics only).

We will respond without delay to enquiries about these measures, to the extent that doing so does not itself compromise security.

12. Changes to This Policy

We may amend this policy where required by changes in law, the addition of features, or other need. For material changes (including where we begin collecting new categories of information) we will give advance notice within the Software and, where necessary, obtain your consent again. An amended policy takes effect on the effective date stated in it, or, absent such a date, when posted.

13. Contact

For questions about this policy, or to exercise the rights described in Section 8, please contact:

• Business name: Nyarrow Studio
• Address: 1-4-3 Sengencho, Wizard Building 402, Yokohama-shi Nishi-ku, Kanagawa-ken 220-0072, Japan
• Contact: https://support.nyarrowstudio.com/contact?product=daysta

We operate as a sole proprietorship and identify ourselves in this policy by our trade name (Nyarrow Studio). Any matter required by Article 32(1) of Japan's Act on the Protection of Personal Information that is not stated in this policy — including the name of the individual operator — will be provided without delay on request to the contact above (Article 32(1) expressly permits this information to be made available by responding without delay to a request, rather than by publication).