Privacy Policy

1. Introduction

Welcome to Dopami ("we", "our", "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our mobile application and website.

By using Dopami, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect the following categories of information:

• Account data: email address, username, and password (stored hashed) when you register.
• Household data: room names, task descriptions, and equipment you configure within the app.
• Usage data: task completions, XP earned, levels, trophies unlocked, and session activity.
• Device data: device type, OS version, push notification tokens (Expo), and app version.
• Invitation data: emails used to invite household members.
• Analytics data (optional, only with your consent): product usage events such as onboarding steps, task creation and completion, trophies earned, and daily challenge progress; a Firebase-generated identifier; and segmentation properties (guest status, whether a home is set up, and app language). We never send your email address or name to our analytics provider.
• Diagnostic data (optional, only with your consent): crash reports and performance data collected via Sentry when the app encounters an error, to help us find and fix bugs. Session replay / screen recording is not currently active.
• Location data (Android, optional): if you enable Home Detection, Dopami accesses your precise current location and your location in the background to create a 200-meter zone around your home. Your exact coordinates remain in the app's secure storage on your device and are not uploaded to our servers.
• Waitlist and launch reward data: email address, generated public referral identity, referral code, referrer relationship, beta-access choice, email confirmation status, rule acceptance, and security signals used to prevent abuse.

We do not collect payment card details payments are processed by a third-party provider.

3. How We Use Your Information

• Provide, operate, and maintain the Dopami service.
• Send push notifications about task assignments and household activity.
• Calculate XP, levels, and gamification elements.
• Send transactional emails (invitations, password reset).
• When you enable Home Detection, detect whether you enter or leave the zone around your home so Dopami can provide presence-aware household features and reminders.
• When you consent to Analytics, measure product usage (such as onboarding completion and feature adoption) to improve the app.
• When you consent to Diagnostics, detect and diagnose crashes and performance issues.
• Administer the waitlist, beta quota, referral rewards, plushie award or weighted draw, fraud prevention, and winner contact.
• Improve app features based on aggregated, anonymized usage patterns.
• Comply with legal obligations.

We do not sell, rent, or share your personal data with advertisers.

4. Location Data and Home Detection

Home Detection is an optional Android feature and is disabled until you choose to enable it. When you enable Home Detection, Dopami first shows an in-app disclosure. Android then asks for access to your precise location while the app is in use and to your location in the background, including when the app is closed or not in use.

Dopami uses your current location once to save the center of a 200-meter zone around your home. Android then monitors entry and exit events for that zone in the background. Dopami does not use your location for advertising or analytics.

Your exact latitude and longitude are stored only in the app's secure storage on your device. They are not uploaded to Dopami's servers, shared with household members, or shared with advertisers or analytics providers. When Android detects that you enter or leave the zone, Dopami sends only the derived status "at home" or "away" to our secured servers. This status may be visible to members of your Dopami household and is used for household presence features and reminders.

You can stop background location access at any time by disabling Home Detection or revoking the location permission in Android settings. Disabling Home Detection stops zone monitoring but keeps the saved home position on your device so the feature can be enabled again. To erase the coordinates, select "Delete saved home location" in Dopami settings. The saved coordinates are also removed from the device when you delete your Dopami account.

5. Analytics, Diagnostics and Your Consent

Analytics and Diagnostics are both optional and switched off by default. The first time you use Dopami, we ask you to choose whether to enable each of them, separately:

• Analytics (Firebase Analytics): helps us understand how the app is used - for example, which onboarding steps cause drop-off, and how often tasks and daily challenges are completed - so we can improve the product.
• Diagnostics (Sentry): helps us detect crashes and performance issues so we can fix them. Sentry is configured to exclude personal data by default, and session replay / screen recording stays switched off pending a data protection impact assessment.

You can review and change these choices at any time from Dopami's Settings > Privacy screen. Turning a setting off stops new data of that type from being sent going forward.

6. Data Storage & Security

Your data is stored on secured servers in the European Union. We use industry-standard measures including HTTPS encryption, hashed passwords (bcrypt), and JWT-based authentication.

Access to production data is restricted to authorized team members only. We review our security practices regularly.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will erase your personal data within 30 days, except where we are required to retain it by law.

Anonymized, aggregated statistics may be retained indefinitely.

Your exact home coordinates remain only on your device until you delete the saved home location or delete your Dopami account. Disabling Home Detection alone stops background monitoring but does not delete the saved coordinates.

Analytics and diagnostic data are retained according to our providers' standard retention periods and are then deleted or anonymized. Turning off Analytics or Diagnostics in Settings stops new data collection going forward but does not retroactively delete data already sent.

Unconfirmed waitlist entries are deleted after 7 days. Waitlist and launch reward data is anonymized after the campaign retention period, initially 180 days after the draw, unless a longer period is required to resolve a dispute or comply with law.

8. Your Rights (GDPR)

If you are in the European Economic Area, you have the following rights:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your personal data ("right to be forgotten").
• Portability: receive your data in a machine-readable format.
• Objection: object to certain processing activities.
• Restriction: request we limit how we process your data.

To exercise any of these rights, email us at privacy@do-pami.com. We will respond within 30 days.

For Analytics and Diagnostics specifically, which we only process based on your consent, you can withdraw that consent at any time from Settings > Privacy without affecting the rest of your account or the lawfulness of processing carried out before withdrawal.

9. Third-Party Services

We use the following third-party services which may process your data under their own privacy policies:

• Expo (push notifications): device tokens are shared to deliver in-app notifications.
• Firebase Analytics (Google): processes product usage events and a device-level identifier when you enable Analytics.
• Sentry: processes crash reports and performance data when you enable Diagnostics.
• Payment provider: billing data is handled entirely by our payment processor we never see your card details.
• Email provider: transactional emails are sent via a third-party SMTP service.
• Supabase: stores and processes waitlist and launch reward participation data.
• Resend: sends waitlist confirmation, referral reward, and beta-access emails.
• Cloudflare Turnstile: helps protect the waitlist form from automated abuse.

10. Children's Privacy

Dopami is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of Dopami after changes constitutes your acceptance of the updated policy.

12. Contact

For any privacy-related questions, contact us at: