Privacy Policy

Effective date: March 20, 2026

What We Collect

DoDoodle collects the minimum data needed to provide the service:

• Account information: Your email address and an encrypted password, used solely for authentication via Firebase Auth.
• Task data: Tasks, brain dump items, settings, streak data, and gamification progress you create within the app. This is stored in Google Cloud Firestore under your user account.
• Technical data: Basic connection metadata (online/offline status) used to manage sync. We do not collect IP addresses, device fingerprints, or analytics.

What We Don't Collect

• We do not use analytics or tracking scripts (no Google Analytics, no Mixpanel, no Hotjar).
• We do not collect location data.
• We do not sell, share, or provide your data to any third party.
• We do not serve ads or use ad tracking.
• We do not use your data for AI training or profiling.

How Your Data is Stored

All data is stored in Google Cloud Firestore with Firebase security rules that restrict access to your account only (auth.uid == uid). Data is encrypted in transit (TLS) and at rest by Google Cloud. A local copy is cached on your device for offline access using Firebase persistent caching.

Cookies and Local Storage

DoDoodle uses:

• Firebase Auth session token: A strictly necessary cookie/local storage entry that keeps you signed in. This is not a tracking cookie.
• Firebase offline cache: IndexedDB storage for offline task access. This stays on your device.
• Cookie consent preference: A local storage entry recording your cookie consent choice.

We do not use any marketing, analytics, or third-party cookies.

Your Rights

You can:

• Export your data: All your task and progress data is accessible within the app.
• Delete your data: Use the "Reset Progress" feature to clear gamification data, or contact us to request full account deletion.
• Close your account: You can stop using the service at any time. Contact us and we will delete all data associated with your account.

Children's Privacy

DoDoodle is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

If we make changes to this policy, we will update the effective date at the top. Continued use of DoDoodle after changes constitutes acceptance of the updated policy.

Contact

For privacy questions or data deletion requests, email privacy@dodoodle.app.