Privacy Policy

Last updated: April 2026

Dopamigo ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account data: email address and display name you provide when registering.

Usage data: focus sessions (duration, task title), tasks (title, category, completion status), room participation (room ID, anonymous flag), and energy level.

Calendar data: if you connect Google Calendar or your device calendar, we access upcoming events solely to help you create tasks. Calendar data is never stored on our servers beyond the task you choose to create.

Analytics: anonymized usage events via self-hosted Umami (analytics.makebyte.de, Germany). No personal identifiers are collected. Data does not leave our infrastructure.

2. How We Use Your Data

To provide core app functionality (syncing tasks, sessions, rooms across devices).

To display your personal stats (focus time, sessions, tasks completed).

To power the AI Sidekick: your task context is sent to OpenAI to generate focus suggestions and check-ins. No data is used to train OpenAI models.

To improve the app through anonymized analytics.

We do not use your data for advertising or sell it to third parties.

3. Data Storage & Processors

Your account and usage data is stored on our own self-hosted server in Germany (IONOS, Montabaur). We do not use Supabase Cloud or any US-hosted database. Your data is not subject to the US CLOUD Act.

Processors:

• Database: Self-hosted Supabase on a dedicated server in Germany. No third-party access.
• AI features (Sidekick): OpenAI API (openai.com, USA). Task context is sent for check-in generation. Prompts are not used for training. Legal basis: EU-US Data Privacy Framework.
• Analytics: Self-hosted Umami (analytics.makebyte.de, Germany). Anonymized usage events only, no personal identifiers. Data stays on our own server.
• Push notifications: Expo (expo.dev, USA). Only push tokens and message text. Legal basis: EU-US Data Privacy Framework.
• Payments: Apple App Store / Google Play. We do not receive payment details.

4. Data Retention

Your data is retained as long as your account is active. You can request deletion of all your data at any time by contacting us. We will fulfill deletion requests within 30 days.

5. Your Rights

Depending on your location, you may have the right to access a copy of your personal data, correct inaccurate data, request deletion, object to processing, and data portability.

To exercise any of these rights, contact us at privacy@dopamigo.app.

6. Children's Privacy

Dopamigo is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us personal data, contact us immediately.

7. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after changes constitutes acceptance.

8. Contact

Questions or requests regarding your privacy:
privacy@dopamigo.app
MakeByte, Germany