Privacy policy

1. Who is responsible for your data

The controller of the personal data processed in Dot (the iPhone app and the version in the browser) is:

For anything about your personal data, write to [email protected] or by post to the address above. We answer without undue delay, within one month at the latest.

2. What we process

• Account data: the email address you sign up with. Your password is kept by the identity provider in a secured form, and we never see it in plain text.
• What you keep in the app: tasks, lists, labels, reminders and your settings, which is everything you type or dictate yourself.
• What you ask Dot for: the text of your request and, when you speak it, the recording of your voice. The recording is used only to turn speech into text and is not kept once that is done.
• Approximate location: only if you turn it on in the settings. The coordinates are rounded on your device to an accuracy of about 11 km before they leave the phone, and they serve only to show the weather and a sky that matches where you are. They never go into web addresses or into browsing history.
• Notification data: the technical identifier of your device needed to deliver reminders, and a record of which reminders were already sent.
• Purchase data: with a Go subscription we receive a technical confirmation of the transaction from Apple (the transaction identifier and the period it covers). Payment is handled entirely by Apple, and we never see your card number or any other payment details.
• Technical data: basic server logs needed to keep the service secure and stable.

We show no ads, we do not sell your data and we do not profile you for marketing.

3. Why, and on what legal basis

• Providing the service (running your account, keeping your list in sync, carrying out what you ask for, delivering reminders): Article 6(1)(b) GDPR, performance of a contract.
• Weather and a background that matches where you are (approximate location): Article 6(1)(a) GDPR, your consent, which you can withdraw at any time in the app settings.
• Security, abuse prevention and backups: Article 6(1)(f) GDPR, our legitimate interest.
• Visit statistics for this website: Article 6(1)(a) GDPR, your consent, which we ask for on your first visit and which you can withdraw at any time in section 7 below.
• Tax and accounting records: Article 6(1)(c) GDPR, a legal obligation.

4. Who we share it with

We use processors only as far as the app needs them to work, and always under data processing agreements:

• Our server infrastructure provider, which hosts the service and the account data stored in it.
• OpenRouter, Inc. (USA): processing your requests through artificial intelligence models, including turning spoken requests into text. What reaches them is the request itself and the context from your list needed to carry it out.
• Open-Meteo: weather data. We pass on approximate coordinates only (accurate to about 11 km), with no account identifiers.
• Apple Inc. (USA): delivering push notifications and handling App Store purchases.
• Google Ireland Ltd: visit statistics for this website. It covers the website only, never the app, and nothing from your account or your list goes there.

Some processors handle data outside the European Economic Area. In those cases the transfer relies on the standard contractual clauses approved by the European Commission or on an adequacy decision (the Data Privacy Framework).

5. How long we keep it

• Account data and content: until you delete your account. You can delete it yourself in the app settings, and deleting covers the data, not only the access.
• Backups: overwritten on a rotating cycle, so data from a deleted account disappears from them within 7 days at the latest.
• Voice recordings: not kept once the text has been produced.
• Billing records: for as long as tax law requires.

6. Your rights

You have the right to:

• access your data and receive a copy of it,
• have your data corrected,
• have your data erased (the simplest way is deleting your account in the settings),
• restrict processing,
• data portability,
• object to processing based on our legitimate interest,
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl), or with the supervisory authority in the country where you live.

7. Cookies and tracking

The app uses no cookies for advertising or analytics. Once you are signed in, we store only the session data needed to keep you signed in.

This website (the home page and this policy) asks before it counts anything. Say yes and Google Analytics saves its own cookies in your browser and notes things like the page you are on, the rough region you are in and the kind of device you use, so that we know how many people visit and which pages they open. Say no and nothing is saved. Either way it has no way to reach your account or anything you keep in Dot, we show no ads and we do not use any of it to profile you.

You can change your mind whenever you like: ask me again.

8. Changes to this policy

We will tell you in the app about any significant change to this policy before it takes effect. The current version is always available at this address.