Privacy Policy

Doto ("we," "our," or "us") operates the Doto mobile application (the "App"), a family coordination tool that helps families manage schedules, tasks, shopping lists, and rewards together. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account Information

• Parents: Email address (required, for login and password reset), username, and password.
• Children: Username and password only. Email is optional and never required for a child's account.

Family Content

• Tasks, chores, and to-do items you create
• Calendar events and schedules
• Shopping lists and items
• Reward points, streaks, goals, and leaderboard standings

Location Information (Optional Feature)

If your family uses the "Where are you?" or "I'm on my way" features, we collect a one-time GPS location only at the moment it is requested or shared. Doto does not continuously track location in the background, and location sharing must be actively initiated by a parent or child each time.

Purchase Information

If you subscribe to Doto Premium, our payment processing partner (Apple, via RevenueCat) handles your payment details. We do not receive or store your credit card information. We do receive confirmation of your subscription status (active, trial, expired) to manage access to premium features.

Device and Usage Information

We automatically collect limited technical information, such as device type and app version, to help us diagnose bugs and improve performance.

2. How We Use Information

• To create and maintain your family's account
• To sync tasks, schedules, and shopping lists across family members' devices
• To calculate and display reward points, streaks, and leaderboards
• To process subscription payments and manage premium access
• To send push notifications you've enabled (e.g., task reminders, location requests)
• To respond to support requests
• To fix bugs and improve the App

We do not use your data for advertising, and we do not sell your data to third parties.

3. Children's Privacy (COPPA Compliance)

Doto is designed to be used by children under the supervision of a parent or guardian. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA):

• Child accounts are created and managed by a parent or guardian, who joins a family using a private family invite code.
• Children are never required to provide an email address to use Doto.
• We do not knowingly collect more information from children than is necessary for the App to function (username, password, and the tasks/schedule/rewards data related to their own participation in the family).
• We do not use children's information for advertising or marketing purposes.
• We do not allow children to publicly share information outside of their private family group.
• Parents can review, edit, or delete their child's information at any time through the Settings screen, or by contacting us directly (see Section 8).

4. Sharing of Information

We share information only in these limited circumstances:

• Within your family: Tasks, schedules, shopping lists, and reward activity are visible to members of your own family group, as intended by the App's design.
• Service providers: We use trusted third-party services to operate Doto, including:
  • Apple / RevenueCat — to process subscription payments
  • Heroku — to host our backend servers and database
  These providers only receive the information necessary to perform their function and are not permitted to use it for their own purposes.
• Legal requirements: We may disclose information if required by law or to protect the rights, safety, or property of Doto, our users, or others.

We do not sell personal information, and we do not share data with advertisers or data brokers.

5. Data Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS) between the App and our servers, secure password storage (bcrypt hashing), and access controls that restrict data to your own family group. No system is 100% secure, but we work to protect your family's information at every layer of the App.

6. Data Retention

We retain your information for as long as your account is active. If you delete your account or your family's account, we delete your personal data within a reasonable period, except where we are required to retain certain records for legal or accounting purposes.

7. Your Choices and Rights

• Access and correction: You can view and update your account information at any time in the App's Settings screen.
• Deletion: You can delete your account, or a child's account, from Settings, or by contacting us at the email below.
• Location sharing: Location features are opt-in and can be ignored or disabled at any time.
• Notifications: You can turn off push notifications in your device settings or within the App.

8. Contact Us

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify users through the App or by other reasonable means. The "Last updated" date at the top of this page reflects the most recent revision.