Privacy Policy

1. Information We Collect

Account information. When you sign in with Google, we receive your name, email address, and profile photo through Google OAuth. We do not receive or store your Google password.

Calendar data. With your permission, Dottd writes birthday, anniversary, and custom event entries to your connected Google Calendar. We request calendar write access because syncing collected dates automatically is a core function of the Service. We do not read the rest of your calendar, and we do not access events unrelated to Dottd.

Event submissions. When someone uses your shared link to submit a birthday, anniversary, or other date, we collect the information they enter: names, dates, an optional message, and an optional photo. This information is stored on your account and displayed to you on your dashboard and Wall gallery.

Photos. Optional photo uploads are stored through Cloudinary, our image hosting provider. Photos are only used to display within your Dottd account and are not used for any other purpose.

Usage data. We collect standard technical information such as IP address, browser type, device type, and pages visited, to help us maintain and improve the Service and to prevent abuse.

Email notifications. If you opt into notifications, we use your email address to send reminders about upcoming events through our email provider, Resend.

2. How We Use Information

We use the information we collect to:

• Operate and maintain your Dottd account and dashboard
• Sync events to your Google Calendar or generate your ICS calendar feed
• Display submitted dates, photos, and messages on your Wall gallery
• Send optional email reminders about upcoming events
• Respond to support requests
• Monitor the Service for security, abuse, and reliability issues
• Meet legal obligations where applicable

We do not sell your personal information, and we do not use your data to serve third-party advertising.

3. Third-Party Services

Dottd relies on the following service providers to operate. Each processes a limited set of data on our behalf and under their own privacy terms:

• Google (OAuth and Calendar API): authentication and calendar syncing
• Neon: database hosting for account and event data
• Cloudinary: photo upload and storage
• Vercel: application hosting
• Upstash: caching and rate limiting
• Resend: transactional and reminder emails

We only share the minimum information each provider needs to perform its function. We do not permit these providers to use your data for their own independent purposes.

4. Google User Data

Dottd’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data accessed through the Google Calendar API is used solely to create, update, and remove Dottd-related events on your calendar, and is never shared with third parties for advertising or unrelated purposes.

5. Information Submitted by Others

If you are not a Dottd account holder but have submitted a date through someone else’s shared link, the information you provide (name, date, message, optional photo) is stored and controlled by the account owner you submitted it to. To request removal of information you submitted, contact the account owner directly, or reach us at dottdapp@gmail.com and we will assist where we can.

6. Data Retention

We retain account and event data for as long as your account remains active. If you delete your account, we delete your associated data within 30 days, except where retention is required for legal or security purposes.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information. To exercise any of these rights, contact us at dottdapp@gmail.com. We will respond within a reasonable timeframe.

8. Children’s Privacy

Dottd is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at dottdapp@gmail.com and we will remove it.

9. Data Security

We use industry-standard measures, including encrypted connections and access controls, to protect your information. No system is completely secure, and we cannot guarantee absolute security of data transmitted to or stored by the Service.

10. International Data Transfers

Our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards to ensure your information receives adequate protection.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Last updated” date above and, where appropriate, by email or in-app notice.

12. Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at: