Privacy Policy

Data controller: Juan Pablo Altamirano Flores
Address: Fernando Montes de Oca 107 Col. Niños Héroes 89359 Tampico, Tamaulipas, Mexico
Contact email:hello.donyapp@gmail.com

This document describes how Dony (“we”, “the app”) collects, uses, stores, and protects your personal data when you use the application on iPhone, iPad, Mac, Windows, or the web portal (getdony.com and app.getdony.com). It serves both as a Privacy Notice under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (in force since March 2025) and as a Privacy Policy for users subject to the GDPR (European Union), the CCPA/CPRA (California), and other jurisdictions.

Dony works offline and without the need to create an account. We only process personal data when you choose to turn on features that require it, such as syncing between devices or sending reminders by email.

1. What personal data we process

1.1 Data that stays only on your device

If you use Dony without creating an account, your Spaces, Blocks, Tasks, comments, and settings are stored only on your device. We have no access to this information and it never leaves your device.

1.2 Account data

You can create an account with email and password or with Sign in with Apple. Depending on the method, we process:

• Email address
• Password (only if you register with email; stored encrypted, never in readable text)
• Device and platform identifiers, to determine the scope of your sync

If you use Sign in with Apple, Apple shares with us a unique identifier for your account and the email address you choose. If you choose to hide your email, we receive a private relay address generated by Apple, and messages we send you reach your real email through it. We never receive your Apple password. You can stop using Sign in with Apple with Dony at any time from your Apple account settings.

1.3 Synced usage data

If you turn on syncing, your Spaces, Blocks, Tasks, comments, schedules, and attachments are stored on our servers so they can appear on your other devices.

1.4 Email credentials (reminders)

If you are a registered free-plan user and set up your own email server to receive reminders, we store those credentials encrypted. They are never returned in readable text nor visible to our team in normal operation. For Pro users, reminders are sent through our email provider, without you sharing any credentials of your own.

1.5 Payment data

We do not store card numbers or full financial data. Pro subscriptions are processed through Apple (in-app purchases on iPhone, iPad, and Mac) or through Stripe (purchases made on the web portal). We only receive your subscription status (active, canceled, in trial, etc.) and the identifiers needed to associate it with your account; the payment itself is processed by Apple or Stripe depending on where you subscribe.

1.6 Attachments

If you attach files to your tasks with syncing turned on, they are stored securely in the cloud, with per-plan limits (1 file on the free plan, 5 on Pro).

1.7 Technical and diagnostic data

We may process minimal technical data (IP address, device type, error logs) to operate the service, prevent abuse, and diagnose failures. We do not use this data to track you across apps or for advertising.

1.8 Sensitive data

Dony does not require or intentionally collect sensitive personal data (health, beliefs, origin, etc.). If you choose to write sensitive information inside the content of your tasks or notes, it is treated like any other content of yours and, if you have syncing turned on, travels encrypted.

2. Purposes of processing

Necessary purposes (essential to provide the service):

• Authenticate you and manage your account
• Sync your information across your devices
• Process and manage your subscription
• Send the reminders and notifications you set up
• Provide technical support and ensure the security of the service

Optional purposes (require your consent, and you can decline without affecting the service):

• Send you communications about product news or improvements

You can object to the optional purposes at any time by writing to hello.donyapp@gmail.com. If in the future we intend to process your data for a purpose other than those described here, we will request your consent again.

We do not sell your personal data or share it with third parties for advertising purposes.

3. Who we share data with

We share data only with the providers needed to operate the service:

These providers are contractually required to protect your information and to use it only to provide us with the contracted service.

4. Where your data is stored and transfers

Our infrastructure is hosted on cloud servers. If you are located outside the region where our servers are hosted, your data may be transferred internationally with the applicable safeguards in order to provide the service.

5. Data retention

We keep your account data and synced usage data while your account is active.

Account deletion and recovery period. When you request to delete your account, it is deactivated immediately and enters a30-day grace period. During that period your account is not accessible, but you can recover it by signing in again, and your data will be restored as it was. If the 30 days pass without you recovering it, we permanently delete your account and all associated data from our servers; after that, recovery is not possible.

If you signed in with Apple, we revoke the link to your Apple accountat the moment you request deletion. If you want to recover your account within the 30 days, simply sign in with Apple again and re-authorize access.

Deleting your Dony account does not automatically cancel an active subscription purchased through Apple; you must cancel it from your Apple account's subscription settings to avoid future charges.

Beyond that period, we only retain information we must keep for legal or tax obligations (for example, billing records). Data stored only on your device is not affected by account deletion; you can delete it by uninstalling the app.

6. Your rights

6.1 ARCO rights (users in Mexico)

You have the right to Access, Rectify,Cancel, or Object to the processing of your personal data, as well as to withdraw your consent. To exercise them, write to hello.donyapp@gmail.com stating your request and proving your identity. We will respond within the timeframes set by law. The data protection authority in Mexico is the Secretaría Anticorrupción y Buen Gobierno.

6.2 Users in the European Union (GDPR)

You have the right of access, rectification, erasure, restriction, portability, and objection, and to lodge a complaint with your supervisory authority.

6.3 Users in California (CCPA/CPRA)

You have the right to know what data we process, to request its deletion, and not to be discriminated against for exercising your rights. Dony does not sell personal information.

6.4 In all cases, from the app you can:

• Delete your account and all associated data directly within the application (in addition to by email), with a 30-day period to recover it before the deletion becomes permanent (see section 5)
• Turn off syncing and go back to fully local use
• Update or correct your account data

7. Cookies and similar technologies

The web portal uses only strictly necessary cookies to keep your session securely signed in. We do not use advertising or third-party tracking cookies. The marketing site (getdony.com) does not require signing in.

8. Minors

Dony is not directed at children under 13 (or the minimum age applicable in your jurisdiction), and we do not intentionally collect their data.

9. Security

We apply reasonable technical and organizational measures to protect your information: encryption of data in transit, encryption of the sensitive credentials we store, access control to our systems, and backups. No system is 100% secure, so we cannot guarantee absolute security.

10. Changes to this notice

We may update this document from time to time. We will notify significant changes within the app or by email. The “Last updated” date indicates the current version.

11. Contact

hello.donyapp@gmail.com
Juan Pablo Altamirano Flores — Fernando Montes de Oca 107 Col. Niños Héroes 89359 Tampico, Tamaulipas, Mexico