Dot · Privacy policy

Dot is a to-do and reminders app for Android, built so that your tasks stay private. It is developed by Suyash Singh (“we”). This policy explains what the app accesses, what leaves your phone, who can see it, how long it is kept and how to delete it. Dot is open source: you can check everything below in the source code.

Using Dot without an account

You can use Dot without signing in. Your tasks then stay on your phone only, and nothing about them is sent anywhere.

Your tasks are end-to-end encrypted

If you sign in to sync, task titles, notes, lists, dates and reminder times are encrypted on your phone before they are uploaded. The cloud copy is stored in Google Firebase (Cloud Firestore, Mumbai region) as ciphertext that neither we nor Google can read. The encryption key never reaches our servers. It is kept:

• on your phone, protected by the Android Keystore;
• in Android Block Store, Google's end-to-end encrypted backup that is protected by your screen lock, so a reinstall can restore it (only where your phone supports end-to-end encrypted backup); and
• as a recovery key that is shown only to you, once.

What the server can see is metadata: how many encrypted records you have, roughly how large they are and when they change.

Information we collect

• Account (only if you sign in): signing in with Google gives Firebase Authentication your Google account ID, email address, name and profile-photo link. We use them only to identify your encrypted data and let you sign in. Dot asks Google for nothing beyond this basic profile.
• Encrypted task data (only if you sign in): kept so your tasks sync between your devices and survive reinstalling the app. Because it is end-to-end encrypted, we cannot read it.
• App integrity: Firebase App Check uses Google Play Integrity to confirm that requests come from a genuine copy of the app on a genuine device. This check doesn't include your tasks.

Dot contains no advertising, analytics, crash-reporting or tracking SDKs. We don't sell your data, share it with advertisers or use it for profiling. Google Play itself may collect app crash and performance data under Google's privacy policy.

Permissions and on-device data

• Microphone: used only while you add a task by voice. Android's on-device speech recognizer turns your speech into text on the phone; the app never stores audio and never sends it anywhere. If on-device recognition isn't available, Dot asks you to type instead. It never falls back to cloud speech.
• Notifications, alarms and full-screen alerts: used to ring your reminders at the time you choose. Reminder times are scheduled on your phone only.
• Run at startup: lets Dot re-arm your reminders after the phone restarts.

Dot doesn't access your location, contacts, photos, files or calendar. The local database is encrypted (SQLCipher) with a key protected by the Android Keystore. App data is excluded from Android device backups, and reminder notifications hide task titles on the lock screen unless you turn that on.

Who we share data with

We don't share your data with third parties. Google provides the infrastructure (Firebase Authentication, Cloud Firestore, App Check, Play Integrity and Block Store) and processes this data on our behalf, under the Firebase data processing terms. We may disclose account information if required by law; your tasks can't be disclosed because we can't decrypt them.

Security

All traffic uses TLS. Each encrypted record is authenticated and bound to your account, so the server can't read, alter, forge or swap your data. Cloud access rules allow each account to reach only its own data. The cryptography is documented in the crypto specification.

Retention and deletion

• We keep your account and encrypted data until you delete them.
• Deleting a task erases its content at once. An empty, encrypted deletion marker stays for 30 days so your other devices learn about the deletion; after that it's erased from the server and your phones the next time one of them syncs.
• Delete your account in the app: Settings → Account & sync → Delete account. This deletes your encrypted cloud data, the encrypted key backup and your account.
• Delete it on the web: use the account deletion page, even without the app installed.
• Deletion takes effect immediately. Google may keep deleted data in its internal backups for a limited time before it is permanently erased.
• Signing out removes all tasks and keys from the phone.

Children

Dot isn't directed at children under 13, and we don't knowingly collect information from them.

Changes to this policy

If this policy changes, we'll update the date above and publish the new version on this page. Significant changes will also be noted in the app's release notes.

Contact

Suyash Singh · suyashsinghdtg@gmail.com