DooDooDone is an app that helps parents encourage everyday habits in children aged 3 to 6 with points and rewards. This policy explains what information the app and our server keep, why, who else is involved, how long we keep it and how you control it. We wrote it to be read by parents, not lawyers.
The short version
- Parents use DooDooDone. Children don't have accounts, emails or passwords, and they can't type anything into the app.
- About a child we keep only what a parent enters: a first name or nickname, a picture from the app's own set, an optional birth year, and their habits, points and rewards.
- No ads, no analytics, no tracking, no selling or sharing of data for marketing. No photos, voice, location or contacts.
- Parents can see, change and delete everything in the app, at any time.
1. Who we are
DooDooDone is run by Chanchal Raj, Abu Dhabi, United Arab Emirates ("we", "us"). We are responsible (the "controller") for the personal data described here. Contact: support@doodoodone.com.
2. Who the app is for
DooDooDone is used by parents and other adult caregivers. You must be an adult (at least 18, or the age of majority where you live) to create an account. Children aged 3 to 6 use only child mode, a picture-based screen that a parent opens on their own phone or on a child's device that the parent has paired. In child mode a child can see their stars, goal and habit cards and, only if a parent allows it, tap "I did it" or ask for their goal reward. A child cannot type text, create content, contact anyone, make purchases or leave child mode without the parent's PIN or the parent's Face ID or fingerprint.
3. What we collect
About you (a parent)
- Email address, to sign you in with a one-time code and to send you service emails (sign-in codes, account deletion confirmation). We never send marketing emails.
- Display name you choose (for example "Mum"), shown to the other parents in your family's history.
- App language and whether you want notifications.
- Signed-in phones: the phone's model name (for example "Pixel 9"), its platform (iOS or Android), when it was last used, and a sign-in token (we store only a scrambled form called a hash).
- Push notification token for each signed-in phone, so we can tell you when your child sends a request.
About your family
- The family name, its time zone and default language.
- The family PIN, stored only as a hash (Argon2id). Nobody, including us, can read it back.
- Which parents belong to the family, and invite codes (stored as a hash, valid for 72 hours).
About your children (entered by a parent)
- A first name or nickname (please don't use a full name).
- An avatar chosen from the app's built-in pictures. There is no photo upload.
- An optional birth year. It is never shown on a child's device.
- The child's habits, schedules and reminders, points and their history, rewards and goal, and the "I did it" and reward requests they send.
We do not collect anything else about children: no full names, birthdays, photos, voice, location, contacts, school, health information or device identifiers for advertising.
Text you type
Names of your own habits and rewards, descriptions and notes. Only parents of your family see descriptions and notes. Please don't put sensitive information in them.
About child devices
When you pair a child's tablet or phone: a device name (from its model, for example "iPad", and you can rename it), its platform, app version and language, when it was paired and last seen, and a device token (stored only as a hash). Child devices never receive push notifications.
Technical data
- IP address and request details (time, address of the request, result) in our server logs, and short-lived counters that protect sign-in, pairing and the PIN against guessing.
- Sign-in codes, pairing codes and invite codes, stored only as a hash and only until they expire.
Kept only on your phone
Your sign-in tokens (in the phone's secure storage), settings such as app lock and sounds, and the reminders you set, which your phone schedules itself. Face ID and fingerprints are checked by your phone's operating system; the app and our server never receive them.
What we don't do
- No advertising, and no advertising or analytics tools in the app.
- No tracking across other apps or websites, and no profiling.
- No selling, renting or sharing of personal data for marketing.
- No in-app purchases and no links out of the app in child mode.
- This website uses no cookies, no analytics and no third-party scripts.
4. Why we use it, and on what legal basis
| Purpose | Data | Legal basis (EU/UK GDPR) |
|---|---|---|
| Signing you in and keeping your account | Email, sign-in codes, signed-in phones | Providing the service you asked for (contract) |
| Running the app for your family: habits, points, rewards, requests, child mode, child devices | Family, children's and device data, text you type | Contract with you. For children's data, you as the parent decide to enter it and can remove it at any time |
| Notifications about your child's requests | Push token, child's first name, habit or reward name | Contract; you can turn them off in the app |
| Service emails | Email, language | Contract |
| Security: stopping code guessing and abuse, fixing errors | IP address, logs, counters | Our legitimate interest in a safe, working service |
| Backups, to recover from a server failure | All of the above, encrypted | Our legitimate interest in not losing your family's data |
5. Who else handles data for us
We don't sell or give personal data to anyone. A few service providers process it on our behalf, only to run DooDooDone, under data processing terms:
- Contabo GmbH (Germany): rents us the server where the app's database runs, in the European Union.
- Brevo (Sendinblue SAS, France): sends our emails. It receives your email address, language and the email itself (for example your sign-in code).
- Google Firebase Cloud Messaging (Google) and, for iPhones, Apple Push Notification service (Apple): deliver notifications to parents' phones. They receive the phone's push token and the notification: your child's first name, the habit or reward name and internal IDs. We use Firebase only to deliver notifications. No app data is stored in Firebase, and the app uses no other Firebase or Google service.
- Cloudflare (Cloudflare R2, EU jurisdiction): stores copies of our backups. They are encrypted on our server before upload, so Cloudflare can't read them.
Apple's App Store and Google Play handle downloads and app updates under their own privacy policies. Some of these providers may process data outside your country, including in the United States. Where the GDPR applies, such transfers rely on safeguards like the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
We may disclose data if the law requires it, for example to answer a valid court order.
6. How long we keep data
- Your account: until you delete it.
- A child's data: until a parent removes the child or deletes the family.
- Signed-in phones: a session ends after 60 days without use, or when you sign out; ended sessions are deleted 7 days after they expire.
- Codes: sign-in codes expire after 10 minutes, pairing codes after 10 minutes, invite codes after 72 hours. Expired codes are deleted within 7 days.
- Security counters: minutes to hours (at most 24 hours for the PIN lock).
- Server logs: kept for a limited time and deleted automatically as they rotate.
- Backups: daily encrypted backups are kept for 14 days, and one backup per month for 12 months. Data you delete disappears from backups when they expire. We use backups only to restore the service after a failure.
- Emails sent through Brevo are kept in Brevo's delivery logs for the period their policy allows.
7. Deleting data
Everything can be deleted in the app, straight away and without asking us:
- Remove a child: deletes the child and all their points, history, requests and device links.
- Delete the family: deletes the family with all children, habits, rewards, history and child devices.
- Delete your account: deletes your email, name, settings, sign-in methods, sessions and push tokens. If other parents stay in the family, entries you made stay in the family's history as "a former parent". If you are the last parent, the family is deleted too. We email you a confirmation.
You can also write to support@doodoodone.com and we'll do it for you.
8. Your rights, and your rights as a parent
You can see and correct almost all of your and your children's data directly in the app. You also have the right to:
- get a copy of your data (write to us and we send it in a common format);
- correct or delete it;
- restrict or object to how we use it;
- stop any further collection about your child by removing the child or deleting the family;
- complain to a data protection authority, for example the one where you live.
Children's privacy (including COPPA in the US): we collect children's information only from their parent, only as much as the app needs to work, and we never make it public or use it for advertising. A parent can review it, have it deleted and refuse further collection at any time, in the app or by writing to support@doodoodone.com. If you think a child gave us information without a parent, tell us and we will delete it.
To protect your family, we may ask you to confirm a request from the email address on the account.
9. How we protect data
- All connections are encrypted (HTTPS).
- Sign-in tokens, device tokens and codes are stored only as hashes; the family PIN as an Argon2id hash. Repeated wrong guesses are blocked.
- Every request is checked so that one family can never see another family's data. A child device only sees the children it was paired with, and never sees parents' notes or a child's birth year.
- Backups are encrypted before they leave our server.
No system is perfectly secure. If a breach ever affects your data, we will tell you and the authorities as the law requires.
10. Changes to this policy
If we change this policy, we update the date at the top. If the change matters, for example a new kind of data or a new service provider, we tell parents in the app or by email before it applies.
11. Contact
Questions or requests about your data: support@doodoodone.com. Chanchal Raj, Abu Dhabi, United Arab Emirates