Privacy Policy

Do What ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). Please read this policy carefully.

1. Information We Collect

1.1 Information You Provide

When you use Do What, you may provide us with:

• Account Information: Email address and password when you create an account
• Profile Information: Display name you choose for your family
• Content: To-do items, shopping lists, notes, and chat messages you create
• Location Data: Addresses and coordinates for location-based reminders (only when you explicitly add them)
• Calendar Data: Calendar event information when you enable calendar sync. Events imported from your device calendar stay on your device and are never uploaded to our servers. Events you create in Do What sync like any other family content, and if you turn on calendar export they are written back out to a calendar the App creates on your device.

1.2 Information Collected Automatically

When you use the App, we may automatically collect:

• Device Information: Device type, operating system version, and unique device identifiers for app functionality
• Advertising Identifier: If you use the free tier, Google AdMob processes your device's advertising ID to serve and measure ads and to limit how often you see the same ad. See Advertising for details. Premium subscribers see no ads, so no ad requests are made.
• Usage Data: App feature usage for improving the user experience — see Analytics below
• Crash Reports: Technical information when the app crashes, to help us fix bugs — see Crash Reporting below

1.3 Analytics

Analytics tell us which features are used and where people get stuck, so we can decide what to improve. We collect feature-usage events (for example, "a to-do was created" or "the shopping screen was opened") together with the device and app-version information needed to interpret them.

Analytics events are anonymized before they leave your device. They never include:

• The contents of your to-dos, notes, shopping items, or chat messages
• Your family invite code or family ID
• Names, email addresses, or other directly identifying details
• Location coordinates or addresses

Your choice: analytics are off by default and opt-in during setup. You can change your mind at any time in Settings > Privacy & Analytics. Turning them off stops collection; it does not affect any app feature.

1.4 Crash Reporting

When the App crashes or hits an unexpected error, a crash report helps us find and fix the cause. A report contains the technical state of the app at the moment of failure: the error type, the stack trace showing which code was running, your device model, operating system version, and the app version.

Crash reports are scrubbed of personal content before being sent. They never include:

• The contents of your to-dos, notes, shopping items, or chat messages
• Authentication tokens, passwords, or two-factor secrets
• Location coordinates or addresses

Your choice: crash reporting is off by default and opt-in during setup. You can change it at any time in Settings > Privacy & Analytics. Turning it off means we will not learn about crashes you experience, which may make them slower to fix.

1.5 Permissions We Request

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Sync your data across your devices
• Enable family collaboration features
• Send you notifications and reminders you've requested
• Provide location-based reminder functionality
• Respond to your inquiries and support requests
• Detect, prevent, and address technical issues
• Protect against unauthorized access and abuse

3. Location Information

3.1 Background Location Usage

Do What uses background location access exclusively for location-based reminders (geofencing). This feature allows you to receive notifications when you arrive at or leave specific locations you've chosen.

Examples:

• "Buy milk" reminder triggers when you arrive at the grocery store
• "Pick up package" reminder triggers when you leave work

3.2 What Location Data We Collect

• Location coordinates only when you explicitly add them to a reminder
• Favorite location names and addresses you save
• Geofence trigger events (arrival/departure)

3.3 What We DO NOT Do With Location

• We do NOT track your location continuously
• We do NOT log your location history
• We do NOT sell or share your location data with third parties
• We do NOT use your location for advertising purposes

3.4 Your Location Rights

• Decline location permissions - location features are completely optional
• View all stored location data in Settings
• Export your location data
• Delete all location data with one tap
• Revoke location permissions anytime in your device settings

4. Data Storage and Security

4.1 Where Your Data is Stored

4.2 Security Measures

We implement industry-standard security measures to protect your data:

• Chat Messages: Family chat is protected like the rest of your family's data: encrypted in transit and at rest, and readable through the App only by members of the conversation. Chat is not end-to-end encrypted, so we, as the operator of the service, can technically access message content, as we can your to-dos, notes, and shopping lists. We never sell it or use it for advertising
• Encryption at Rest: Data stored in Firebase is encrypted at rest by Google Cloud
• Device Storage Protection: Local app data is protected by Android app sandboxing and device-level protections (for example, screen lock and full-disk/file-based encryption configured on your device); selected sensitive preferences use Android encrypted storage APIs. The App's local database relies on that device-level encryption rather than on a separate application-layer database key
• Encryption in Transit: All data transmitted over HTTPS/TLS
• Authentication: Firebase Authentication with optional two-factor authentication (2FA)
• Access Controls: Family data is only accessible to verified family members
• App Verification: Firebase App Check with the Play Integrity API is integrated to help identify unauthorized clients
• No Backups: App data is excluded from Android cloud/device-transfer backups to reduce offline exposure risk

5. Data Sharing

5.1 Within Your Family

When you join a family in Do What:

• Family members can see shared to-dos, shopping lists, notes, and chat messages
• Your display name and email are visible to family members
• Your activity status may be visible to family admins

5.2 Third-Party Services

We use the following third-party services to operate the App. Each receives only the data listed:

These services are governed by their own privacy policies. Barcode scanning itself runs entirely on your device using Google ML Kit; no image ever leaves your phone.

5.3 Legal Requirements

We may disclose your information if required by law, such as in response to a subpoena, court order, or government request.

6. Your Rights and Choices

6.1 Access and Export

• View all your data within the App settings
• Export your data in standard formats (JSON)

6.2 Correction

• Update your profile information anytime in Settings
• Edit or delete any content you've created

6.3 Deletion

• Delete individual items (todos, notes, shopping items)
• Delete all location data
• Delete your entire account (Settings > Account > Delete Account)

6.4 Opt-Out

• Disable location features by revoking location permissions
• Disable notifications in your device settings
• Use the App in local-only mode without an account

7. Data Retention

• Active Data: Retained while your account is active
• Deleted Items: Moved to trash for 30 days, then permanently deleted
• Account Deletion: Your personal data is deleted immediately, and purged from backups within 30 days. A small amount of shared content is kept so that ongoing family conversations stay readable for the members still using them: the chat messages you sent, and the files you uploaded. Reports other people filed about you are anonymized rather than deleted. The Account & Data Deletion page lists exactly what is deleted, what is kept, and how to ask us to remove the rest
• Expired Tokens: Authentication and invite tokens are automatically deleted when expired
• Content Reports: Kept until resolved, then deleted 90 days later — see Reporting and Blocking

8. Reporting and Blocking

You can report a chat message, a family note, or another family member from inside the App, and you can block another member in a direct (one-to-one) conversation. This section explains what happens to your data when you do.

8.1 What a report contains

When you send a report, we receive:

• Your account ID and email address, so we can follow up with you
• The account ID and display name of the person being reported
• The reason you selected, and any note you chose to add
• A copy of the reported content itself — the message, note, or, for a report about a person, whatever you wrote in the note field
• The family and conversation the content came from, and the time you sent the report

8.2 How long we keep reports

An open report is kept until we have reviewed and acted on it. Once it is resolved, we keep it for 90 days and then delete it automatically. We keep it that long so we have a record of the complaint and what we did about it, which is what an app store or a regulator would ask us for.

If you delete your account, reports you filed are deleted with the rest of your data. Reports about you are stripped of everything that identifies you — your account ID, your name and the reported content are all removed — and only the record that a complaint was received and resolved remains.

8.3 Blocking

Blocking someone in a direct conversation stops messages in both directions: neither of you can send anything new there while the block is in place. Messages already sent stay where they are, and nothing changes in family chat, shared tasks, shopping lists, or the calendar. A block record contains only who blocked whom and when. You can remove your own block at any time; you cannot remove one that someone else placed.

9. Children's Privacy

Do What is designed for family use. You must be at least 13 years old to create an account, as set out in our Terms of Service. If you are between 13 and 18, you may use the App only with the consent and supervision of a parent or legal guardian. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have collected information from a child under 13, contact us and we will delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers (Google/Firebase) maintain servers. Where personal data is transferred out of the European Economic Area or the United Kingdom, those transfers rely on the European Commission's Standard Contractual Clauses, on the UK International Data Transfer Addendum, or on an adequacy decision where one applies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the App and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to correct inaccurate personal information
• Right to delete personal information
• Right to opt-out of sale or sharing of personal information (we do neither)
• Right to limit the use and disclosure of sensitive personal information. For this App, the only sensitive category we collect is precise geolocation, and it is used solely for the location reminders you create
• Right to non-discrimination for exercising your rights

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a portable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time

The lawful bases we rely on. GDPR requires us to tell you why we are allowed to process your data, not only what rights you have:

• Performance of a contract — creating your account, syncing your family data, and delivering the features you signed up for
• Consent — analytics, crash reporting, location features, and advertising. Each is optional, and you can withdraw consent at any time in Settings > Privacy & Analytics or in your device settings
• Legitimate interests — keeping the service secure, preventing abuse and fraud, and reviewing content reports
• Legal obligation — where the law requires us to retain or disclose information

14. Advertising

The free tier of Do What shows ads, served by Google AdMob. Ads are how the free tier pays for itself. A Premium subscription removes all ads, and when you are subscribed the App makes no ad requests at all.

14.1 What AdMob Receives

To serve and measure a non-personalized ad, Google AdMob processes:

• Your device's advertising ID and basic device/app information
• Approximate location derived from your IP address (country/region level) — this is inherent to any internet request and is not the precise location used by location reminders
• Ad interaction signals: that an ad was shown, viewed, or tapped, and frequency-capping data so you are not shown the same ad repeatedly
• Signals used to detect invalid traffic and ad fraud

14.2 What AdMob Never Receives

• Your to-dos, notes, shopping lists, or chat messages
• Your family members, family ID, or invite codes
• Your email address, display name, or account credentials
• The precise location or saved addresses used for location reminders
• Photos, barcodes, or calendar event contents

14.3 Consent and Your Controls

In the EEA, UK, and other regions where it is required, Do What uses Google's User Messaging Platform (UMP) to present a consent form and record your choice before any ad is requested. Because we never request personalized ads anywhere, that consent governs whether ads may be shown to you at all, not whether they may be targeted.

You can also:

• Reset or change your ad consent choice in Settings > Privacy & Analytics where a privacy options form is available for your region
• Reset or delete your advertising ID in your device's Settings > Google > Ads
• Remove ads entirely by subscribing to Premium

Google's handling of ad data is described in the Google Privacy & Terms and the AdMob help center.