Privacy Policy
1. Introduction
DoYt! ("we", "our", "the app") is a challenge-based social platform. This privacy policy explains what information we collect, how we use it, and the choices you have. By using DoYt!, you agree to this policy.
2. Information We Collect
Account information: • Email address (for authentication and account recovery) • Display name, username, bio, profile photo • Preferred categories (used for content recommendations) • Verification codes (OTP) used briefly during signup and login Content you create: • Challenge and proof videos (including their audio) • Comments, likes, and challenge tags • Challenge titles and descriptions Derived data: • Trust score, streak days, completion counts • Last completion timestamp and speed score on each completed challenge Social graph: • Who you follow and who follows you • Users you have blocked or who have blocked you • Reports you have submitted, votes you have cast on proof videos Notification data: • Notifications sent to and from you are stored until read or until your account is deleted. We do NOT collect: location data, contacts, advertising identifiers, or browsing history outside the app.
3. Permissions We Request
• Camera and microphone: required to record challenge and proof videos. Used only when you actively open the camera screen. • Photo library access: required only when you choose to upload a video from your gallery. • Internet: required for the app to function. You can revoke any permission in your device settings, but doing so may disable parts of the app.
4. How We Use Your Information
• To provide and operate the app • To display your profile and content to other users (subject to your privacy settings) • To calculate trust scores, streaks, and leaderboards • To recommend content and people you may want to follow • To send in-app notifications about interactions with your content • To moderate content and enforce these terms, including automated safety checks on uploaded media and text • To respond to support and copyright requests
5. Data Storage and Third-Party Processors
Your data is stored and processed by: • Supabase - database, authentication, and file storage • Cloudflare - content delivery for video and image files • Firebase Cloud Messaging (Google) - push notifications • Firebase Crashlytics (Google) - crash and stability diagnostics • OpenAI - automated content-safety classification of uploaded media and text • Google Gemini - multilingual text embeddings of challenge titles and descriptions (to power search and matching) • Resend - transactional email (sign-up verification codes, account emails) • Google Fonts - fonts loaded by the app interface Uploaded media and text may be transmitted to our content-safety provider solely to detect content that violates our guidelines. Challenge titles and descriptions may be transmitted to our embedding provider to enable multilingual search and matching. This content is not used to train third-party models. All traffic is encrypted in transit (HTTPS). We do not host advertising networks or third-party advertising SDKs inside the app.
6. Data Sharing
We do NOT sell your personal information. Your public profile, challenges, and proof videos are visible to other users by default. If you set your account to private, only followers can see your stats, badges, and posts; counts remain visible but not tappable, and your follower/following lists are hidden. We may disclose information if required by law, valid legal process, or to protect the safety of users or the public.
7. Blocking and Privacy
Blocking is bidirectional. When either user blocks the other, their posts, comments, and notifications are hidden from each other across the app, existing follow relationships are removed, and neither can tag the other in new challenges. You can manage blocked users in Settings.
8. Your Rights and Controls
• Access: all your data is visible in the app. • Edit: update your display name, username, bio, avatar, and categories anytime. • Delete content: delete individual challenges or proofs; deleting a proof reverses the trust score, completion count, and streak gained from it. • Privacy: set your account to private. • Deactivate: hide your profile until you log in again. • Delete account: permanently removes your profile, posts, challenges, comments, likes, follows, blocks, reports, and notifications. Stored videos and images are removed within a reasonable window. • Appeals: if your content is removed or your account is actioned and you believe it was a mistake, contact support@doyt.app for a human review. If you reside in the EU, UK, or California, you may have additional rights including data portability and the right to lodge a complaint with your local data protection authority. Contact us at the email below.
9. Data Retention
• Active accounts: data retained while active. • Deactivated accounts: retained but hidden until reactivation. • Deleted accounts: profile and content removed promptly; some anonymized/aggregate data and moderation logs may be retained for safety and abuse prevention. • OTP codes are short-lived and discarded after use or expiry.
10. Children's Privacy
DoYt! is not intended for users under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact us and we will delete it. Some app store regions require a minimum age of 16 or 17 for social apps. You are responsible for complying with the minimum age in your region.
11. Content Moderation
We use a combination of automated systems and human review, alongside community reporting, to detect content that violates our guidelines. Report and block tools are available on every video, comment, user profile, and message. Uploaded content may be checked automatically before it becomes visible to other users, so a new post can take a short time to appear publicly. Your own uploads are always visible to you. Proof videos are additionally subject to community voting, which contributes to a proof's standing and to trust scores. Messages: shared items and replies in your inbox can be reported and the sender blocked. Reported messages are retained for review. Inbox threads are visible only to their members. Reported content is reviewed and acted upon as promptly as we are able. Content found to violate our guidelines is removed, and accounts may be suspended or terminated. We have zero tolerance for sexual content involving minors, and act on it immediately. We do not publish the specific thresholds, signals, or detection methods we use, as disclosing them would help bad actors evade enforcement.
12. Security
We use industry-standard security measures, including HTTPS encryption and secure password storage. However, no system is completely secure. You are responsible for keeping your account credentials confidential.
13. Changes to This Policy
We may update this policy from time to time. Material changes will be highlighted in the app. Continued use after changes constitutes acceptance.
14. Contact
Questions, requests, or complaints: support@doyt.app