Privacy Policy

This explains what DotDot uses, who receives it and how to request deletion.

Disclosure updated: October 4, 2026 · DotDot 0.18 features

Your account and challenges

Google sign-in provides your email, name, Google profile information and user ID. We use these for account management, identity verification, preventing misuse and support. DotDot does not receive or store your Google password.

We process challenge names, goals, selected places and times, check-in records, results and place searches to provide challenges and progress history. Signing a commitment stores the signature image and related signing records, including the time.

Location and notifications

With location permission, GPS coordinates verify arrival at your chosen place. Selected destinations and location at check-in are used for this feature. You can change permission in your phone settings.

Notifications use notification permission, device identifiers and a Firebase messaging token. You can decline notifications or turn them off in your phone settings.

Community and photos

Community profiles store your nickname, avatar selection and chosen goals. Posts, comments, photos, reports and blocking records support the community. Choosing fitness or diet goals, or writing about them, can include fitness and lifestyle information you supply. DotDot does not access health records or Health Connect.

Your nickname, avatar, published goals, posts, comments and photos are visible to other users. Photos are selected by you and are optional for posting. Avoid including personal information you want to keep private. You can edit or delete your own posts, comments and attached photos in the community.

Payments

Fine-based rules and payment features process payment method tokens, purchase, payment and refund records, amounts and payment times. These support payments, settlement and fraud prevention. DotDot servers do not store full card numbers.

Analytics and Maps

Google Analytics for Firebase processes app usage events, app-instance and device identifiers, app and device information and IP addresses to understand usage and improve features. The Android advertising ID may be included by the analytics SDK.

Google Maps SDK can send map requests, device and SDK information, IP addresses, Maps SDK identifiers, map interactions and SDK crash or diagnostic information to Google. IP addresses can indicate an approximate region. Google uses this information to maintain and improve its map services and measure usage.

Details: Firebase privacy information · Google Maps data disclosures

Service providers and international processing

• Google LLC: Google sign-in, Firebase authentication, database, functions, photo storage and messaging, Analytics and Maps. Each feature processes the account, service, location, photo, messaging-token and analytics information needed for it.
• Toss Payments, Adyen N.V. and Google Play: payment method tokens and payment, purchase and refund information, depending on the payment method you use.

Google and international payment providers may process information outside your country. Firebase Authentication processes data in the United States; other Firebase services can use Google's global infrastructure. Published community content is shared with other users viewing the post or profile.

Retention and deletion

Existing retention periods remain in place. Accounts and profiles are processed until account deletion. Challenges, check-in records, your community profile, your own posts and comments, and uploaded photos are removed when you delete your account. You can also delete individual posts, comments and photos or request data deletion while keeping your account. Records requiring separate retention follow these periods:

Retention and deletion of analytics and diagnostics processed by SDK providers follow their disclosures. You can also contact us about this data.

Use Settings → Delete account in the app, or request account and data deletion by email without installing the app. You can also request access, correction, deletion or suspension of processing while keeping your account.

Security and contact

Server transfers use encrypted connections such as HTTPS. Firebase authentication and access rules restrict access to account data.

Privacy contact: Kim Min-hyeok
Email: henry_kim@kakao.com

This disclosure clarifies the existing policy for DotDot 0.18 community features and the SDKs currently included. Existing retention periods and privacy rights remain unchanged. Material policy changes will be announced seven days before taking effect, as stated in the existing policy.