Privacy at Dote
Dote exists so two people can share small moments privately. That only works if you can trust where those moments go, so this policy is written to be actually read: short sections, plain words, no surprises buried in clause 14(b).
The short version
- Everything you share in Dote is visible to exactly one person: your partner.
- No ads, no third-party analytics, no data sales. Not now, not as a "pivot" later.
- You can use Dote without an email or phone number.
- Deleting is real: unpair and everything is permanently erased after a 30-day grace window.
Who we are
Dote is made by O9Tech ("we", "us"). For anything in this policy, write to support@dotelove.com — a human reads it.
What we store
Your account. When you start, we create an anonymous account: a random ID, your display name (whatever you type — a nickname is fine), your timezone (so your partner can see your local time), and a device push token with its platform (iOS or Android) so notifications can reach your phone. No email or phone number is required. If you later link a sign-in method to recover your account, we store what that provider gives us for login only.
What you two share. Photos, notes, drawings, moods, reactions, "thinking of you" taps, countdown events (a label, an emoji, a date), and your relationship start date. Photos and drawings live in a private storage bucket and are served only through short-lived signed links.
Delivery telemetry. When a moment is delivered we record which couple it belonged to, the moment type, how many milliseconds delivery took, the platform, and whether the app was open at the time. Never the content. We use this for exactly one thing: keeping widget delivery fast.
Safety reports. If you report something from inside the app, we store the report so we can review and act on it.
Purchases. If you get Dote Plus, payment happens entirely through the App Store or Google Play — we never see card numbers. We receive only your subscription status (product, expiry, store identifiers) via our subscription processor, RevenueCat, so Plus can unlock for both of you.
What we never collect
- No contact-list upload. Ever.
- No location tracking — your timezone is a setting, not a sensor.
- No advertising identifiers, ad SDKs, or third-party analytics SDKs.
- No browsing or off-app activity of any kind.
- This website sets no cookies and loads nothing from third-party servers.
Who can see what
Your partner sees what you share with them, plus your display name, timezone, and current mood. They never see technical details like your push token — that's excluded at the database layer.
Nobody else sees your content. Access is enforced with row-level security scoped to your couple: the rule that "only these two accounts can read these rows" lives in the database itself, not just in the app. Our operational access is limited to running the service and reviewing content that has been reported to us.
We do not sell, rent, or trade your data with anyone. There is no "trusted partners" list.
Where your data lives and how it moves
Dote runs on Supabase (managed database and file storage), encrypted in transit and encrypted at rest by our providers. To reach your phone quickly, moments travel through the platform push services — Apple Push Notification service on iOS and Google's Firebase Cloud Messaging — which means a moment's text and a short-lived link to its image pass through Apple's or Google's delivery infrastructure the same way your other notifications do. This website is served by Cloudflare.
| Service | What it does for Dote |
|---|---|
| Supabase | Database, file storage, and anonymous sign-in |
| Apple APNs / Google FCM | Deliver push notifications to your device |
| RevenueCat | Validates Plus purchases (no payment details) |
| Cloudflare | Hosts and serves dotelove.com |
That's the whole list.
On your phones
So your widget works instantly and offline, the most recent moment (including its image) is cached on both partners' devices in the app's private container. Uninstalling Dote removes it.
How long we keep things, and deletion
- While you're paired: your shared content stays until one of you deletes it or you unpair.
- Deleting a moment removes it from both partners' apps immediately, and the stored record and media are permanently erased within 30 days.
- Unpairing: you'll be offered an export first. Then your couple's data is archived for a 30-day grace window — in case you change your minds, either of you can invite the other to rejoin and everything comes back. After 30 days it is permanently deleted, photos included. Rejoining after that isn't possible, because the deletion is real.
- Deleting your account (in Settings, or by emailing us) removes your account and everything owned by it.
- Delivery telemetry and reports are deleted along with the couple they belong to.
Legal bases
Where the law asks us to name one (GDPR and friends): we process your content and account data to provide the service you asked for (delivering moments between the two of you); delivery telemetry and safety-report handling under our legitimate interest in keeping the service working and safe; and notifications only with the permission you grant at the operating-system level, which you can withdraw in your phone's settings any time.
Your rights
Wherever you live, we honor the spirit of GDPR- and CCPA-style rights: ask us to access, export, correct, or delete your data, and we'll do it. Most of this you can do yourself in the app (export, edit your name, unpair, delete account); for anything else, email support@dotelove.com. If you believe we've mishandled your data, you can also complain to your local data-protection authority — but we'd appreciate the chance to fix it first.
Children
Dote is for people in a relationship and is not directed at children under 13 (or the higher minimum age where you live). We don't knowingly collect data from children; if we learn we have, we delete the account.
Changes to this policy
If we change this policy, we'll update this page and its effective date. If a change is material, we'll tell you in the app before it takes effect — not after.