# Privacy Policy for Dostify **Last Updated:** April 2, 2026 **Effective Date:** April 2, 2026 --- ## 1. Introduction Welcome to **Dostify** ("we," "our," or "us"). Dostify is a student companion AI application designed to support students' mental well-being, academic productivity, and emotional health. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application ("App"). By using Dostify, you agree to the collection and use of information in accordance with this policy. --- ## 2. Information We Collect ### 2.1 Personal Information When you create an account and use Dostify, we collect the following personal information: - **Email Address** — Required for account creation and authentication - **Password** — Stored securely and hashed by our authentication provider (Supabase Auth) - **Full Name** — Optional, used to personalize your experience - **Avatar URL** — Optional profile picture reference ### 2.2 User-Generated Content - **Chat Messages** — Conversations you have with our AI assistant, including both your messages and AI-generated responses - **Task Data** — Task titles, descriptions, dates, times, categories, priorities, and completion status - **Journal Entries** — Personal journal content, titles, and mood indicators you choose to record ### 2.3 App Usage Data - **Experience Points (XP)** and **Level** — Gamification progress tracking - **Credit Balance** — In-app credit balance for feature usage - **Onboarding Status** — Whether you have completed the app onboarding process - **Theme Preference** — Your selected app theme - **Timestamps** — Created and updated timestamps for your data ### 2.4 Device and Technical Data - **Authentication Tokens** — Session tokens used to maintain your logged-in state - **Internet Protocol (IP) Address** — Collected automatically by our backend service for security and operational purposes --- ## 3. How We Use Your Information We use the information we collect to: - Provide, maintain, and improve the App and its features - Authenticate your identity and manage your account - Process and display your tasks, journal entries, and chat conversations - Deliver AI-powered responses to your chat messages through our AI processing service - Track your progress through our gamification system (XP, levels, daily rewards) - Sync your data across devices in real-time - Ensure the security and integrity of our services --- ## 4. Third-Party Services ### 4.1 Supabase We use **Supabase** as our primary backend service provider. Supabase handles: - **Authentication** — Email/password sign-up, sign-in, password reset, and account deletion - **Database** — Storage of all user data including profiles, tasks, journal entries, and chat messages - **Real-time Sync** — Live synchronization of your data across sessions - **Edge Functions** — Processing of AI chat requests Supabase processes your data on our behalf. For more information, please refer to [Supabase's Privacy Policy](https://supabase.com/privacy). ### 4.2 Google Fonts We use **Google Fonts** for typography in the App. Font requests may be transmitted to Google servers. Please refer to [Google's Privacy Policy](https://policies.google.com/privacy) for more information. ### 4.3 External Links Our App may include a WebView that opens external websites (such as **pyqdeck.in**) for study resources. When you visit external websites through our App, their respective privacy policies apply. We are not responsible for the privacy practices of third-party websites. --- ## 5. Data Storage and Security ### 5.1 Where Your Data Is Stored - **Cloud Storage** — Your data is stored in Supabase's cloud infrastructure - **Local Storage** — Limited data (onboarding status, theme preference, dismissed suggestions) is stored locally on your device using secure device storage mechanisms ### 5.2 Security Measures - All data transmitted between your device and our servers is encrypted using **HTTPS/TLS** - Passwords are securely hashed and never stored in plain text - Authentication is managed through Supabase Auth with industry-standard security practices - We implement Row-Level Security policies in our database to ensure users can only access their own data ### 5.3 Data Retention - Your data is retained as long as your account is active - When you delete your account, all associated data is permanently deleted from our servers - See Section 7 for details on account and data deletion --- ## 6. Children's Privacy Dostify is designed for students and is intended for users aged **13 and older**. We do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us so that we can take appropriate action to remove such data. --- ## 7. Your Rights and Choices ### 7.1 Access and Correction You can access and update your personal information (such as your name and profile picture) directly within the App at any time. ### 7.2 Data Deletion You have the right to delete your account and all associated data. The account deletion process is as follows: 1. Navigate to your profile settings in the App 2. Select the account deletion option 3. Verify your identity by re-entering your password 4. Confirm the deletion Upon account deletion, the following data will be **permanently deleted**: - Your user profile - All chat messages - All journal entries - All tasks - Your authentication account **This action is irreversible.** ### 7.3 Data Export If you would like a copy of your data, please contact us using the information provided below. --- ## 8. Data We Do NOT Collect Dostify does **not** collect the following types of data: - Location data (GPS or network-based) - Camera or photo gallery access - Contacts or address book - Call logs or SMS messages - Device identifiers (IMEI, serial numbers) - Biometric data - Advertising identifiers We do **not** display advertisements in the App, and we do **not** use third-party advertising or analytics SDKs. --- ## 9. International Data Transfers Your data is processed and stored by Supabase, which may involve transferring data to servers located outside your country of residence. By using Dostify, you consent to the transfer of your information to these facilities. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy. --- ## 10. Changes to This Privacy Policy We may update this Privacy Policy from time to time. When we make changes, we will: - Update the "Last Updated" date at the top of this policy - Notify you of significant changes through the App or via email We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. --- ## 11. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: - **Email:** raiyanhasan2006@gmail.com --- ## 12. Consent By using the Dostify application, you signify your acceptance of this Privacy Policy. If you do not agree to this policy, please do not use our App. Your continued use of the App following the posting of changes to this policy will be deemed your acceptance of those changes. --- *This privacy policy is specifically tailored for the Dostify mobile application and reflects the actual data practices implemented in the application.*