Privacy policy

Information we handle

• Account information. When you sign in with Apple or Google, we receive an account identifier and the profile information made available by that service, such as your name, email address, and profile image. Apple may provide a private relay email address. We also store the session information needed to keep you signed in.
• Your work. Tasks, notes, chats, instructions, attachments, generated results, and other context you provide or make available to Dony. Information stored only on your device stays there until you use a feature that syncs, shares, or processes it online.
• Connected apps and devices. Connection identifiers, authorization details, device names, pairing information, and information retrieved from apps you connect, such as documents, messages, or calendar events. The information accessed depends on the permissions you grant and the work Dony performs.
• Purchases and usage. Subscription status, product and transaction identifiers, purchase and renewal dates, refunds, and AI usage records used to calculate your remaining allowance. Apple processes App Store payments; Dony does not receive your full payment-card number.
• Technical information. Information such as IP address, device and operating-system details, app version, request timestamps, errors, and subscription-related events may be processed by Dony and its service providers to operate, secure, and measure the service. If you enable notifications, we store the device token needed to deliver them.
• Optional device features. Camera access is used to scan a Mac pairing QR code. Desktop dictation uses your microphone and Apple’s speech recognition with your permission. Recognition runs on-device when supported; otherwise Apple may process audio. The resulting text becomes part of the content you choose to submit.
• Website and support information. Your email address if you join the waitlist, and the information you include when you contact us.

How we use information

We use information to provide and sync your to-do list; generate plans, answers, and other work; carry out actions through connected services; manage your account and purchases; apply usage limits; send requested notifications and product updates; respond to support requests; prevent abuse; troubleshoot problems; and meet legal obligations.

Cookies, session tokens, and local device storage support sign-in, preferences, and service operation. Dony does not include an advertising network or use your tasks and conversations to target ads.

Where applicable privacy laws require a legal basis, we rely on performing our agreement with you, legitimate interests in operating and protecting the service, consent where required, and compliance with legal obligations. You can withdraw consent for optional processing without affecting processing that already took place.

AI processing and your Mac

Cloud AI features send the context needed for the work—such as task details, conversation history, attachments, and relevant connected-app content—to OpenRouter and the model providers that process the request. Web research may also send search queries to search providers, including Exa through OpenRouter. AI results and work history may be saved in your Dony workspace.

When you choose to run work through Dony on your Mac, the selected context is processed on that Mac and by the AI provider you use there, such as OpenAI through your ChatGPT or Codex account. Running work on a Mac does not mean that all processing stays offline: AI requests still go to the selected provider, and synced tasks and results may still pass through Dony’s cloud.

AI providers have their own retention and data-use practices, which can vary by provider, model, account, and settings. This policy does not promise zero retention or that every provider excludes all content from training. Avoid supplying information you do not want processed by the services involved.

Services that help operate Dony

We share information needed to provide the relevant feature with service providers, including:

• Railway and Cloudflare: cloud hosting, databases, and service infrastructure. Legacy recovery copies may also be retained in Supabase.
• Vercel and Resend: website hosting and waitlist or email services.
• Apple and Google: account sign-in; Apple also provides App Store purchases and push notifications.
• Superwall: purchase functionality and subscription-related analytics, including an app-specific account identifier, transaction information, device information, and SDK events.
• OpenRouter, AI model providers, and search providers: processing AI requests and web research.
• Composio and the services you connect: authorizing integrations, retrieving context, transferring files when needed, and carrying out requested actions.

Connected services and AI providers also handle information under their own policies. You can review the policies of OpenRouter, OpenAI, Superwall, and the other services you choose to use.

We may also disclose information when legally required, to protect rights and safety, or as part of a merger, acquisition, or transfer of the business, subject to applicable privacy protections.

Storage and deletion

We retain account and workspace information while needed to provide the service, or until you delete it, subject to legal, security, and recovery needs. Retention depends on the kind of information and its purpose; we do not promise a single deletion period for every record or service provider.

You can request account deletion inside Dony’s settings. Deletion removes your Dony cloud workspace and disconnects linked integrations. We retain limited purchase and usage records with their link to your deleted user account removed, to prevent duplicate credits and handle purchase-related obligations. Apple and other providers may retain their own records. Backup or recovery copies may remain until removed through the relevant retention process.

Deleting a Dony account does not cancel an App Store subscription, erase files already saved on your devices, or delete content created in connected services. Manage subscriptions in your Apple account and remove those other copies separately.

Your choices and rights

You can use the basic to-do list without buying a subscription, choose whether to connect other apps or a Mac, disconnect integrations, and manage notification permissions in your device settings. Contact us to leave the waitlist or stop optional product emails; you can also use an unsubscribe link when one is provided.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your information; object to or restrict processing; withdraw consent; and complain to your local privacy regulator. Send requests to hello@venturous.studio. We may need to verify your identity before acting on a request.

Security and international processing

We use safeguards such as encrypted connections and access controls to protect information. No system can guarantee absolute security. Dony and its providers may process information in countries other than your own, including the United States. Where required, international transfers must use safeguards recognized by applicable law.

Children

Dony is not directed to children under 13, or a higher minimum age where required by local law. If you believe a child has provided personal information without the required permission, contact us so we can investigate and address it.

Changes to this policy

We may update this policy as Dony changes. We will update the date above and provide additional notice or request consent when required by applicable law.