Last updated: July 26, 2026
DooDads is a photo-sharing app for you and your friends. We take privacy seriously. This policy explains what we collect, why we collect it, and how you can control or delete your data.
Sign in with Apple. When you sign in, Apple sends us your Apple user ID (a stable identifier unique to you + our app) and, if you choose to share it, your Apple-generated relay email address. We store your Apple user ID to identify your account. We use the relay email only to contact you if you reach out to us for support.
Photos. The one photo you post per doodad is uploaded to Cloudflare R2, a third-party object storage service. Your photo is visible to your approved friends inside the app. We do not share your photos with anyone else, and we do not use them to train AI models.
Push notifications. When you grant notification permission, we store your device's APNs push token (an identifier Apple issues to your device). We use it solely to deliver the daily doodad notification. Tokens are deleted when you delete your account or disconnect your device.
Crash diagnostics. We use Sentry to capture crash reports when the app fails. Sentry collects technical details about the crash (device type, OS version, stack trace). These reports are not linked to your name or email — only to an anonymised session ID. They help us fix bugs.
Phone number. If you choose to enable discoverability so pals can find you, we verify your phone number once via Twilio Verify (a third-party SMS service). We do not store your phone number. Instead, we store a one-way cryptographic hash (HMAC-SHA256 with a server-side secret) of your number. The original number cannot be recovered from the hash. We use the hash only to let other users who already have your number in their contacts discover your account. Discoverability is opt-in and can be turned off at any time in settings, which deletes your hash from our servers.
Contacts. If you use the “find pals from your contacts” feature, your contact phone numbers are hashed on your device (HMAC-SHA256) before anything leaves your phone. Only the hashed codes are uploaded to our servers — never the original numbers or names. We compare your hashed codes against hashed codes from other DooDads users to find mutual matches, and we notify existing users when a new person whose number matches a stored hash joins the app. Your contact names and email addresses never leave your device. Turning off contact matching in settings revokes and deletes all your stored contact hashes from our servers.
You can delete your account at any time from the app: go to your profile, tap the gear icon (Settings), then Account Privacy, then “delete my account.” That is two taps plus a confirmation. Deletion is immediate and permanent.
When you delete your account, we erase:
DooDads uses the following third-party services, each of which has its own privacy policy:
Your data is stored and processed in the United States. By using DooDads you acknowledge that your information may be transferred to and maintained on servers located outside your country of residence.
DooDads is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us at support@doodads.app and we will delete it promptly.
We may update this policy when we change how we collect or use data. We will update the “Last updated” date at the top of this page. Continued use of DooDads after the date of any change constitutes your acceptance of the revised policy.
Questions about this policy or your data? Email us at support@doodads.app. We respond within 48 hours on business days.