Privacy Policy

1. Who we are

Dotilo is published by Dotilo ("we," "us"). You can reach us at privacy@dotilo.top.

This policy covers the Dotilo app for Android and this website.

2. Information that stays on your device

To work, the app keeps the following in its private storage on your phone:

• your nickname, your choice of companion character and outfits, pets and room settings;
• your weight (in kg), your eating schedule and meal times, and, if you choose to fill them in for the weight forecast, your height, birth year or date, activity level and goal weight;
• your fasting records, daily check-ins, streaks and badges;
• your language and other app settings, and, if you buy the ad-free option, a record of that purchase (including the Google Play purchase token) so the app can re-check it.

We cannot see this information, and it is not sent to us. The app is excluded from Android cloud backup. You can copy a local backup to your clipboard yourself in Settings; what you do with that copy is up to you.

You can remove your profile and records at any time with "Clear Local Data" in Settings. The app keeps only the marker of an ad-free purchase, so you do not lose it. To remove everything, clear the app's storage in Android settings or uninstall the app. After reinstalling, you can restore your purchase through Google Play.

3. Permissions the app uses

• Notifications: to show your meal and fasting reminders. They are scheduled on your phone and are not sent from a server.
• Run after restart: so that reminders are set again after your phone restarts, the app updates, or the time zone changes.
• Internet: to show ads and to verify the optional purchase.

Dotilo does not ask for your location, contacts, camera, microphone, photos or files, phone number, or any account.

4. Ads (Google AdMob)

Unless you have bought the ad-free option, the app shows ads from Google AdMob, including optional rewarded ads that unlock outfits. When an ad is requested, Google may collect and use data such as your advertising ID, IP address (and the approximate location it implies), device and operating system details, app identifiers, performance diagnostics (such as app launch time and crashes), and how you interact with ads (such as taps and video views). Google uses this to serve, measure and protect ads, and, where you allow it, to personalize them.

In regions where the law requires it (for example, the European Economic Area and the United Kingdom), Dotilo asks for your choice through Google's consent form before ads are requested, and "Ad Privacy Settings" in Settings lets you change that choice at any time. In every region, you can reset or delete your advertising ID, or turn off ads personalization, in your phone's Android settings (usually Settings > Google > Ads; the path varies by phone).

We do not give Google your name, weight, schedule or fasting records. Google's own practices are described at policies.google.com/technologies/ads and policies.google.com/privacy.

5. The optional purchase (Google Play)

The one-time purchase that removes ads and unlocks all outfits and pets is handled by Google Play. Google processes your payment and keeps your payment details; we never see them.

To confirm that a purchase is genuine, the app sends the purchase token and the product ID to a small verification service that we run on Google Firebase (Cloud Functions, region asia-southeast1, Singapore). The service passes the token to the Google Play Developer API and confirms whether the purchase is valid. We do not store the token, and we do not link it to your name or email.

6. App security checks (Firebase)

To keep our verification service from being abused, the app uses Firebase App Check with Google Play Integrity. This sends Google a short attestation that the request comes from the genuine Dotilo app on a genuine device, together with a Firebase installation identifier. We use it only for this protection.

The app also contains Firebase Cloud Messaging, which is meant for optional service announcements. It is turned off by default, the app currently offers no way to turn it on, and no message token is created while it is off.

Like any internet service, our verification service and its hosting provider (Google) may keep standard server logs, such as IP address, time and request type, for a limited period for security and troubleshooting.

7. Health-related information

Your weight and fasting records are health-related. In Dotilo, they are only used on your phone to display your schedule, streaks and weight log. They are not sent to us, not shared, and not used for advertising.

Dotilo is not a medical device and does not diagnose, treat, cure or prevent any condition. Intermittent fasting does not suit everyone. Please talk to a healthcare professional before you start or change your eating pattern.

8. Sharing pictures (your choice)

Dotilo can offer to share a picture of your progress. The progress card shows only your streak, totals and badges; it contains no name and no weight.

On Android 14 and later, if you take a screenshot of the app, Dotilo may offer to share a copy of what the app was showing at that moment. That copy can include whatever was on screen, such as your weight. You can turn this offer off in Settings.

Nothing is shared unless you choose to: you tap Share and pick where it goes in Android's share sheet. The picture goes from your phone to the app you choose, not to us.

9. Sharing and service providers

We do not sell your personal data and we do not share it for advertising. The only outside services involved are provided by Google LLC and its affiliates: AdMob (ads), Google Play (purchases) and Firebase (App Check and the verification service). Google may process data in countries other than your own, under its own terms and safeguards.

We may disclose information if the law requires it.

10. How long we keep information

Data on your device stays there until you delete it, as described in Section 2. We keep no user database. Server logs described in Section 6 are kept by the hosting provider for a limited period. Data held by Google for ads, Play or Firebase is kept under Google's policies.

11. Security

Data sent between the app and our verification service, or to Google, is encrypted in transit (HTTPS/TLS). Data on your phone is kept in the app's private storage and protected by Android's app sandbox. The app does not add its own encryption on top, so we recommend a screen lock on your phone.

No method of storage or transmission is completely secure, so we cannot promise absolute security.

12. Your choices and rights

Depending on where you live (for example, under the GDPR, the UK GDPR, the Thai PDPA or the California CCPA), you may have rights to access, correct, delete or restrict the use of your personal data, to object to it, to withdraw consent, and to complain to your data protection authority.

Because your profile and records never leave your phone, you can already exercise most of these rights with the controls in the app. For anything else, including data Google holds about ads, use your Google account's privacy tools or write to us at privacy@dotilo.top and we will help.

13. Children

Dotilo is for people aged 18 or over, and the app asks you to confirm this when you set it up. We do not knowingly collect information from anyone under 18 and the app is not directed to children. If you believe a minor has used the app, please contact us.

14. Changes to this policy

If we change how the app handles information, we will update this page and the policy shown in the app, and change the date at the top. If a change is significant, we will also tell you in the app.

15. Contact

Questions about privacy: privacy@dotilo.top

16. This website

This website is a static page. We run no analytics or advertising scripts and set no cookies. Your language choice is remembered only in your own browser. Our hosting provider may keep standard server logs, such as IP address and time of access, for security.