# Privacy Policy — Dondori

> No telemetry, no accounts, your data stays on your device. Last updated: July 17, 2026.

This policy covers the Dondori macOS app and the dondori.io website, both operated by Dondori ("we"). Questions: support@dondori.io.

## The app

The short version: the app collects nothing about you.

- **No accounts.** Nothing to sign up for, no profile of you on our side.
- **No telemetry, no analytics, no crash reports.** The app does not phone home about how you use it and does not send crash dumps anywhere.
- **Your data stays on your device.** Tasks, time blocks, notes, and time sessions live in a database on your Mac. You can additionally encrypt it at rest with a passphrase-derived key (Settings → Security).
- **Sync is end-to-end encrypted.** Paired devices sync over an end-to-end encrypted channel; only devices on your explicit trust list can connect. Data is encrypted on your device before it goes anywhere — nothing readable ever leaves it, even through a relay.
- **Integration tokens live in the macOS Keychain.** Credentials for Linear, Jira, YouTrack, Google Calendar, and Toggl are stored in your Keychain, never leave your machine, and are not synced between devices.
- **Integrations talk directly to your services.** The app calls each tracker's API from your Mac with your credentials; that traffic never passes through us.
- **Update checks.** The app periodically fetches an update feed from dondori.io (Sparkle). Like any web request, this exposes your IP address and app version to our server; we don't use it to identify or track you.

## The website

dondori.io is a static site served through Cloudflare in front of our own server.

- **Server logs.** Cloudflare and our server keep standard access logs (IP, user agent, requested page) for security and operations; rotated routinely, not used to build profiles.
- **Analytics.** We may use privacy-friendly, aggregate site analytics — no cookies, no fingerprinting, no cross-site tracking. We see page counts, not people.
- **No ad trackers.** No third-party advertising or social-media trackers.

## Payments

The app is free while in beta. When paid plans launch, purchases will be handled by Paddle (paddle.com) as Merchant of Record. Paddle processes payment details under its own privacy policy; we receive what's needed to deliver your purchase (email, license status) and never see your card number.

## What we don't do

- We don't sell or share your data with anyone.
- We can't read your tasks, notes, or synced data — the design doesn't give us that access.
- We don't run ads and don't work with data brokers.

## Changes

If this policy changes, we'll update this page and the date at the top. Material changes will be called out in release notes.

## Contact

support@dondori.io