Privacy Policy

The short version: what you do in Doze stays on your phone. Doze has no accounts, no ads, no tracking, and sells nothing about you. The only personal thing that leaves your phone is a morning photo, when you choose a photo task: it is checked by AI (OpenAI) and never kept by Doze. Doze asks before the first one. Besides that, Doze sends only technical data it needs to work (crash reports, a proof that it's the real app) and anonymous counts of how Doze is used, none of it linked to you.

What stays on your phone

• Your bedtime, wake-up, alarms, chosen morning task and settings.
• Your streak, calendar and how each morning felt (the faces you tap).
• Your signed promise, and your name if an earlier version asked for it.
• The apps and websites you choose to lock. Apple's Screen Time keeps these as private codes: Doze can't see which apps you use or for how long.
• Camera exercises (like push-ups or squats) and steps or shakes are counted on your phone. Those camera images never leave it.
• Writing tasks (like "Plan your day") are checked on your phone and never saved.

Deleting Doze deletes all of this.

Morning photos

When your morning task is a photo task (like making your bed), the one photo you take is sent to Doze's server and checked by OpenAI's image model, so Doze can tell you whether it passes. The photo is shrunk and stripped of location and other details first. Doze never stores it. OpenAI does not use it to train its models and may keep it for up to 30 days only to prevent abuse, under its API data policy.

What else Doze's server receives

• A random code made by the app when it's first opened, used only to limit how many photos one phone can check per day. It isn't linked to your name, Apple Account or anything else.
• A proof from Apple (App Attest) that the request comes from the genuine Doze app. It contains nothing about you.
• Like any website or server, your IP address and the time of each request. Google Cloud keeps these server logs for up to 30 days, in the United States, to keep the service safe and working.

Firebase (Google)

Doze's server, crash reports and the genuine-app check run on Google's Firebase. To do that, Firebase creates a random installation code for Doze on your phone and receives it, with your app version and iPhone model, when Doze opens. It's used only to run these services, never for ads, and it isn't linked to your name or Apple Account.

Crash reports

If Doze crashes, it sends a crash report through Google's Firebase Crashlytics: what went wrong in the code, your iPhone model, iOS version and app version. No name, no photos, no app usage. Crash reports are kept for 90 days.

Anonymous counts

While you set up Doze, it counts which setup screens are reached and how long each was open, when you leave Doze during setup, where you heard about Doze, your answers to iPhone's permission questions, whether the plans screen was shown and how long, whether the buy button was tapped or backed out of, whether a plan was bought or Doze was unlocked another way, and whether setup was finished, so we can see where setup is confusing and what reaches people. Later it also counts whether the offer to switch to yearly was shown and answered, whether the streak share button was used, whether Doze asked for a rating, which morning task is done each morning (and whether it was swapped), the face you tap for how you feel afterwards, and which task is tried with Settings › Practice. Each count goes to PostHog (product analytics, hosted in the EU) with device details (iPhone model, iOS and app version, language, the region set on your phone, time zone and similar technical details), the hour on your clock and a random code made only for this. The setup-finished and morning counts also carry your plan (yearly or monthly; trial, paid or a free code; set to renew or not). Never your name or your other answers. Doze doesn't record your screen. Your IP address reaches PostHog, as it does any server, but it isn't kept or used to work out where you are. Doze creates no profile of you, and nothing is linked to you or used for ads. We use this for one thing: to make Doze better.

Ads

Doze shows no ads, but it does advertise elsewhere, so we like to know which ads work. Doze tells Apple once when it's first opened, and again if a free trial starts, so that if an ad led to your install, Apple can give the ad network an anonymous count, with nothing about you or your device. If an Apple Ads ad led to your install, Apple tells Doze which campaign, ad group and search keyword it was, and the country, also with nothing about you, and that goes with the anonymous counts above. Doze itself sends nothing to any ad network.

Where it goes and how long it's kept

• Morning photos: checked and thrown away by Doze; OpenAI (United States) may keep them up to 30 days, only to prevent abuse.
• Server logs: up to 30 days (Google Cloud, United States).
• Crash reports: 90 days (Firebase Crashlytics, United States).
• Anonymous counts: up to a year at PostHog (EU); they can't be traced back to you.
• Everything else stays on your phone until you delete Doze.

Some of these services are in the United States. When data goes there from the EU or UK, the providers protect it with the safeguards EU law requires (Standard Contractual Clauses).

Your choices and rights

Photo checks only happen if you pick a photo task, and you can switch to a task that never leaves your phone at any time. Deleting Doze deletes everything on your phone. Because nothing on the servers is linked to you, there's no account to look up or delete; if you have a question or a request about your data, email us and we'll help. If you're in the EU or UK, Doze relies on your consent for photo checks and on its legitimate interest in keeping the app working and improving it for the rest, and you can complain to your local data protection authority. If you live in a US state with a privacy law (like California), you can ask what we have about you, and to correct or delete it. We'll never treat you differently for asking. Doze doesn't sell or share personal data.

Payments

Subscriptions are handled by Apple. Doze never sees your payment details; Apple only tells the app whether you're subscribed.

Email

If you email us or use Send feedback, we get your message and email address, and use them only to reply. If you choose to attach your night log, your email also carries Doze's log from your phone: the times Doze locked, checked and rang, which morning task ran (and why, if you swapped it), counts (like how many apps are locked) and which ad campaign led to the install, if one did, never app or site names, photos or your setup answers. Each email also carries a short random code made on your phone, so we can tell that two emails came from the same phone; it says nothing about you. We use all this only to look into your problem.

Children

Doze is not directed at children under 13.

Changes

If this policy changes, the new version will be posted here with a new date.

Contact

Doze is made by Adrian Van Poppel.

Questions or requests about your data, or anything else: dozesupport@gmail.com