Privacy Policy

Our Privacy Commitment

Dame is built for families. We understand that the data you trust us with—your tasks, schedules, conversations, and daily routines—is deeply personal. That's why we've designed Dame with privacy as a core principle, not an afterthought.

Our commitments to you:

• We will never sell your data. Your information exists solely to make Dame work for your household.
• We will never display advertisements. Dame is and will always be an ad-free experience.
• We encrypt everything we can. Messages are end-to-end encrypted. All other data is encrypted on your device and in transit.
• We collect only what's necessary. We don't track you, profile you, or collect data for any purpose other than making Dame better for you.

Introduction

Dame (“we,” “our,” or “us”) is a household coordination app designed to help families and households manage tasks, chores, events, and communication. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Information You Provide Directly

Account Information

• Display name
• First and last name (optional)
• Email address (provided via Google or Apple sign-in)
• Profile photo (optional)

Household Data

• Tasks: titles, descriptions, due dates, priority levels, assignees, location reminders, and photo attachments
• Chores: titles, descriptions, schedules, completion records, and assignees
• Events: titles, descriptions, dates, times, locations, attendees, and recurrence patterns
• Messages: text content sent within household or direct conversations

User Preferences

• Visibility settings for tasks, chores, and events
• Notification preferences
• App lock preferences

Information Collected Automatically

Device Information

• Device identifier (generated locally for sync purposes—we do not use hardware identifiers)
• Device type and operating system version
• App version

Usage Data

We collect limited, anonymized usage data solely to improve Dame:

• Sync timestamps and operation logs (for data synchronization)
• Aggregate feature usage patterns (e.g., which features are most popular)
• Crash reports and performance metrics

This data is used exclusively to identify bugs, improve performance, and understand which features matter most to our users. We do not use this data to build profiles, target content, or for any purpose other than improving Dame.

Information From Third-Party Services

Google Sign-In

• Email address
• Display name
• Profile photo URL

Apple Sign-In

• Email address (you may choose to hide your email)
• Full name (provided only on first authentication)

Device Calendar (when permission granted)

• Calendar event titles, dates, times, and locations
• External calendar identifiers for sync purposes

Device Contacts (when permission granted)

• Contact names and email addresses (only when adding event attendees)
• Contact data is not stored on our servers—only the name and email of attendees you explicitly add to events

How We Use Your Information

We use the information we collect exclusively to:

• Provide and maintain the Dame application
• Sync your data across your devices and with your household members
• Send task reminders and notifications you have enabled
• Enable location-based reminders when you arrive at or leave specific places
• Integrate with your device calendar to display and sync events
• Facilitate communication between household members
• Authenticate your identity and secure your account
• Improve app performance and fix bugs
• Understand aggregate usage trends (not individual behavior)

How We Do NOT Use Your Information

• We do not sell, rent, or trade your personal information to anyone, ever
• We do not display advertisements of any kind
• We do not share your data with advertisers or ad networks
• We do not build profiles for marketing or targeting purposes
• We do not use your data to train AI models
• We do not monetize your data in any way

Data Storage and Security

Local-First Architecture

Dame uses a local-first architecture, meaning your data primarily lives on your device. This gives you faster performance and ensures your data remains accessible even without an internet connection.

Data stored locally on your device includes:

• Tasks, chores, and events
• Messages and conversations
• Profile information
• Sync state and preferences

Cloud Synchronization

To sync data across your devices and with household members, we use Supabase (a cloud database service) to store:

• Encrypted sync operations
• Household membership information
• Profile data (master copy)
• End-to-end encrypted message content

Our Encryption Approach

End-to-End Encryption (E2E)

Messages between household members are end-to-end encrypted. This means:

• Message content is encrypted on your device before being sent to our servers
• Only members of the conversation hold the keys to decrypt messages
• We cannot read your message content—even if compelled by law, we cannot access it

Encryption at Rest

All other household data (tasks, chores, events) is encrypted:

• On your device using platform-native encryption
• On our servers using AES-256 encryption
• Data is decrypted only when accessed by authenticated household members

Local Security

• Your PIN is hashed using scrypt and stored securely on your device
• Biometric data (Face ID, fingerprint) never leaves your device—it is stored in your device's secure enclave
• Encryption keys are stored in platform-native secure storage (iOS Keychain, Android Keystore)

Data in Transit

• All data transmitted between your device and our servers is encrypted using TLS 1.3
• We enforce certificate pinning to prevent man-in-the-middle attacks

Data Sharing

Within Your Household

Data you create may be visible to other members of your household based on visibility settings you control:

• Household visibility: All household members can see the item
• Limited visibility: Only assigned members can see the item
• Private visibility: Only you can see the item

With Third-Party Service Providers

We use a minimal set of third-party services, chosen for their privacy practices:

Supabase

• Purpose: Database hosting, authentication coordination, real-time sync
• Data shared: Encrypted sync operations, profile data, household data
• Privacy Policy: https://supabase.com/privacy

Google (Google Sign-In and Maps)

• Purpose: Authentication, location search for events
• Data shared: Authentication tokens, location search queries
• Privacy Policy: https://policies.google.com/privacy

Apple (Apple Sign-In)

• Purpose: Authentication on iOS devices
• Data shared: Authentication tokens
• Privacy Policy: https://www.apple.com/legal/privacy/

We Will Never

• Sell your personal information to third parties
• Share your data with advertisers or ad networks
• Provide your data to data brokers
• Use your data for targeted advertising
• Share your data with anyone except as described in this policy

Advertising Policy

Dame does not and will never display advertisements. We believe ads are incompatible with a family-focused app that handles sensitive household information. Our business model is based on providing value through our app, not monetizing your attention or data.

Device Permissions

Dame requests permissions only when needed for specific features. You can deny any permission and still use Dame—you'll just miss that specific feature.

You can revoke any permission at any time through your device settings.

Data Retention

• Account data: Retained until you delete your account
• Tasks, chores, and events: Retained until you delete them
• Messages: Retained until you delete them or clear the conversation
• Sync data: Retained for 30 days after deletion to ensure sync completion across devices, then permanently deleted
• Anonymized analytics: Retained in aggregate form (cannot be linked back to you)

Account Deletion

When you delete your account:

• Your profile is permanently removed from our servers
• Your household membership is terminated
• Your local data is cleared from your device
• Shared data (tasks, events assigned to others) may remain visible to other household members who co-own that data
• Your messages are deleted from our servers (other participants retain their local copies)

You can delete your account at any time from the Settings screen in the app, or by following the instructions on our Delete Account page.

Your Rights and Choices

You have the right to:

• Access: View all your personal data within the app
• Correction: Update your profile information at any time
• Deletion: Delete your account and associated data
• Data portability: Export your data in a machine-readable format
• Withdraw consent: Revoke permissions through your device settings
• Opt-out: Disable optional data collection in app settings

To exercise these rights, you can:

• Use the settings within the Dame app
• Contact us at privacy@damehq.com

Children's Privacy

Dame is designed for families, which may include children. However, account creation and management must be performed by a parent or guardian who is at least 18 years old.

We do not knowingly collect personal information directly from children under 13 without parental consent. Children may be added to a household by a parent or guardian, in which case the parent or guardian is responsible for their child's use of Dame.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at privacy@damehq.com and we will delete such information promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, specifically the United States where our servers are located.

We use Supabase, which stores data in data centers located in the United States. By using Dame, you consent to the transfer of your information to the United States.

We ensure your data remains protected by using encryption in transit and at rest, and by working only with service providers who maintain appropriate security standards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app and on our website
• Updating the “Last Updated” date at the top of this policy
• Sending you an in-app notification for significant changes
• Requiring acknowledgment for material changes that affect your rights

We encourage you to review this Privacy Policy periodically. Your continued use of Dame after changes are posted constitutes your acceptance of the revised policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@damehq.com

We aim to respond to all privacy-related inquiries within 30 days.

Additional Information for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the categories of personal information we collect and how we use it
• Right to Delete: You can request deletion of your personal information
• Right to Correct: You can request correction of inaccurate personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Opt-Out of Sale: We do not sell personal information, so this right does not apply

To exercise these rights, contact us at privacy@damehq.com.

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email address, device identifiers)
• Internet or network activity (app usage data, sync logs)
• Geolocation data (when permission granted, for location-based reminders)
• Audio/visual information (photos you upload)
• Inferences drawn from the above (household membership, preferences)

We do not sell personal information. We have not sold personal information in the preceding 12 months.

Additional Information for European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Data Controller

Dame HQ is the data controller responsible for your personal information. Contact: privacy@damehq.com

Legal Basis for Processing

• Contract: Processing necessary to provide you with Dame services (account management, sync, core features)
• Consent: Processing based on your explicit consent (location permissions, calendar access, contacts access)
• Legitimate Interests: Processing for our legitimate interests where not overridden by your rights (security, fraud prevention, improving the app)

Your GDPR Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right not to be subject to automated decision-making

Data Protection Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

Additional Information for Canadian Users (PIPEDA)

If you are located in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:

• Access your personal information held by us
• Challenge the accuracy and completeness of your information
• Withdraw consent for certain processing activities

To exercise these rights or file a complaint, contact us at privacy@damehq.com or the Office of the Privacy Commissioner of Canada.

This Privacy Policy is effective as of January 29, 2026.