Privacy policy

• Thoughts you dump (text, transcribed voice, text read from photos) and the tasks, reminders, questions, ideas and notes DOOP makes from them, including due dates, class names, priority and any notes you add.
• Weekly goals, class folders and your profile: an optional name, your timezone, your daily summary time and notification level.
• Account details if you create an account: your email address (or the email from Google sign-in) and a hashed password. DOOP never sees your Google password.
• Connection keys for Google Calendar and Google Drive if you connect them. They are stored encrypted and only used to act on your behalf for the features below.

You can use DOOP without an account. Everything then lives in your browser's local storage on that device and never leaves it, except the text you ask DOOP to sort (see "AI sorting"). Clearing your browser data removes it. When you later create an account, DOOP moves that data into your account once.

When you tap "DOOP →", record a voice note, or scan a photo, that content is sent to DOOP's AI provider (through the Lovable AI gateway) to turn it into organised items or text. Requests are not stored by the provider for training (DOOP sends them with storage disabled). DOOP keeps your original words with the resulting items so nothing is lost in translation. Guest usage is rate-limited per device to prevent abuse.

• Calendar: dated tasks become events in your primary calendar and stay in sync while DOOP is open. Deleting a task removes only the event DOOP created. If you turn on "Bring my Google events into DOOP", upcoming events become reminders in DOOP; DOOP never deletes or rewrites your own Google events.
• Drive: DOOP creates one "DOOP" folder and can only see files and folders it created there (Google's drive.file scope). It cannot browse the rest of your Drive.
• You can disconnect either integration at any time in Settings. DOOP then deletes the stored connection key and asks Google to revoke it.
• DOOP's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Only you. Every record is tied to your account and protected by row-level security in the database, so other users cannot read it. DOOP does not sell data, show ads, or share your thoughts with anyone. Service providers that run the app (hosting, database, AI gateway) process data only to provide the service.

If you choose a notification level other than "Off", DOOP can show browser notifications (daily summary, late items) while a DOOP tab is open. They are generated on your device from your own data; nothing is sent to a push service.

• Export everything as a JSON file from Settings at any time.
• Delete a thought from any list. Deleted items are removed from view immediately and purged within 30 days.
• Delete all my thoughts wipes items, goals and dumps while keeping the account.
• Delete my account removes the account, all data, and connected-app keys permanently.

DOOP is designed for students. If you are under the age where you can agree to online services where you live, use DOOP with a parent or guardian's permission, or use guest mode, which stores nothing on our side except what you ask the AI to sort.

If this policy changes, the date at the top changes and the new version applies from then on.

Questions? Reach the DOOP team through the contact details on the DOOP website.