Privacy Policy
Last updated: July 10, 2026
Dongu is built on a simple principle: your data is yours. We don't run ads, we don't sell data, and we collect only what the product needs to work.
What we collect
- Account data: username, email address and a securely hashed password.
- Your content: the tasks, categories, tags, habits, wellness logs, countdowns, boards and settings you create.
- Billing state: your subscription plan and status. Card details are handled entirely by Paddle and never reach our servers.
- Technical basics: server logs (IP address, timestamp, endpoint) kept briefly for security and abuse prevention. No advertising trackers, no analytics profiles.
Who processes it
- Hosting: our servers and database (Supabase, PostgreSQL) store your account and content.
- Paddle (merchant of record) processes payments and issues invoices under its own privacy policy.
- Anthropic powers the optional AI features: when you press an AI button, the relevant task text is sent to generate suggestions. It is not used to train models on your data.
- Email: transactional email (verification, password reset, optional task reminders) is sent through our SMTP provider.
Cookies
We use only functional cookies: your sign-in session, your language choice and your theme preference. No third-party or advertising cookies.
Your rights
You can access, correct or export your data in the app, and request a full export or deletion by emailing hello@todongu.com. We honor the rights granted by the GDPR and the Turkish KVKK, including access, rectification, erasure and portability. If your account lapses to read-only after the trial, your data still remains available and exportable.
Retention & security
Your content is kept while your account exists and deleted when your account is deleted. Passwords are hashed, traffic is encrypted (HTTPS), and access to production systems is restricted.
Changes & contact
If this policy changes materially we'll notify you by email or in-app. Questions: hello@todongu.com.