Privacy Policy

Last updated: May 16, 2026

This Privacy Policy explains what information MyDopa collects, how we use it, and your rights. MyDopa is operated by Renee Stripeaut ("we," "us," or "our").

1. Information We Collect

We do not collect precise location, contacts, browsing history, or health/medical records.

2. How We Use Your Information

• Provide, maintain, and improve the MyDopa service.
• Display your personal mood history, streaks, and insights back to you.
• Send push notifications you have opted in to receive.
• Investigate and fix bugs and security issues.
• Comply with legal obligations.

We do not use your data for advertising, automated profiling, or AI model training.

3. Sharing Your Information

We share your data only in these limited circumstances:

• Supabase — our database and backend infrastructure provider. Data is stored on Supabase servers under a data processing agreement.
• Google / Apple — only when you choose to sign in via those providers; they share minimal identity data with us per their own policies.
• TikTok — only when you explicitly tap "Share to TikTok." We transmit only the visual share card image you approve. We do not access your TikTok account beyond that single action.
• Legal requirements — if required by law, court order, or to protect rights and safety.

We never sell your personal data to third parties.

4. TikTok API Usage

MyDopa integrates the TikTok API solely to enable you to post a mood summary card to TikTok when you choose to do so. Specifically:

• We request only the minimum TikTok permissions needed to upload a single image or video post.
• We do not read your TikTok feed, followers, messages, or any other TikTok data.
• We do not store your TikTok credentials or access tokens beyond the duration of the share session.
• Sharing to TikTok is always user-initiated; the app never posts automatically.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

6. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request deletion of your account and associated data.
• Portability — receive your data in a machine-readable format.
• Opt-out of push notifications — revoke notification permission in your device settings at any time.

To exercise any of these rights, contact us at hello@mydopa.app.

7. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" of personal information. We do not sell personal information. To submit a request, email us at the address below.

8. Children's Privacy

MyDopa is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

9. Security

We use industry-standard measures including encrypted connections (HTTPS/TLS), row-level security in our database, and hashed authentication tokens. No system is 100% secure; please use a strong password or a trusted sign-in provider.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top. Continued use of MyDopa after changes constitutes acceptance of the revised policy.