Privacy Policy
Last updated 2026-09-28
The short version
- We use your details — your name, gender, and when and where you were born — only to prepare your own insights.
- We never sell your data, never use it for advertising, and never share your birth details, answers or Journal with advertisers.
- Your answers are your own. We use them to choose what to show you next, not to profile you for anyone else.
- Product analytics in the app only with your permission. The website uses no cookies.
- You can see, correct, export or delete your data at any time. Deleting your account deletes it.
1. Who we are
Dorotheus is published by Trinigence Inc., a corporation registered in Delaware, United States — “we”, “us”. We are the controller of the personal data described here. This policy covers the Dorotheus app for iOS and Android and the website dorotheus.app.
Contact for anything about your data: [email protected].
2. What we collect
When you create an account
- Sign-in details. Your email address, if you sign in with a one-time code; or the identifier and email address Apple or Google share with us if you use Sign in with Apple or Google. If you choose Apple’s “Hide My Email”, we receive a relay address, not your real one. We never receive your Apple or Google password.
To prepare your insights
- Profile. Your first and last name, and your gender.
- Birth details. Your date of birth, your time of birth (or that you don’t know it) and your place of birth. From the place we derive its coordinates and time zone, which the calculation needs. If you don’t know your time of birth, it stays unknown — we do not guess one and present it as fact.
While you use Dorotheus
- Your answers. Dorotheus asks short questions; you answer by choosing from the options offered (for example “yes”, “sometimes”, “not sure”). There is no free-text field. Some questions are about your body, energy or mood, so an answer can say something about your health — see section 4.
- Your Journal. Over time, Dorotheus writes a journal from the experiences you have recognised in your answers. It contains nothing you did not tell us.
- What you have seen. Which cards and insights were shown to you and which you opened, so we don’t repeat ourselves and can choose what comes next.
- Subscription status. Whether you have Premium and until when. Payments are handled entirely by Apple or Google; we never see your card or bank details.
- Notifications. If you allow notifications, a device token that lets us send them to your phone.
- Product analytics — only if you allow it. How the app is used (for example which screens are opened and whether a step was completed), linked to a random analytics identifier, not to your name or email. Analytics events never contain your birth details, answers or Journal.
- Technical data. Device model, operating system and app version, IP address, and error reports, which we need to run and secure the service.
- Support. What you write to us and our replies.
On this website
- Visits. We count visits with Umami, a privacy-friendly analytics service. It sets no cookies, stores no personal data and does not follow you across sites, and it respects your browser’s Do Not Track setting. We see figures such as pages viewed, the site that referred you and the campaign in the link you followed.
- Early Access. If you join Early Access, your email address and where you found us (the referring site or the campaign name in the link, for example “instagram”). We keep these only to write to you about the launch of Dorotheus.
3. Why we use it, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Create and secure your account; sign you in | Sign-in details, technical data | Contract |
| Prepare your insights, questions and Journal | Profile (name, gender), birth details, answers, what you have seen | Contract; for answers that relate to health, your explicit consent (section 4) |
| Provide Premium | Subscription status | Contract |
| Send notifications | Device token | Consent (your phone’s permission); you can turn them off at any time |
| Understand and improve the app | Product analytics | Consent, given in the app; withdraw it at any time in Settings |
| Count website visits | Aggregated, cookieless statistics | Legitimate interest in knowing how the site is used, with no personal data |
| Early Access emails | Email address, source | Consent, given when you join; unsubscribe at any time |
| Keep the service safe and working; fix errors | Technical data | Legitimate interest |
| Answer you; meet legal obligations (for example tax records) | Support messages; records we must keep | Contract; legal obligation |
4. Birth details, answers and your Journal
These are the most personal things you share with us, and we treat them that way. They are used only to prepare your own experience of Dorotheus. They are never sold, never used for advertising, never shared with other users, and never used to train artificial-intelligence models, ours or anyone else’s.
Insights about the body describe tendencies, not your health, and Dorotheus never asks for a diagnosis. Still, an answer about how your body or mood has been can reveal something about your health, which the law treats as a special category of data. We process such answers only with your explicit consent, which you give in the app before answering them and can withdraw at any time.
Your Journal is visible only to you.
5. How your insights are made
Dorotheus is built on principles of traditional astrology. Our own system calculates your chart from your birth details and selects insights and questions for you by fixed rules; your answers change what it shows you next. None of this produces decisions with legal or similarly significant effects on you.
We use a large language model to help write and check the wording of insights. The texts it helps write are shared by many people and are then applied to you by our own system. We do not send your name, email address or other directly identifying data to the model provider, and it may not use our data to train its models.
6. Who we share it with
We do not sell your personal data and we do not share it for advertising. We share it only with service providers that process it on our behalf, under contract and on our instructions:
| Provider | What for |
|---|---|
| DigitalOcean | Hosting of our servers, database and website |
| Resend | Sending sign-in codes and service emails; the Early Access list |
| Apple, Google | Sign in with Apple / Google; in-app purchases; push notifications (APNs, Firebase Cloud Messaging) |
| Amplitude | Product analytics in the app, only with your consent |
| Umami | Cookieless visit statistics for this website |
| Language-model provider | Help with the wording of insights (section 5) |
We may also disclose data when the law requires it, to protect the safety of people or the service, or to a successor if Dorotheus is ever sold or merged — in which case this policy continues to apply and we will tell you.
7. International transfers
We are a US company, and your data is processed in the United States and in the other countries where we and our providers work. When data from the European Economic Area, the United Kingdom or Serbia is processed outside them, we protect it with an adequacy decision (such as the EU–US Data Privacy Framework, for certified providers) or with the European Commission’s standard contractual clauses and their UK and Serbian equivalents, with additional safeguards where needed. You can ask us for a copy of the safeguards.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account, profile, birth details, answers, Journal | While your account exists; deleted when you delete it |
| Product analytics | Only as long as needed to understand and improve the app; deleted with your account |
| Backups | Overwritten in regular backup cycles |
| Records we must keep by law (for example related to purchases) | For the period the law requires |
| Early Access email and source | Only as long as needed to tell you about the launch, or until you unsubscribe |
| Support messages | Only as long as needed to resolve your request and follow up on it |
9. Deleting your account
In the app: You → ⋯ → Settings → Request account deletion. Without the app: see Delete your account. We delete your account and the data listed above, except records we must keep by law. Deleting your account does not cancel a subscription — cancel it in your App Store or Google Play account.
10. Your rights
Wherever you live, you can ask us to:
- tell you what data we hold about you and give you a copy (access);
- correct it — most of it you can edit yourself in Profile;
- delete it;
- give it to you in a portable format;
- restrict or object to how we use it, including anything based on legitimate interest;
- withdraw a consent you gave — this does not affect what we did before.
Write to [email protected]. We answer within one month, and we may need to confirm it is really you. You can also complain to a data-protection authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs); in the EU or UK, the authority where you live or work.
If you live in a US state with a consumer privacy law (such as California): we do not sell or “share” personal information for cross-context behavioural advertising, we use sensitive information only to provide the service you asked for, and you have the rights above, including to appeal a decision by replying to our answer.
11. Children
Dorotheus is for people aged 16 and over. We do not knowingly collect data from anyone younger; if you believe we have, write to us and we will delete it.
12. Security
Data is encrypted in transit, access is limited to the people who need it to run the service, and sign-in codes and tokens are stored only in hashed form. No system is perfectly secure; if a breach ever puts your data at risk, we will tell you and the authorities as the law requires.
13. Changes to this policy
We will publish any change here and update the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.
14. Contact
Trinigence Inc., Delaware, United States — [email protected]