Privacy Policy
Last updated 2026-11-10
1. Who we are
Dorotheus is published by Trinigence Inc., a corporation registered in Delaware, United States (“we”, “us”). We are the controller of the personal data described here. This policy covers the Dorotheus app for iOS and Android and the website dorotheus.app.
Contact for anything about your data: info@dorotheus.app.
2. What we collect
When you create an account
- Sign-in details. Your email address, if you sign in with a one-time code. If you use Sign in with Apple or Google, the identifier and email address they share with us. If you choose Apple’s “Hide My Email”, we receive a relay address, not your real one. We never receive your Apple or Google password.
To prepare your insights
- Profile. Your first and last name, and your gender.
- Birth details. Your date of birth, your time of birth (or that you don’t know it) and your place of birth. From the place we derive its coordinates and time zone, which the calculation needs. If you don’t know your time of birth, it stays unknown. We never guess one and present it as fact. When you change your details, the earlier versions stay with your account until you delete it.
While you use Dorotheus
- Your answers. Dorotheus asks short questions, and you answer by choosing from the options offered (for example “yes”, “sometimes”, “not sure”). Some questions are about your body, energy or mood, so an answer can say something about your health. See section 4.
- Your Journal. The cards you save, and what you add to them or to an entry of your own: a note in your own words (up to 500 characters), up to three photos and one voice recording of up to five minutes. Everything you add is optional.
- Photos and voice recordings. The app uses the camera and the microphone only when you choose to, and receives only the photos you pick. Before a photo leaves your phone, its metadata, including where it was taken, is removed.
- What you have seen. Which cards were shown to you and where you stopped, so we don’t repeat ourselves and can choose what comes next.
- Subscription status. Whether you have Premium and until when. Payments are handled entirely by Apple or Google, and we never see your card or bank details. The service that verifies purchases tells us their status under a random identifier, not your name or email.
- Notifications. If you allow notifications, a device token that lets us send them to your phone, and whether you have allowed them.
- Product analytics, only if you allow it. Which cards you read, for how long, and what you do with them (for example saving or sharing a card), linked to a random analytics identifier, not to your name or email. Until you allow it, the app sends none. You can switch it on or off at any time in Settings. Analytics never contain your birth details, answers, Journal, notes, photos or recordings, your IP address, or your device model.
- Technical data. A random identifier for each installation of the app, its platform (iOS or Android) and version, your phone’s time zone (so that your day is counted in your own time), and your sign-in sessions. We use your IP address only to protect sign-in against abuse and do not keep it with your account.
- Support. What you write to us and our replies.
On this website
- Visits. We count visits with a privacy-friendly analytics service that sets no cookies and stores no personal data.
- Early Access. If you join Early Access, your email address and where you found us (the referring site or the campaign name in the link, for example “instagram”). We keep these only to write to you about the launch of Dorotheus.
3. Why we use it, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Create and secure your account, and sign you in | Sign-in details, technical data | Contract |
| Prepare your insights, questions and Journal | Profile (name, gender), birth details, answers, Journal (notes, photos, voice recordings), what you have seen | Contract. For answers that may relate to health, your explicit consent (section 4) |
| Provide Premium | Subscription status | Contract |
| Send notifications | Device token | Consent (your phone’s permission). You can turn them off at any time |
| Understand and improve the app | Product analytics | Consent (Help me improve when you start, or in Settings) |
| Count website visits | Aggregated, cookieless statistics | Legitimate interest in knowing how the site is used, with no personal data |
| Early Access emails | Email address, source | Consent, given when you join. You can unsubscribe at any time |
| Keep the service safe and working, and fix errors | Technical data | Legitimate interest |
| Answer you, and meet legal obligations (for example tax records) | Support messages, records we must keep | Contract, legal obligation |
4. Birth details, answers and your Journal
These are the most personal things you share with us, and we treat them that way. They are used only to prepare your own experience of Dorotheus. They are never sold, never used for advertising, never shared with other users, never sent to an artificial-intelligence model, and never used to train one, ours or anyone else’s.
Insights about the body describe tendencies, not your health, and Dorotheus never asks about a diagnosis, a condition or a treatment. Still, an answer about how your body or mood has been can say something about your health, which the law treats as a special category of data. We process such answers only with your explicit consent, which you give in the app before you begin, on the screen that asks for your birth details. You can withdraw it at any time by deleting your account or by writing to us. This does not affect what we did before.
Your Journal, with its notes, photos and voice recordings, is visible only to you. We do not read, analyse or share it.
5. Who helps us run Dorotheus
We do not sell your personal data and we do not share it for advertising. We share it only with service providers that process it on our behalf, under contract and on our instructions, and each receives only what its task needs. Your birth details, answers and notes stay on our own servers, and the photos and recordings in your Journal in our own storage.
- Hosting and storage. The servers and database that run Dorotheus, the storage for the photos and voice recordings in your Journal, this website, and the network that carries encrypted traffic between the app and our servers.
- Email delivery. Sending sign-in codes and service emails, and keeping the Early Access list.
- Apple and Google. Sign in with Apple or Google, in-app purchases, and delivering notifications to your phone.
- Purchase verification. Confirming your purchases and subscription status with Apple or Google.
- Notification delivery. Passing notifications on to Apple and Google, which deliver them.
- Product analytics. Understanding how the app is used, only with your consent.
- Website statistics. Cookieless counts of visits to this website.
We may also disclose data when the law requires it, to protect the safety of people or the service, or to a successor if Dorotheus is ever sold or merged. In that case this policy continues to apply and we will tell you.
6. International transfers
We are a US company, and your data is processed in the United States and in the other countries where we and our providers work. When data from the European Economic Area, the United Kingdom or Serbia is processed outside them, we protect it with an adequacy decision (such as the EU–US Data Privacy Framework, for certified providers) or with the European Commission’s standard contractual clauses and their UK and Serbian equivalents, with additional safeguards where needed. You can ask us for a copy of the safeguards.
7. How long we keep it
| Data | Kept for |
|---|---|
| Account, profile, birth details and their earlier versions, answers, Journal and notes | While your account exists. Deleted fifteen minutes after you ask to delete it |
| Photos and voice recordings in your Journal | Until you remove them, delete their entry or delete your account, when they are deleted at once. If your Premium ends and does not come back within six months, they are deleted then, and the entry’s card and note stay |
| Sign-in codes | One day |
| Sign-in sessions | Until you sign out or they expire, then 7 days (30 days for the tokens that renew them) |
| A log of account events (created, signed in, email changed, deletion requested), without your email or details | One year |
| Product analytics | Only as long as needed to understand and improve the app. Your analytics identifier is deleted with your account |
| Copies in backups | Until the backup that holds them is replaced in the normal course |
| Records we must keep by law (for example related to purchases) | For the period the law requires |
| Early Access email and source | Only as long as needed to tell you about the launch, or until you unsubscribe |
| Support messages | Only as long as needed to resolve your request and follow up on it |
8. Deleting your account
In the app: Menu → Settings → Delete account. Your account closes at once, and fifteen minutes later your data is deleted, except records we must keep by law. Signing back in before then cancels the deletion. Without the app, see Delete your account.
9. Your rights
Wherever you live, you can ask us to:
- tell you what data we hold about you and give you a copy (access)
- correct it. You can also edit your name and birth details yourself in Menu → Birth Details, and your email in Menu → Sign-In Methods
- delete it. You can also delete a Journal entry, a photo or a recording yourself in the app at any time
- give it to you in a portable format
- restrict or object to how we use it, including anything based on legitimate interest
- withdraw a consent you gave. This does not affect what we did before
Write to info@dorotheus.app. We answer within one month, and we may need to confirm it is really you. You can also complain to a data-protection authority. In Serbia, that is the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs). In the EU or UK, it is the authority where you live or work.
If you live in a US state with a consumer privacy law (such as California): we do not sell or “share” personal information for cross-context behavioural advertising, we use sensitive information only to provide the service you asked for, and you have the rights above, including to appeal a decision by replying to our answer.
10. Children
Dorotheus is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you believe we have, write to us and we will delete it.
11. Security
Data is encrypted in transit, including between our servers and the database. Photos and recordings travel to and from our storage only through short-lived links made for that one file, and are stored encrypted. Access is limited to the people who need it to run the service, sign-in codes and tokens are stored only in hashed form, and the token Apple gives us for Sign in with Apple is stored encrypted. No system is perfectly secure. If a breach ever puts your data at risk, we will tell you and the authorities as the law requires.
12. Changes to this policy
This page always shows the policy that applies now. When we change it, we publish the change here and update the date at the top. If a change affects how we use your data, we will tell you in the app before it takes effect.
13. Contact
Trinigence Inc., Delaware, United States. info@dorotheus.app