Privacy Policy
Who we are and what this policy covers
Dono is operated by Ubiq Apps Private Limited. This policy covers our website and services, including information about people whose numbers are supplied by users even if they have not joined Dono. For privacy questions or requests, contact hello [at] ubiq [dot] dev.
Information we collect
Account information: your phone number, name, profile gender choice, verification and agreement confirmations, account identifiers and preferences.
Information you provide through the service: numbers you submit, interactions with other accounts, referral details, support requests (including the email address you give us for a reply and your message) and privacy choices. Someone else may supply your number when using Dono.
Transaction information: purchased items, payment references, amounts, payment and refund status, and associated credit activity. Payment providers handle checkout; Dono does not receive your full payment-card number through that checkout.
Usage and technical information: page visits, feature interactions, campaign/referral information, browser and device details, IP addresses, approximate location where derived by a provider, session identifiers, notification tokens and diagnostic records. We do not request your address book, identity documents or precise device location.
How we use information
We use information to verify accounts, provide the service, process transactions, deliver service communications, respond to support and privacy requests, prevent fraud and misuse, understand product usage and meet legal obligations.
A number provided by another user may be used to record their interest, support a mutual match and deliver a service alert through third-party messaging services, including before the recipient joins. Supplying another person’s number is not their consent. Nonusers can contact us to object, stop alerts or request deletion.
Authorized staff may access account and activity information to provide support, investigate issues and operate the service. Operational alerts may include names, account identifiers, partially masked numbers and relevant activity details.
Information shared with other people
Before a mutual match, a Spark recipient can use one Hint to reveal one randomly selected digit of the sender’s number in its actual position. The digit remains the same for that Spark and can help identify the sender. A mutual match shares each participant’s name, phone number and profile gender choice with the other.
Referral links contain the referrer’s phone number. Referrers see aggregate reward progress rather than a list of referred people, but changes may allow them to infer a signup. People who receive information may keep copies outside Dono.
Service providers and other disclosures
We share information needed by providers that help us with hosting and storage, account verification, SMS and messaging delivery, device notifications, payments, analytics, security, support and internal operations. For example, communications providers receive destination numbers and necessary message information; payment providers receive checkout information; analytics providers receive usage and device information.
Providers may process information outside India, including in the United States. Their own legal obligations and privacy terms may also apply. We may disclose information where required by law or reasonably necessary to protect rights, investigate misuse or resolve disputes. A business reorganization or transfer may involve information, subject to applicable protections and notice requirements.
Cookies and product analytics
We use cookies and local storage to keep you signed in, remember choices and support product analytics. Analytics helps us understand visits, feature use and campaign performance. Browser controls can restrict storage, although essential account features may then stop working.
Usage analytics on our website and signed-in web app may include replays of on-screen interactions, such as clicks, scrolling and navigation, to identify usability problems. Marketing-page activity is collected before sign-in. We configure masking for login forms and sensitive account fields; other page content may be captured. These tools receive page addresses, device information and visitor or account identifiers. Page addresses can include the phone number embedded in a referral link. Web analytics and these replays respect Do Not Track and Global Privacy Control signals.
Microsoft receives usage data through our web analytics integration and may use it for its own purposes, including Microsoft Advertising, under the Microsoft Privacy Statement. Masking page content does not make all usage information anonymous.
We use Meta Pixel and Conversions API to measure ads, sharing page visits, signup/checkout/purchase events, purchase details, hashed account IDs, IP/browser information and ad identifiers; attribution cookies last 90 days, and this tracking respects Do Not Track and Global Privacy Control.
Security
We use technical and organizational measures, including encryption and access controls, to protect information. No system is completely secure. Dono is not end-to-end encrypted, and we cannot control copies made by recipients. Never send verification codes or passwords to support.
Retention and deletion
A deletion request does not immediately remove your information. Your account stays active until processing is complete. We process requests manually within 7 working days (Monday to Friday, India time), excluding the request day.
Account and activity information is generally retained while the account or relevant activity remains active. Pending interests do not automatically expire. We do not currently apply a single fixed retention period to all records.
When processing deletion, we remove your profile and account phone information, end active sessions, remove registered devices, your own pending Sparks and your support requests, and forfeit remaining positive credits. Some records remain: purchase and credit history, referral and eligibility records, message-suppression preferences, a protected phone-derived identifier, outstanding refund adjustments and historical matches. Interests submitted by other people may also remain. These records support accounting, dispute handling, opt-outs and abuse prevention.
Legal obligations or disputes may require further retention. Provider records, diagnostic logs, backups and copies already received by others may remain subject to separate retention practices. We will explain applicable exceptions when handling a request. Uninstalling or signing out does not delete your account.
Request deletion or stop messages
To request deletion, use Settings → Request account deletion, or email hello [at] ubiq [dot] dev with the subject “Dono account deletion” and your account phone number, including country code. You do not need to reinstall the app or sign in. If you no longer control the number, explain that instead. Never send an OTP. A request receipt is not confirmation that deletion is complete.
Manage optional device notifications in your device settings. Use an available message-preferences link or email us to stop external service alerts, including if you have never registered. Stopping alerts does not delete your account or block incoming Sparks. Verification messages you request are separate.
Your rights and contact
You can ask for access, correction, deletion, information about data sharing, or help with an objection or withdrawal of consent by emailing hello [at] ubiq [dot] dev. We may need proportionate information to verify your request. You do not need an account to raise a privacy concern. Available rights depend on applicable law, and we will explain any lawful restriction.
We may update this policy as our practices change. We will update its date, give notice of material changes and obtain consent where required. For privacy complaints or support, contact hello [at] ubiq [dot] dev.