Privacy Policy

1.Data we collect

• Account information: name, email, password (stored only as a hash, never in plain text), and profile picture if any.
• Content you create: decks, cards, documents, notes, tags and review sessions.
• Files you upload: images, audio, video and attached documents.
• Study data: card grades, review schedule, streaks and statistics.
• Technical data: last activity time, IP address and browser information in system logs, used for security and troubleshooting.

2.Signing in with Google

If you choose "Continue with Google", authentication is handled by Google's Firebase Authentication. Doopi only receives your name, email address (with its verification status), profile picture and Google account identifier.

We do not read your Gmail, contacts, Google Drive or any other Google data, and we never post on your behalf. Data received from Google is used only to create and sign in to your Doopi account.

3.How we use data

• Provide, maintain and sync the service across your devices.
• Schedule reviews and show study statistics.
• Send necessary emails such as verification codes and password resets.
• Support you when you send feedback or report a bug.
• Detect and prevent abuse and keep the system secure.

We do not sell personal data and do not use your content for advertising.

4.Storage and security

Data is stored on servers managed by the Doopi team and transmitted over encrypted HTTPS connections. Passwords are hashed with bcrypt. Staff access to data is permission-based and logged.

No system is perfectly secure, but we always apply reasonable measures to protect your data and will notify you of any incident that affects you.

5.Sharing with third parties

We only share data in these cases:

• Infrastructure providers that help run the service, such as Google Firebase for Google sign-in, to the extent needed for their work.
• When required by a lawful request from a competent authority.
• When you choose to share content yourself, for example into a study group.

6.Cookies and browser storage

Doopi uses your browser's storage (localStorage, IndexedDB) to keep you signed in, remember interface preferences and hold unsynced document drafts. We do not use advertising cookies or third-party trackers.

7.Retention and deletion

We keep your data while your account is active. When you ask us to delete your account, the account and its content and files are deleted within 30 days, except for information the law requires us to keep.

To request account deletion, send a request through our contact page (doopi.net/en/contact) using your registered email address.

8.Your rights

• Access and edit your profile information directly in the app.
• Request a copy of your personal data.
• Request deletion of your account and data.
• Withdraw consent, for example by removing Doopi's access in your Google account settings.

Send requests through our contact page (doopi.net/en/contact); we reply within 7 business days.

9.Children

Doopi is not meant for children under 13 to sign up on their own. If you are a parent and believe your child has given us data, please contact us to have it removed.

10.Changes to this policy

We may update this policy. The date of the latest update is always shown at the top of the page; for significant changes we will notify you in the app or by email.