DoYours1. Information We Collect
When you register an account or use the service, we may collect the following information that you provide: account information, including username, display name, email address, and password (stored encrypted); guest sign-in does not require the above information but limits the features available, and you do not need to set a password if you sign in with a Google or Apple account; content you create, including tasks, checklist items, notes, group and member nicknames, and the frequent places you set (name and coordinates); meeting notes, including the meeting recordings you make or import (which include other people's voices and what they say), the attendee names you enter and which attendee you are, the time and length of the meeting, and the title, summary, outline, decisions, action items (with owner, due date and the original quote) and speakers the AI produces; AI requests, including the text you enter, the photos you take or choose to turn into to-dos (the photo itself is not kept; see Section 3), and the parsing results of your requests, where the result for a photo includes the text the AI read from it and the to-dos it produced (title, date, note and the original text in the photo); and subscription information, including plan, subscription status, and transaction ID, and we do not store your credit card information. If you choose to sign in with a Google or Apple account, we also receive information from that third party, including account identifier, name and email address (if you use Apple's "Hide My Email", the relay address Apple provides), and we do not get your password for that third party. When you use the service, we may automatically collect the following information: device information, including device name, device model, operating system version, app version, app installation ID, device identifier (stored hashed), push token, language, and time zone. To comply with future data requests from judicial authorities or competent authorities, and to investigate account security issues, we also collect login and security records, including the times you sign in, register, change your password, change your email, delete your account, or join or leave a group, together with the IP address of the connection at that time.
2. How We Use Information
We use the information we collect for the following purposes: providing the service, including creating and managing your account and sign-in (including Google and Apple sign-in), syncing tasks and groups, syncing to-dos to your phone's calendar and watch as you choose, sending reminders and push notifications, and handling subscriptions; AI parsing, including turning what you say or type into tasks, turning your meeting recordings into an outline, decisions and action items, and turning your photos into to-dos; improving the service, including diagnosing technical problems, developing new features, and that authorized staff may review your AI requests (the original text you sent and the result; photos themselves are not kept, so only the text result produced from a photo can be seen) to improve parsing quality and product features; communications, including sending service-related notices and responding to your questions and requests; security, including verifying identity, detecting and preventing fraud, abuse and security threats, investigating cases where an account may have been taken over, and keeping the service secure; and legal compliance, including complying with applicable laws and regulations, responding to legal requests (including cooperating with data requests from judicial authorities or competent authorities as required by law), and protecting our rights and interests. We keep your personal data only for as long as necessary to achieve the purposes for which it was collected, unless the law provides otherwise.
3. Location, Voice, Recording, Camera, Calendar and Watch
Location reminders (a notification when you arrive at or leave a place) are decided on your phone, and the result is used only on your phone. We only keep the places you set yourself. If you pin a location on the map for "this task only", it is saved with that task, and group members who can see the task can see it. Voice input is turned into text by your phone's speech recognition (Apple on iOS, Google on Android), and DoYours receives the text. Meeting notes are different: the meeting recordings you make (using the microphone) or import are uploaded to our server and handed to an AI service to be organized (see Section 4); the server processes a recording only in memory and discards it once processing finishes or fails, so we do not keep the audio file. The recording and the notes are also kept on your phone so you can play back the original words, and are cleared when you sign out, switch accounts or delete your account. A recording may include other people's voices and what they say, so please get their consent before you record (see the Terms of Service). The camera is used to scan the QR code of a group invite, and to photograph a school contact book, a note, a whiteboard and the like to turn into to-dos. When you turn a photo into to-dos, the photo you take or choose from your library is uploaded to our server and handed to an AI service to read the to-dos in it (see Section 4); the server processes the photo only in memory, removes the shooting location and other metadata from it before it goes to the AI service, and discards it once processing finishes or fails, so we do not keep the photo, and DoYours does not keep another copy of it on your phone. When you choose from your library, the system gives us only the one you pick, and we cannot browse your whole library. A photo may contain other people's information, such as a child's name and class, so please make sure you have the right to take and upload it (see the Terms of Service). If you turn on "Sync to phone calendar", DoYours creates a "DoYours" calendar on your phone and writes the to-dos you are responsible for that have a set time into it, and keeps it up to date as tasks change; DoYours reads and writes only that calendar, does not read the other events in your calendar, and the calendar's contents are not uploaded to our server, but depending on your phone's calendar settings (for example iCloud), that calendar may sync to your other devices. You can also add a to-do on an Apple Watch or Wear OS watch by speaking a sentence with the system's dictation; the watch's system does the dictation and DoYours receives the text, and the watch signs in on its own and connects directly to our server to get the to-dos you have not finished and to add and complete to-dos, and when you sign out of your phone the watch is signed out too.
4. AI Parsing, Meeting Notes and Photo To-dos
When you use AI features, we send the text you enter (speech is first converted to text by your phone's or watch's system speech recognition), the current time and time zone, and the nicknames and place names you have set to a third-party AI service provider for parsing, in order to turn your input into tasks. When you use meeting notes, we send your meeting recording, the attendee names you enter and which attendee you are, and the meeting date and time zone to the same AI service provider, which listens to the recording directly and produces the outline, decisions, action items and speakers; the AI tells the different people in a recording apart by voice only to show who said what within that one recording, and we do not create or keep anyone's voiceprint or match speakers across recordings. When you turn a photo into to-dos, we send the photo you take or choose (with its shooting location and other metadata removed first), today's date and your time zone to the same AI service provider, which reads the photo directly and produces the to-dos, and we do not send along your nicknames, group members' names, frequent places or existing tasks; we instruct the AI to read only the text in the photo and not to identify who the people in it are. We currently use Google Gemini's paid API, and under Google's terms this data is not used to train models, but Google may log what is sent and the response for a limited period to detect and prevent abuse. We may change or add AI service providers from time to time, and will update this policy when we do.
5. Sharing of Information
We promise not to sell, rent or trade your personal data to third parties, and the service does not show ads. Group members can see shared tasks, task status (done, declined) and shared places; notifications and activity records do not reveal your whereabouts. The results of your meeting notes can by default be seen only by you. When you turn action items into tasks and assign them to group members, you can choose to let the people assigned view the whole meeting (including the summary, outline, decisions, speakers and all action items, but not the recording), and you can take that back at any time; only people who are assigned can be allowed, and other members of the same group who can see the task cannot see the meeting or tell that the task came from a meeting. Anyone you have not allowed just receives an ordinary task. We may share your information in the following cases: with your consent, we may share your information with third parties; we share the information needed to provide the service with the third-party service providers that help us, including Google Cloud (hosting, located in Taiwan), an AI service provider (AI parsing, meeting notes and photo to-dos, currently Google Gemini), Firebase Cloud Messaging and Apple push (sending notifications; the notification that your meeting notes are ready may include the meeting title), Google Maps (showing maps), an email delivery service (sending verification emails), and Apple and Google (account sign-in and subscription payments), and these services handle data under their own policies and some may process data outside Taiwan; if we are involved in a merger, acquisition, sale of assets or bankruptcy, your information may be transferred as part of the transaction, and we will notify you before any such transfer takes place; where required by law or by an official request from a judicial authority or competent authority, or to protect our rights, user safety or public safety, we may disclose the necessary data, limited to what is necessary; and we may share aggregated or anonymized data with third parties, which cannot identify you.
6. Third-Party Services
The service may contain links to third-party websites or services (for example OpenStreetMap and the Central Weather Administration). We are not responsible for the privacy practices of these third parties. Please read their privacy policies before providing information to them. If you choose to sign in with a Google or Apple account, you authorize us to get the account information described above from that third party; to learn how that third party handles your data, please read its privacy policy. We may use third-party services to provide certain features, and these services may collect your information; we choose reputable service providers and require them to meet appropriate data protection standards.
7. Retention and Security
Except as described below, we keep your data until you delete your account. Members can delete their account under "Account" in the app, and within 30 days we delete or anonymize your personal data, except subscription and payment records that the law requires us to keep. After an account is deleted, we may keep some information for legal compliance, dispute resolution or enforcing agreements. Login and security records (including IP addresses) are kept for 365 days and then deleted automatically; after you delete your account they are still kept until that period ends. Meeting recordings and photos are not kept on our server, and the text read from a photo and its results are kept, like other AI requests, until you delete your account; the results of your meeting notes are kept until you delete that meeting in the app or delete your account, and cannot be recovered once deleted, while meeting notes that failed to process are deleted automatically after 30 days; the recordings and results on your phone are kept until you delete that meeting, sign out, switch accounts or delete your account. We use a range of technical and organizational measures to protect your information, including sending data over encrypted connections, storing passwords hashed, regular security audits, and security training for staff. Despite our reasonable security measures, no transmission or storage of information can be guaranteed to be absolutely secure. If a data breach occurs, we will notify you and the competent authority as required by law.
8. Your Rights
Under applicable data protection laws, you have the following rights: the right of access lets you request access to the personal data we hold about you; the right to rectification lets you request correction of inaccurate or incomplete personal data; the right to erasure lets you request deletion of your personal data or account, and you can also delete any meeting in the app at any time, and members can delete their account at any time under "Account" in the app, while guests, or anyone who has uninstalled the app, can also email [email protected] at any time to request deletion, and once deleted it cannot be recovered; the right to restrict processing lets you, in some cases, request that we restrict how we process your personal data; the right to data portability lets you obtain the data you provided to us; the right to object lets you, in some cases, object to our processing of your personal data; and the right to withdraw consent lets you, where we process your data based on your consent (such as location, microphone, camera, calendar and notification permissions), withdraw that consent at any time in your phone's system settings. To exercise these rights, email [email protected] and we will reply within 30 days.
9. Children, Minors and CSAE Prevention Standards
The service is suitable for people of all ages. Users who have not reached the age of majority should read this policy and the Terms of Service with their legal guardian and use the service only with their consent. We do not knowingly collect from minors any personal data beyond what is needed to provide the service. If you are a parent or guardian and want to access, correct or delete your child's data, email [email protected] and we will handle it after verifying your identity. If we find that we have collected a minor's personal data without a guardian's consent, we will delete it immediately unless the law requires us to keep it. Zero-tolerance policy: we have zero tolerance for any form of child sexual abuse and exploitation (CSAE) content, and it is strictly forbidden to use the service to post, share or spread unlawful imagery involving minors. If you find content you suspect violates this, you can report it by emailing [email protected], and we will review it promptly; once a violation is confirmed, we will immediately and permanently ban the account, delete the related content, and report it to the relevant law enforcement authorities as our legal obligations require.
10. Cross-Border Data Transfer
Your information may be transferred to and processed on servers outside Taiwan, for example an AI service provider (AI parsing, meeting notes and photo to-dos, currently Google Gemini), Firebase Cloud Messaging and Apple push (sending notifications). Data protection laws in those countries or regions may differ from those in Taiwan. When we transfer information to other countries or regions, we will make sure it is protected as required by this policy and applicable law. We may take the following measures: entering into appropriate contract terms with the recipient, making sure the recipient's country has an appropriate level of data protection, and taking other protective measures recognized by law. By using the service you agree that your information may be transferred to other countries or regions for processing.
11. Policy Updates
We may update this policy from time to time. The updated policy will be posted in the app and takes effect when posted, and we will also notify you by showing a notice in the app or by other appropriate means. Continuing to use the service after an update means you accept the updated policy. If you do not agree to the updated policy, please stop using the service.
12. Contact Us
If you have any questions, comments or complaints about this policy or our privacy practices, please contact us by emailing [email protected]. We will reply within a reasonable time after receiving your request. If you are not satisfied with how we handle your complaint, you may have the right to complain to the personal data protection authority of your country or region.