Privacy Policy

Effective: April 23, 2026

Dona is a household companion app for families. This policy explains what we collect, how we use it, and the choices you have.

We've kept it short and plain on purpose. If anything is unclear, email us at hello@withdona.com.

The short version

  • We collect what we need to run Dona: your account info, the household content you create, and pseudonymous usage data to improve the product.

  • We never sell your information.

  • You can delete your account or export your data any time.

  • Connecting Google Calendar is optional, and we use that data only to power the integration you chose.

Who we are

Dona is operated from Montréal, Canada. For any privacy question or to reach our privacy contact, email hello@withdona.com.

What we collect

You give us:

  • Account info — your email and password, or a pseudonymous identifier from Google if you use Sign in with Google.

  • Profile — your name and (optionally) a photo.

  • Household content — the to-dos, events, lists, recipes, meal plans, notes, and member profiles you create. This belongs to you and your household.

We collect automatically:

  • Usage data — which screens you view and which features you use, tied to a pseudonymous identifier rather than your name or email.

  • Device data — device type, OS version, app version, and country (inferred from your IP, which we don't store).

  • Crash reports — diagnostic logs to help us find and fix bugs.

From connected services:

  • If you connect Google Calendar, we receive only the data needed for the integration you chose. See the Google Calendar section below.

How we use it

To run Dona, sync your household across devices, support the shared-awareness experience the product is built around, fix bugs, and (if you've opted in) send you product updates. We also disclose information when legally required.

We do not sell your personal information, and we do not use your household content to target advertising or build a profile of you.

Who else sees your information

Members of your household. That's the whole point — the people you've invited see the content you've shared with them.

Service providers we rely on. They act on our instructions and are bound by their own privacy commitments:

  • Google Firebase — authentication, database hosting (US, us-central1), push notifications, and crash reporting. Privacy policy

  • Amplitude — pseudonymous product analytics. We send feature usage events and screen views, never your household content. IP addresses are not stored. Privacy policy

  • Loops — used for our waitlist and product update emails, if you've signed up. Privacy policy

  • Google Analytics — used on our marketing website (withdona.com) to understand site traffic. Privacy policy

  • Google Calendar API — only if you connect the integration. Governed by the Google Privacy Policy.

Legal requests. When we're legally required to disclose information, or to protect the rights and safety of Dona, our users, or the public.

Business transfers. If Dona is acquired or merges with another company, your information may transfer. We'll notify you before that happens.

Family invites

When you invite someone to your household, we send them an email containing a link to accept, your family name, your family photo (if you've set one), and the inviter's name. They don't see any household content until they accept and join. If they decline or never respond, no further data is shared.

When someone leaves the household

When a household member leaves or is removed, the content they created — to-dos they added, events they scheduled, items on shared lists — stays with the household. Their personal account and profile are removed from the household, and any household data on their device is no longer accessible to them.

Google Calendar integration

If you connect Google Calendar, Dona requests the minimum scopes needed — typically calendar.events (read and create) or calendar.readonly (read only), depending on the feature you enabled.

What we do with your Google Calendar data:

  • Display your calendar events inside Dona alongside your household events

  • Create, update, or delete events when you explicitly ask Dona to

How we store it. We fetch on demand and cache only what's strictly necessary. We don't keep a permanent copy on our servers. When you disconnect or delete your account, cached data is deleted.

How we share it. Only with members of your household you've chosen to share it with, and with the database provider hosting the cached data on our behalf. Never with anyone else, except when legally required.

What we don't do. We don't use Google Calendar data for advertising, to develop Dona features beyond the integration you connected, or for any other purpose.

Dona's use of information from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar inside Dona any time, or revoke access directly at myaccount.google.com/permissions. When you do, we stop accessing your Google data and delete any cached copy.

Marketing emails

If you sign up for our waitlist or product updates, we collect your email address through Loops to send you those messages. Every email includes an unsubscribe link, and you can unsubscribe at any time. We don't share your email with third parties.

Security

All data moves over HTTPS/TLS. Authentication is handled by Firebase Auth. Access to production data is limited to authorized personnel with multi-factor authentication. We follow reasonable security practices but can't guarantee absolute security. If a breach affects your data, we'll notify you promptly in line with applicable law.

How long we keep things

We keep your data while your account is active. When you delete your account, we remove your content from our active systems within a reasonable period, and backups rotate out shortly after. We may retain anything we're legally required to keep.

You can delete your account any time from inside the app.

Your rights and choices

Depending on where you live, you have the right to:

  • Access the personal information we hold about you

  • Correct anything inaccurate

  • Delete your account and personal information

  • Export a copy of your data

  • Object to or restrict certain uses

  • Opt out of analytics (we honor this in-app)

To exercise any of these, email hello@withdona.com. We respond within a reasonable period, generally no longer than 30 days.

Children

Dona is built for adults running a household. Children must be added as profile-only members — they don't have their own login. We don't knowingly collect personal information directly from children. If you believe we've collected something we shouldn't have, email hello@withdona.com and we'll delete it.

Where your data lives

Dona is operated from Canada. Your data is stored in the United States (us-central1) by our service providers and may be processed there.

Canada (PIPEDA + Quebec Law 25). We comply with the Personal Information Protection and Electronic Documents Act and Quebec's Law 25, including its requirements around consent and cross-border disclosure of personal information.

EU / UK. Dona doesn't currently target users in the EU or UK. If you use Dona from there, the legal basis is your consent and our legitimate interest in providing the service. Email hello@withdona.com to exercise GDPR rights.

California. We don't sell your personal information. You can request access, correction, or deletion of your data.

Changes to this policy

If we change this policy, we'll update the date above. For material changes, we'll notify you in the app or by email at least 30 days before the change takes effect.

Contact

Questions, requests, or complaints? Email hello@withdona.com.