Privacy Policy — doBuddy

Overview

doBuddy is a platform where you describe a mobile app idea out loud or in writing and AI turns that idea into a plan and a working app experience on your device. This policy explains what data is processed when you use the doBuddy app and the related services on doBuddy.ai.

The service is provided by Walnut Stack, L.L.C., a Delaware limited liability company located in Newark, Delaware, United States. For any privacy request, write to privacy@dobuddy.ai. For product support, write to support@dobuddy.ai. You can also reach us on WhatsApp at +1 (302) 208-7616.

This document is for information purposes and is not legal advice. For legal questions specific to your own use, please consult a qualified professional.

Account and identity data

Sign-in happens with Apple or Google. doBuddy has no password sign-up or sign-in, so we never see your password.

The account identifier returned by the sign-in provider.
Email address, display name, and the basic profile details the provider shares.
If you use Apple's Hide My Email, the private relay address Apple generates instead of your real address.
A technical identifier (UUID) for your account and records of your account status.

Onboarding and profile data

The first time you open the app we ask a few questions so we can tailor the experience. Your answers are stored with your profile.

Onboarding answers such as your software experience, how far along your idea is, and who you are building the app for.
Device language, country code, and locale.

Country is not derived from GPS or location tracking. It comes from your device language and region settings or from technical information about your connection. doBuddy does not collect precise location data.

AI inputs and generated content

The core of the service is the conversation between you and the AI. Because of that, the following content is processed:

Voice conversations, audio recordings, and audio transcripts.
Written prompts, corrections, and additional inputs.
Your app idea, the plan the AI produces, and the resulting app definition.
The name, design, screens, configuration, and content of the apps you save.

This content may include your business ideas, personal data, or sensitive information. We recommend not including confidential material, other people's personal data, or trade secrets in the conversation if you are not required to share them.

The apps you save are tied to your account, and you can open, edit, and delete them in the app. We do not promise that raw audio recordings or full conversation transcripts are stored permanently on doBuddy's side, and we do not claim that such content is never stored. To deliver the service, this content is sent to third-party AI providers.

AI providers and data flow

Anthropic: used for the written AI conversation, planning, and app generation.
OpenAI: used for live voice conversation, speech transcription, and text-to-speech.

In a live voice conversation, your device may connect directly to OpenAI using a short-lived credential. In that case audio does not always pass through doBuddy servers. When that flow is unavailable, audio is sent to our server and processed with OpenAI's transcription service.

These providers have their own retention, security, and data use practices. We make no unverified guarantee about model training, zero retention, or any specific retention period. We recommend reviewing the providers' own privacy policies for current information.

Technical usage, analytics, and error data

Firebase Analytics: product analytics such as screen views, feature usage, user journeys, funnels, durations, error categories, and subscription or notification interactions.
Firebase Crashlytics: app crashes and technical error reports.
Firebase Remote Config: remote management of app settings.
Microsoft Clarity: session recording and product experience analysis.

We do not intentionally attach full transcripts, prompt text, plan text, or generated app documents to analytics events. On the Clarity side, sensitive areas such as live transcripts, plans, generated apps, and workspace content are masked. Even so, Clarity may process your interactions, technical device information, and unmasked interface context.

Your account UUID may be used as a pseudonymous technical identifier in some analytics and session tools.

Notification and device data

A Firebase Cloud Messaging (FCM) push token, if you grant permission.
Platform (iOS/Android), app version, device language, time zone, notification permission status, and last seen time.

Notifications are optional. You can change permissions at any time in your operating system settings. When you sign out, we start the process of removing the notification record for that device.

Payment and subscription data

Subscriptions and credit packs are handled through RevenueCat, via the App Store and Google Play.

Membership or entitlement status, product identifier, and store information.
Renewal and expiration dates.
Transaction or webhook identifiers.

doBuddy does not collect or see your card number or CVV. Pricing, tax, cancellation, refund, renewal, and payment processes are governed by the rules of the relevant app store.

Publishing interest and waitlist

The app includes a waitlist that measures whether you are interested in publishing to the App Store or Google Play. Automatic publishing of apps to the stores is not a feature of the current version.

Your answer about whether you would like to use publishing.
The name and identifier of the relevant app.
Timing information that helps us evaluate that interest.

If you join the early access list on doBuddy.ai, we also store the email address you submit, any optional answers you provide, and basic technical context such as marketing campaign parameters, referrer, country code, and device type, so we can understand where interest comes from and contact you about access.

Infrastructure and data location

Authentication, account data, saved apps, device records, the subscription mirror, and some operational logs are held on Supabase. The current Supabase project is in the West EU / Ireland region.

That said, we cannot state that all data stays inside the European Union. International data transfers may occur because of our use of OpenAI, Anthropic, Google/Firebase, Microsoft Clarity, and RevenueCat. Walnut Stack, L.L.C. is based in the United States, so data may be processed there.

We aim to process data with reasonable technical and organizational measures, including access controls, encryption in transit, and contracts with our service providers. No system is completely secure, and we make no claim of absolute security or of any certification.

Retention, account and app deletion

You can delete the apps you saved from inside the app.
The current version has no in-app screen for full account deletion; send your request to privacy@dobuddy.ai.

When an account is deleted, app data, profile information, device records, entitlement and credit data linked to that account are deleted by design. AI usage and cost records may remain in a separated or anonymized form for operational cost and accounting purposes.

In general we keep data for as long as your account is active, and after that only as long as needed for the purpose it was collected for or as required by law, tax, and accounting rules. Early access records are kept until launch communications are complete or until you ask us to remove them.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your data, and to receive your data in a portable format. Send such requests to privacy@dobuddy.ai; we may ask for additional information to verify your identity.

We do not make a definitive claim of full compliance with regulations such as the GDPR, UK GDPR, or CCPA/CPRA. If you are in the European Economic Area or the United Kingdom, you retain the right to complain to your local data protection authority. This policy is governed by the laws of the State of Delaware, United States.

We do not sell your personal information and we do not share it for cross-context behavioral advertising beyond the analytics and advertising measurement tools described in this policy.

Age limit

doBuddy is not directed to children under 13, and we do not knowingly collect data from anyone under that age. If you are in the European Economic Area or the United Kingdom, you must be at least 16 to use the service. If we learn that we collected such data, we delete it.

Changes to this policy

We may update this policy as the product evolves. We will announce material changes in the app or by email. Effective date: August 25, 2026.

For privacy questions write to privacy@dobuddy.ai, and for product support write to support@dobuddy.ai.