Effective
Summary
DoNavi keeps your tasks, lists, reminders and Vault on your iPhone. Nothing leaves it unless you sign in to DoNavi Shared and share a list.
- Private by default. Without DoNavi Shared, DoNavi has no account and sends your tasks nowhere.
- Shared lists go through our server so everyone in the list sees the same tasks. Only the people in that list can read them.
- No ads, no tracking, no selling. DoNavi contains no advertising, analytics or crash-reporting code, and we never sell or rent personal data.
- You can delete your shared account at any time from inside the app.
In this policy, "DoNavi", "we" and "us" mean The Bullpen Training LLC, which makes the DoNavi app.
Data that stays on your iPhone
Everything below is stored only on your device, in the app's own storage. We cannot see it.
|
What |
How DoNavi uses it |
|---|---|
|
Tasks, lists, checklists, notes, reminders, alarms |
To run the app. Shown on your widgets and Apple Watch through Apple's on-device sharing between them. |
|
Vault items (cards, documents, photos, videos) |
Encrypted on your iPhone with a key protected by your PIN and, if you turn it on, Face ID. The recovery email you can enter is kept on the phone only. |
|
Voice |
Turned into text by Apple's speech recognition, on the device when your iPhone supports it. Otherwise Apple processes the audio under Apple's privacy policy. DoNavi keeps the text, not the recording. |
|
Camera and photos |
Scanned lists and documents are read on the device. Photos you attach to a private task stay on the phone. |
|
Backups you export |
Written to a file you choose where to save or send. |
If you use iCloud Backup, Apple may include DoNavi's data in your device backup.
DoNavi Shared
DoNavi Shared is optional. When you sign in and share a list, we store the following on our server so the people in that list can see and change it together.
|
Data |
Why |
Who can see it |
|---|---|---|
|
Your display name and, if you add one, a profile photo |
So others know who added, changed or completed a task |
People who share a list with you |
|
Your email address, or the account ID Apple or Google gives us |
To sign you in |
Only our server |
|
Shared lists and their tasks: titles, notes, dates, checklists, assignments, progress |
To keep every member's copy the same |
Members of that list |
|
Photos, files and links attached to tasks in a shared list |
So every member gets them |
Members of that list |
|
Comments and the list's activity history (who added, changed or completed what, and when) |
To show the history and send alerts |
Members of that list |
|
Invite codes you create, and when invite codes were tried with your account |
To let people join, and to stop code guessing |
Only our server |
|
A record of each change your phone sent |
So a change sent twice is applied once |
Only our server |
Tasks and lists you never share are not sent to the server, even while you are signed in. Each list's data is readable only by its members. Our database rules enforce this for every request.
Signing in
You sign in to DoNavi Shared one of three ways. We never see a password.
- Email code. We email you a 6-digit code that expires in 10 minutes. We keep your email address to sign you in again.
- Sign in with Apple. Apple tells us an account ID and, if you allow it, your name and email, which you can hide behind Apple's private relay address.
- Google. Google tells us your account ID, name and email address. We ask Google for nothing else.
Your phone keeps a sign-in token in the iPhone Keychain so you stay signed in.
Notifications
If you allow notifications, your phone gives us an Apple push token. We use it only to send you alerts about your shared lists through Apple's push service.
- An alert shows the list's name, who made the change, the task's title and a short description of the change, such as a note or a completed task.
- Silent updates carry only a task ID. They tell your phone to refresh its widgets.
- We store your alert switches (assigned, completed, updates, comments, due dates, list changes) so the server respects them.
- Turn alerts off in DoNavi's settings, or for the whole app in iPhone Settings → Notifications. Signing out removes your push token from our server.
Socials, maps and links
Some features contact other companies directly from your phone. We do not receive what they send back.
- Socials. To show views and comments on your posts, your phone fetches your public posts from Instagram, TikTok and YouTube (through Google's YouTube service). If you sign in to Instagram inside DoNavi, its sign-in cookie stays on your iPhone. Each company handles these requests under its own privacy policy.
- Directions. Opening a task's location sends that address to Apple Maps or Google Maps, whichever you pick.
- Links. Opening a link on a task opens that website.
Who processes data for us
We use these providers to run DoNavi Shared, and only for that. We do not sell, rent or share personal data for advertising, and DoNavi does not track you across other companies' apps or websites.
|
Provider |
What it does |
Data it handles |
|---|---|---|
|
Hosts our database, file storage and sign-in (servers in the United States, AWS us-west-2) |
Everything listed under DoNavi Shared |
|
|
Sends sign-in code emails |
Your email address and the code |
|
|
Sign in with Apple, push notifications, speech recognition when not on the device |
Account ID, push token, alert content |
|
|
Google sign-in |
Account ID, name, email |
We may disclose data if the law requires it, or to protect people's safety. If DoNavi is sold or merged, this policy continues to apply to the data we hold.
How long we keep data, and deleting it
We keep DoNavi Shared data while your account exists and the lists it belongs to are in use.
- Delete your account: in DoNavi, Settings → Shared → Delete Account. This immediately deletes your sign-in, email address, profile, profile photo, push tokens and list memberships. Lists you own pass to the next member, or are deleted if you were the only one.
- What stays with others: tasks, comments, photos and files you added to a list other people still use stay in that list, shown with your name, so their list keeps working. They are deleted when that list is deleted.
- Leave a list: the list disappears from your phone. What you added stays for the remaining members.
- Deleted tasks: a task deleted from a shared list disappears for everyone. Our server keeps a deleted record so every phone removes it, until the list itself is deleted.
- Your phone: deleting the app deletes everything DoNavi stored on that iPhone.
Copies may remain in our hosting provider's backups for a short time before they are overwritten.
Your rights and choices
You can see and change most of your data in the app: edit your name and photo, edit or delete shared tasks you are allowed to change, leave lists, turn alerts off, or delete your account.
You can also email us at thebullpentraining@gmail.com to:
- get a copy of the personal data we hold about you;
- correct it;
- delete it;
- object to or restrict how we use it.
We answer within 30 days and will not treat you differently for asking. Depending on where you live, laws such as the EU and UK GDPR or the California Consumer Privacy Act give you these rights. Where the GDPR applies, we use your data to provide the service you asked for (performance of a contract), and you can complain to your local data protection authority.
We do not sell or share personal information as the California law defines those terms.
Children, security and where data is stored
- Children. DoNavi Shared is not meant for children under 13, or the minimum age where you live. We do not knowingly collect their data; if you think a child has signed up, email us and we will delete the account.
- Security. Connections to our server are encrypted. Database rules let each person read only the lists they belong to, and the Vault is encrypted on your iPhone. No system is perfectly secure, and we will tell affected users about a breach as the law requires.
- Where data is stored. Our server is in the United States. If you use DoNavi Shared from elsewhere, your shared data is transferred there, protected as this policy describes.
Changes and contact
If we change this policy, we will update the effective date at the top. If a change affects how we use data you already gave us, we will tell you in the app before it applies.
Questions or requests: The Bullpen Training LLC, 2077 58th Ave Cir E Bradenton, FL 34203, thebullpentraining@gmail.com.