Privacy Policy

Operated and published by Shubh Agarwal (Founder)
Application: DoNeki · App identifier: com.gooddeeds.app

This policy is designed to be consistent with the EU/UK General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act, 2023 (DPDP Act), the applicable Information Technology Rules, and the California Consumer Privacy Act/CPRA (CCPA), to the extent they apply to you.

1. Who we are

DoNeki is a social good-deed platform. Users record short videos of good deeds, which are reviewed and awarded "Good Deed Points" (GDP), and can inspire others via the Ripple mechanic. The data controller / Data Fiduciary is Shubh Agarwal, Founder of DoNeki, 1 Main Street, Mhow, Indore, Madhya Pradesh - 453441. For India, our Grievance Officer is Shriyans Agarwal, 9301320111.

2. Information we collect

We collect only what the app needs to function. We do not use any third-party advertising or analytics SDKs, and we do not run ad networks, cross-app tracking, or behavioural profiling for advertising.

2.1 Personal information you provide

• Account & identity: mobile phone number and country code (required to register), first name, last name, username, and a password (stored only as a bcrypt hash).
• Profile: display name, profile photo, city/state/country, short bio, and selected interest categories.
• Identity selfie: during registration you take a selfie to help verify that deeds are performed by the account holder.
• Email address: collected only for administrator or organisation accounts.

2.2 Content you create

• Deed videos: recorded in-app or selected from your gallery.
• Deed details: text description, optional location, time spent, money spent, category, and verification selfie/voice note.
• Social content: comments, appreciations ("likes"), saved deeds, shares, friend requests, and direct messages.
• Invitations: if you invite someone, we process their name, phone number and/or email.

2.3 Device and technical information

• Push token: a Firebase Cloud Messaging (FCM) device token.
• Security metadata: when you request an OTP, we record the phone number, OTP, IP address, and device user-agent.
• App settings: your privacy settings and last-active times.

2.4 Contacts (optional)

If you choose to find friends, the app reads your address-book phone numbers to match against existing users. The uploaded numbers are not stored.

2.5 Location

The app does not read your device GPS location. Any "location" attached to a deed is a text label you type yourself.

3. How we use your information

4. Third-party services we use

We use a small number of processors:

• Microsoft Azure: Store and serve uploaded media.
• MSG91 / Twilio: Send login OTP by SMS.
• Google Firebase Cloud Messaging: Deliver push notifications.

5. How we share information

With other users: your public profile, published deeds, comments, and messages.
With our processors: only as described above to run the service.
For legal reasons: where required by law or court order.
We do not share your data for third-party advertising.

6. Data retention

We keep personal data for as long as your account is active. After account closure, we will delete or irreversibly anonymise your personal data except where we must retain limited records to meet legal obligations or resolve disputes.

7. Security

Media is stored in Microsoft Azure. Passwords are stored only as bcrypt hashes; login uses signed JSON Web Tokens. Data is transmitted over HTTPS.

8. Children's privacy

DoNeki is not directed to children under 13, and we do not knowingly collect personal data from them without the legally required consent. Under the India DPDP Act, a child is an individual who has not completed 18 years of age.

9. Your rights

Depending on where you live, you may have the right to: access your data, correct it, delete it, restrict or object to processing, port your data, and withdraw consent. To exercise any right, contact us.

10. How to delete your data

You may request deletion via the app, our public deletion page, or by emailing donekiapp@gmail.com.

11. How to contact us