Privacy Policy
Controller: Josue Luis Bueso Rivera, a natural person domiciled in Honduras. Contact: soporte@dunna.app.
In short
- Dunna works without an account. Without one, your data stays on your phone and we do not receive it.
- An account is optional and only used to share lists with other people.
- With an account, we store in the cloud your email, your profile and the lists you choose to share, with their tasks.
- We do not sell your data or show ads.
- You can delete your account and its data from the app at any time.
What data Dunna handles and why
Without an account: everything stays on your phone
Your activities, focus sessions, jars, tasks, subtasks, statistics, achievements, your name ("My name") and your preferences are stored in a database inside your phone. They never leave it. If you uninstall the app, they are deleted.
With an account: what is stored in the cloud
| Data | Why | Who sees it |
|---|---|---|
| Email address (and, if you create one, your password, which the authentication provider stores in protected form) | Signing in with a code sent to your email or with your password | Only you and us |
| Username and profile icon | So people you share with know who you are, and so you can be invited by username | People you share a list with |
| Shared lists (name, icon, color) and their tasks: title, icon, color, date, time of day, time, duration, repeat, description, whether done, who last edited, and subtasks | Showing them and keeping them up to date on the phones of everyone with access | Only people with access to that list |
| Who has access to each list and with what permission (owner, can edit, view only) | Enforcing permissions | People with access to that list |
| Invitations: code, permission, expiry (7 days) and, if you invite by email or username, that email or username | Giving access to the person you invite, even before they have an account | The person sharing the list and the invitee |
| Technical data: user identifier and change timestamps | Syncing and resolving simultaneous edits | Us |
Never uploaded to the cloud: your unshared lists and tasks (including "My tasks"), your focus sessions, jars, statistics, activities, or your local name.
Profile photo
The photo you pick from your gallery is copied to the app's folder and lives only on your phone. We do not upload it and the people you share with do not see it; they see your icon. Dunna only accesses your gallery when you choose the photo, and you can remove it from Account.
Notifications
Task reminders, the daily notice, the end-of-focus notice and the notification inbox are created and stored only on your phone, with no account and no internet. Your preferences (quiet hours, sound, which lists notify you) also live on the phone.
Today Dunna sends no remote notifications: we do not store your device identifier. If we ever enable them (for example, shared-list alerts while the app is closed), we will update this policy first and notices will pass through Apple, Google and Expo notification services.
Sign in with Apple and Google
You can sign in with "Continue with Apple" or "Continue with Google". We receive from them your email (or the private relay email Apple lets you use) and an account identifier to create your session; we do not receive your Apple or Google password.
Purchases and subscription (Dunna Pro)
Subscriptions are charged and managed by Apple (App Store) or Google (Google Play); we do not receive or store your payment details. We use RevenueCat to know whether your subscription is active and carry it to all your devices: it receives a user identifier (your account's, or an anonymous one if you have none) and the purchase status.
Who we share it with
- Other Dunna users: only what is described above, and only if you share a list with them.
- Supabase (database and authentication): hosts account and shared-list data on our behalf and only to provide the service.
- Email provider we contract to send the sign-in code.
- Apple and Google (sign-in and payments) and RevenueCat (subscription status), as explained.
- We do not sell your data or share it with advertisers. We may disclose data if required by law or a competent authority.
How we protect data
- The connection to the cloud is encrypted (HTTPS).
- Each shared list is visible only to people with access: the database enforces this row by row (row-level security), verified by automated tests.
- Invitations are accepted with a code that expires after 7 days.
How long we keep it
- On your phone: until you delete the data or uninstall the app.
- In the cloud: while you have the account. When you delete it, we immediately delete your profile, the lists you shared with their tasks (for everyone else too), your access to other people's lists, and your invitations, including pending ones for your email, plus your sign-in user.
- What you edited in other people's lists stays in those lists, without your name attached.
- Lists and tasks you delete in the app are marked as deleted in the cloud and are permanently deleted when you delete your account.
- Provider backups: removed on their normal backup cycle.
- Purchase records are kept by Apple, Google and RevenueCat under their own policies.
Delete your account
You can do it in the app, from the Account screen (open it by tapping the profile icon in the Focus header) → "Delete account and data", or by writing to soporte@dunna.app. This cannot be undone.
Erased from the cloud:
- The lists you created, with their tasks and subtasks and other people's access to them (those people lose them too).
- Your access to other people's lists.
- Your invitations, sent or received, including those pending for your email.
- Your profile and your sign-in user.
Not erased:
- What you edited in other people's lists is kept in those lists, without your name attached.
- Your local lists and tasks stay on your phone, unshared.
- Your subscription is not cancelled automatically: cancel it from your Apple or Google Play settings.
Your rights and how to request deletion
- Delete your account and its data, from the app: tap the profile icon in the Focus header to open the Account screen → "Delete account and data". Your local lists and tasks stay on the phone, unshared.
- By email: write to soporte@dunna.app from your account's email and we will delete it. We reply as soon as possible; to protect your account, we may ask you to confirm you are its holder.
- Stop sharing: whoever shares a list can remove anyone's access; whoever received it can leave it.
- Sign out: lists shared with you are removed from your phone.
- Subscription: deleting your account does not cancel your subscription; cancel it from the store (see Terms).
- Anyone, from any country, can ask for access to, correction of or deletion of their data by writing to soporte@dunna.app.
Children
Dunna is not directed to children under 13. We do not knowingly collect children's data.
This website
dunna.app is a static site. It uses no cookies, analytics, or third-party scripts or fonts.
Changes
If we change this policy, we will tell you in the app or on this page before the change takes effect, and update the date above.