Dont You Do It: Privacy Policy

Version 2026-10-09.

Changes announced: none.

The short version. The app collects nothing. It has no account, no server and no analytics. What you put in stays on your phone and is deleted when you delete the app. Our website counts visits without cookies, as totals only.

1. Who is responsible

4V3D OÜ (registry code 17515961), Tallinn, Estonia, is responsible for the personal data described on this page (in legal terms, the controller). Contact: [email protected], +372 5444 0211. The full company details are in the Terms of Use.

The law does not require us to appoint a data protection officer and we have not appointed one. Your message goes straight to the person who runs the company.

In practice we hold very little: the emails people send us and the order records the stores show us. Everything in the app is on your phone and under your control.

2. The rules we hold ourselves to

These rules are the same in everything 4V3D OÜ makes.

Only what is needed. We collect the least the product needs to work, and we build features so that less is needed.
Never sold, never used for ads, never used to train anything. Data is used to run Dont You Do It for you, in the ways this page lists, and for nothing else. We do not analyse you to predict or influence anything, and no machine makes decisions about you. We hand data to an authority only when a law or a court order obliges us to.
No tracking. Nothing follows you from site to site. The app has no analytics at all. On the website we count visits, without cookies, and see totals only.
Named helpers only. Every company that handles data for us is listed below. We give 30 days' notice on this page before adding or replacing one.
Kept in the EU where we can. Where a helper is outside the EU, the list says so and says what protects the data there.
One person has access. Only the board member of 4V3D OÜ can reach our systems. There is no employee, contractor or support agent with access.
Gone when you say so. When you ask us to delete something we hold, it is gone from our live systems within 30 days, and from the last backup at the latest 90 days after that. The exception is the records the law makes us keep.
Told if something goes wrong. If a security incident is likely to put you at high risk, you hear from us without undue delay.

3. The app: what stays on your phone

The apps you chose to shield and your windows.
Your history: windows, attempts and the money ledger.
"Sleep on it" items: the text or link you shared and the price you typed, until they are released or you delete them.
That you agreed to the terms, with the version and the date.

None of this is sent to us or to anyone else. We cannot see it.

The Android app does not have permission to use the internet. Purchases go through the store's own billing.
On Android the app is kept out of cloud backup and phone-to-phone transfer. That is why deleted data cannot be recovered.
On Android its screens are hidden from screenshots, screen recording and the recent apps view.
The share card holds numbers and a date, never names or text, and it leaves your phone only when you choose to share it.
Usage access tells the app which app is in front. It never sees what is inside another app.
On iPhone, Apple's Screen Time gives the app anonymous tokens for the apps you picked. The app cannot see their names or anything in them.

To delete everything: tap "Delete all data" in Settings, or delete the app.

4. Purchases

Google or Apple take the payment, under their own terms and privacy policies. Apple shows us each sale without a name: the plan, date, price, country and device type, and for a subscription a random number that stands for the subscriber. Google Play shows us each order: its number, date, plan, price, phone model and the buyer's country, and in some countries the town and postcode. Neither shows us a name, an email address or card details. Google and Apple also count installs and crashes themselves, under their own policies.

5. What we hold, the website and email

The website dontyoudoit.app sets no cookies. We count visits with Cloudflare Web Analytics. It sets no cookie, stores nothing on your device, does not follow you from site to site and shows us totals only: pages, countries and browsers.

What	Details	Why	Legal basis	How long
Visiting the website	Your IP address and basic browser details, handled by our host to deliver the page	To show you the page and keep it safe	Our legitimate interest in running the site	Kept by Cloudflare only as long as it needs to deliver and protect the page. We keep no copy
Counting visits	The page viewed, the site you came from, your country, browser and device type, as totals	To see which pages are read	Our legitimate interest in knowing what is used	Kept by Cloudflare for up to 6 months. Nothing in it says who you are
Purchase records from the store	Order number, date, plan, price and country. From Google Play also the phone model and, in some countries, the town and postcode. From Apple also the device type and a random subscriber number	To keep our accounts and handle refunds	Accounting law, and the contract for a refund	7 years from the end of the financial year, as Estonian accounting law requires
A refund we pay ourselves	Your name, bank account number and the amount	To pay you	Contract with you, and accounting law	7 years from the end of the financial year, as Estonian accounting law requires
Emails you send us	Your email address and whatever you write	To answer you	Our legitimate interest in answering, or steps towards a contract	Deleted when no longer needed, at the latest 2 years after the last message

Who	What they do	Where
Cloudflare, Inc. (USA)	Delivers the website through its network, protects it from abuse and counts visits. To do that it receives your IP address and basic browser details	Worldwide network, including the EU. Transfers to the USA are covered by the EU-US Data Privacy Framework and standard contractual clauses
Forward Email LLC (USA)	Receives email sent to our dontyoudoit.app addresses and passes it on to our mailbox	USA. Covered by its data processing agreement with standard contractual clauses
Proton AG (Switzerland)	Our mailbox. It holds the emails you send us and our replies	Switzerland, which the European Commission recognises as protecting personal data adequately
The store (Google or Apple)	Takes the payment for purchases made in the app, under its own terms and privacy policy. Apple shows us each sale without a name: the plan, date, price, country and device type, and for a subscription a random number that stands for the subscriber. Google Play shows us each order: its number, date, plan, price, phone model and the buyer's country, and in some countries the town and postcode. Neither shows us a name, an email address or card details	See the store's own policy

Nobody in this list may use your data for their own purposes, except where the table says a company acts under its own policy. You can ask us for a copy of the safeguards that cover a helper outside the EU.

6. Children

Dont You Do It is made for adults. It is not meant for anyone under 18.

7. If something goes wrong

If a security incident with your personal data is likely to put you at high risk, we tell you without undue delay: what happened, what we know and what we recommend you do. We hold no app data, so this can only concern an email you sent us or an order record, and we would write to the address we have. Where the law requires, we also report it to the Estonian Data Protection Inspectorate within 72 hours. We keep a written record of every incident.

8. Your rights

You can ask us what we hold about you, have it corrected, get a copy you can take elsewhere, have it deleted, and have its use restricted. Where something is based on your consent, you can withdraw the consent at any time. Everything in the app is on your phone, so you see, change and delete it there.

Your right to object. Where this page gives our legitimate interest as the reason, you can object at any time, by writing to [email protected].

For anything else write to [email protected]. We confirm within 5 working days and answer in full within 30 days. It costs nothing.

If you are not happy with our answer, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the data protection authority of the country where you live.

9. Changes to this policy

The version and date at the top change with every edit. If a change matters, we announce it in the app and on dontyoudoit.app at least 30 days before it takes effect. A change never reduces the protection of data we already hold, unless the law requires it.