Last updated: 16 October 2026
Privacy policy
This privacy policy explains how dodi handles personal data: on the website https://www.dodi.app, in the web app at https://app.dodi.app, and in the dodi apps for Android and iOS. It applies to parents who use dodi and to the children who use dodi through their parents' accounts.
The short version
- Your family's personal content (your children's names, birthdates, notes, memories, conversations, your games and your AI keys) is end-to-end encrypted on your device. Our servers only store it encrypted and cannot read it.
- The AI features run with an AI provider that you choose. Your device sends requests directly to that provider, and the provider receives them in readable form: when your child talks to the voice companion, the provider receives your child's voice audio together with what the companion needs to answer, such as your child's first name, age and memories.
- We do not show ads, do not sell data, do not use tracking or analytics tools and do not build marketing profiles.
- You can delete your account and all of your family's data at any time in the app under Settings, General, Delete account.
1. Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) is:
Alexander Birke
[to be added], Austria
Email: team@dodi.app
Write to this address for any question about your data or to exercise your rights.
2. Who uses dodi
Families use dodi together. The account holder must be an adult parent or legal guardian (see our terms of service). Children do not have their own account. They use dodi through kid profiles that a parent creates in their own account, and the parent decides which features they use.
The parent provides the children's data and consents to its processing on the children's behalf where consent is needed. This matters because the GDPR treats children's data with special care, and in Austria a child can only consent on their own from the age of 14.
3. End-to-end encryption: what we can and cannot read
When you register, dodi creates an account key on your device. Your family's content is encrypted on your device (XChaCha20-Poly1305) with a key that only your devices hold, protected by your password and by post-quantum device keys (ML-KEM-768). We receive only ciphertext.
Encrypted, we cannot read it: your children's names, birthdates, avatars and PINs, your notes about them, their memory (what the companion has learned about them), conversation transcripts, personas and companions, games you create (including their code, images and your Game Studio conversations), saved game moments (snapshots), friend cards and the AI keys you bring.
Not encrypted, needed to run the service: your email address, your language and display settings, the AI providers and models you selected, the number of kid profiles and their app language, technical ids, timestamps (for example when a game was played or a voice session started), game play results (completed, progress), usage counts (how many tokens or voice minutes were used), the friend connections between kid profiles (anonymised), the categories (but not the content) of memories, and games published on Discover (see section 7).
4. What we process, why, and on which legal basis
4.1 Your account
- Data: email address, password (stored only as a secure hash), confirmation that your email is verified, an invite code if registration required one, and for every signed-in device a session record with the IP address and browser or device type.
- Purpose: creating your account, signing you in, keeping your account secure and contacting you about your account.
- Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR).
- Login codes and security emails are sent through Resend (see section 8).
- Bot protection: sign-up, sign-in and password reset are protected by Cloudflare Turnstile. Cloudflare receives your IP address and technical browser signals to tell people from bots. Legal basis: our legitimate interest in protecting accounts against automated attacks (Art. 6(1)(f) GDPR).
4.2 Your family's content
Kid profiles, memories, conversation transcripts, games, snapshots and friend cards are stored on our servers in encrypted form only (section 3), so that you can use them on all your devices. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Please only enter what dodi needs. If you add health information about a child, for example a learning difficulty to the notes, you do so voluntarily and consent to its processing for the purposes described here (Art. 9(2)(a) GDPR). It stays end-to-end encrypted on our side, but it is part of the context the AI provider you choose receives (section 5).
4.3 Using the service
- Data: play records (which kid played which game, when, progress and success), activities (for example "voice session started"), AI usage counts per kid and model, and technical error reports (error message, browser or app version, the ids involved; no IP address).
- Purpose: showing you insights, enforcing limits, keeping dodi running and fixing errors.
- Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in a stable, secure service (Art. 6(1)(f) GDPR).
4.4 Game Studio screenshots
When you create or change a game in Game Studio, dodi can check how the game looks. For this, your device sends the game's code to our screenshot service, which renders it in a headless browser and returns images to your device. The game is processed in memory for this request only and is not stored. This is switched on by default. You can switch it off or use your own screenshot service in Settings, Game Studio. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
4.5 Feedback you send us
When you use "Give feedback" in the app (or "Report this game" on a Discover game), we receive what you choose to send: the name you enter, the category (for example a bug report or inappropriate content), your message, an image if you attach one (for example a screenshot; the app saves it anew first, which removes embedded details such as where a photo was taken) and, if you opened the form from a game, that game. We also receive your account's email address, so we can reply to you. Unlike your family's content, feedback reaches us in readable form, because you send it to us on purpose. We store it and email it to our team so we can answer you, fix problems, improve dodi's safety measures and act on Discover games. Legal basis: our legitimate interest in improving dodi, keeping it safe for children and answering you (Art. 6(1)(f) GDPR).
4.6 Newsletter
If you sign up for our newsletter on the website, we store your email address, language, the list you chose and a one-way hash of your IP address (to limit abuse), and send you a welcome email through Resend. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to team@dodi.app.
4.7 The website
The website is a static site hosted by Vercel. It sets no cookies and uses no analytics. When you open it, Vercel processes your IP address and browser information in server logs to deliver the pages and protect them against attacks. Fonts are served from our own site, not from Google. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
5. AI providers: what they receive
We do not run our own AI models. Every AI feature uses a model from a third-party AI provider. Your device sends the request directly to the provider, not through our servers. The provider has to read the request to answer it, so it receives the data in readable form. You decide which provider dodi uses for voice, thinking, game creation and images by adding your own API key for it. You have your own account with that provider: you and the provider decide how it handles your data under your contract with it. We are not involved and never see the requests.
What the provider receives depends on the feature:
| Feature | Who uses it | What the provider receives |
|---|---|---|
| Voice companion | your child | your child's voice as live audio, which the provider transcribes, plus your child's first name, age and app language, their memory, your notes about them, the persona, the list of their games and, during a game, the game's content and the names of friends playing |
| Help and texts in games, drawing feedback | your child | the question or request, the game's content and state, a picture of the game screen for drawing feedback, your child's age and language, and the context listed for the voice companion |
| Drawings made in games | your child | a short description of what to draw |
| Teaching the companion a trick | your child | what your child asked for |
| Updating memory after conversations | your child's device | the transcript of recent conversations, the current memory and the persona |
| Game Studio | you | your description, sketches or photos you attach, screenshots of the game, the age and language of the children the game is for, and a short learning context from their memory and your notes (not their names) |
| Translations when publishing | you | the texts of the game you publish |
Providers you can choose:
| Provider | Seat | Used for |
|---|---|---|
| xAI (Grok) | USA | voice, thinking, game creation, images |
| Anthropic (Claude) | USA | thinking, game creation |
| Google (Gemini) | USA | voice, thinking, images |
| Venice.ai | USA | thinking, game creation, images; runs open models itself and forwards requests for some models (for example Claude or Grok) to their makers |
Each provider handles the data under its own privacy policy. Most providers keep API requests for a limited time to detect abuse and do not use them to train their models, but this differs by provider and plan. In particular, Google may use data sent with a free Gemini API key to improve its products, and people at Google may review it. Please read the policy of the provider you choose: xAI, Anthropic, Google, Venice.ai.
Google Gemini: Google's terms do not allow the Gemini API in services used by people under 18. Our terms of service therefore only allow Gemini for creating games in Game Studio, not for features your children use.
Before you add a key, the app asks for your explicit permission for this data sharing. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) and, for health information, Art. 9(2)(a) GDPR). You can withdraw your consent at any time by removing your keys in Settings, AI providers; the AI features then stop working.
6. Friends between families
Kids can become friends with kids of other families. Each kid profile has a random friend code. When two families connect, their devices exchange encrypted friend cards with the kid's name, avatar and, once the friendship is accepted, birthdate. We cannot read these cards. The other family's devices can, and when their child plays a game with friends, the friend's name can become part of the context their AI provider receives. Our server sees which kid profiles are connected and when they share something, but not what. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
7. Publishing on Discover
If you publish a game on dodi Discover, a readable copy of the game is created and becomes public: everyone can see and play it in the app and on our website, together with your chosen public name (handle). We do not publish your account, your email or your children's data with it. Before it goes live, the game is checked automatically by an AI model that we operate with our own provider account (it receives the game's texts and code, not your account data, and may also translate the texts) and, where needed, by a person. The published game is also included in the list of games on our website. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Take a game off Discover at any time; its public copy is then deleted.
8. Service providers and recipients
| Recipient | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | hosting of our servers and databases | [to be added] |
| Vercel Inc. | hosting of the website | USA / global edge network |
| Resend, Inc. | sending emails (login codes, notifications, newsletter) | USA |
| Cloudflare, Inc. | bot protection (Turnstile) | USA |
| AI providers (section 5) | AI features, under your own contract with the provider | USA |
| Apple, Google | app stores | under their own privacy policies |
These providers process data on our behalf under data processing agreements (Art. 28 GDPR), except where you have your own contract with them (your own AI keys, app stores). We share data with nobody else, unless the law requires it.
Transfers outside the EU: several providers are based in the USA. Transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the EU standard contractual clauses (Art. 46 GDPR). Every provider we work with must protect data at least as well as described in this policy.
9. On your device
The web app and the apps store on your device what they need to work: your sign-in token, encrypted copies of your data for offline use, unsent transcripts and play records until they are synced, and display settings. The web app uses only necessary first-party cookies (sign-in, language, active kid profile) and no tracking cookies. Signing out removes the sign-in and the offline copies from the device; deleting your account removes the rest.
The apps ask for access to the microphone (for the voice companion), the camera (to scan friend codes and photograph sketches in Game Studio) and photos (to attach pictures in Game Studio). You can refuse or withdraw these permissions in your device settings; only the related feature stops working.
10. How long we keep data
| Data | Kept until |
|---|---|
| Account and family content | you delete it or your account |
| Sign-in sessions | they expire after 30 days without use, or you sign out |
| Play records, activities, usage counts, error reports | you delete your account |
| Feedback you sent | you delete your account (marking it solved does not delete it) |
| Login codes | they expire after one hour, at the latest with your account |
| Newsletter subscription | you withdraw your consent |
| Backups | deleted data can remain in our backups for up to 6 months, after which the backups are overwritten |
11. Deleting your account
You can delete your account in the app under Settings, General, Delete account. You confirm with your password, and we immediately delete your account, every kid profile and all of your family's data from our servers: memories, conversations, games and their history, snapshots, friendships, settings and usage records. Games you published leave Discover. Copies that other families made of a published game before (remix) belong to them and stay. Snapshots your kids sent to friends are removed from the friends' accounts. All your devices are signed out.
If you cannot use the app, follow the steps on our account deletion page.
Data your AI provider received under your own key is handled by that provider; delete it there if needed.
12. Your rights
You have the right to access your data (Art. 15 GDPR), to correct it (Art. 16), to have it deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Much of this you can do yourself in the app; for everything else, write to team@dodi.app. Because your family's content is end-to-end encrypted, we cannot read it out for you: you see it in the app, and you can export games there.
You also have the right to lodge a complaint with a data protection authority, in Austria the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at, or the authority in your country.
13. Security
Besides end-to-end encryption, we protect your data with encrypted connections (TLS), separate database roles with row-level security, rate limits and regular backups. AI-generated games only run in an isolated sandbox without access to your account or your data. No system is perfectly secure; if a breach puts your data at risk, we inform you and the authorities as the law requires.
14. No automated decisions
We do not make decisions about you with legal or similarly significant effects based solely on automated processing (Art. 22 GDPR). The automated review of Discover games only decides whether a game is published.
15. Changes to this policy
We update this policy when dodi or the law changes. The date at the top shows the latest version. We inform you about material changes by email or in the app before they apply.