Privacy Policy for DoDoLine

Last updated: August 21, 2026 · Effective: August 21, 2026

This policy explains what happens to your data when you use DoDoLine (Android package com.dodoline.app, "the app"). It applies to the app only.

Who is responsible for your data

The app is published by Biologicsoft, owned and operated by Süreya Kılınç ("we", "us"), located in Türkiye. For the purposes of the EU/UK General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK), we are the data controller for the limited processing described below.

Contact: support@biologicware.com

Summary

Everything you write in DoDoLine — your tasks, projects and milestones — stays on your device. It is never uploaded to us, and we cannot see it. The app has no user accounts, no analytics and no advertising. The only data that leaves your device is what is strictly necessary to process and restore an optional "Pro" subscription, and that data is anonymous: it is not linked to your name or email address.

1. Data stored on your device only

The app stores the following on your device, in the app's own private local storage:

This data is never transmitted to us or to any third party. We operate no server for it and have no technical means of accessing it. It is not backed up or synchronised by the app. Deleting the app from your device deletes this data permanently.

Note: if you have enabled Android's own device backup or Google Drive backup feature, your operating system may include this app's local data in your personal device backup. That backup is controlled entirely by you and Google under your Google account settings, not by us.

2. Data processed when you buy or restore Pro

DoDoLine is free to use with up to three projects. An optional paid subscription ("Pro") removes that limit. If — and only if — you open the subscription screen, make a purchase, or use "Restore purchases", the following processing takes place.

2.1 Google Play

All payments are processed by Google Play. Google handles your payment method, billing details and identity. We never receive your name, email address, postal address or payment card details, and we have no access to them at any point.

2.2 RevenueCat

We use RevenueCat, Inc. (USA) as our subscription infrastructure provider, to validate purchases and to tell the app whether your subscription is currently active. RevenueCat acts as our data processor. When you purchase or restore, the following is sent to RevenueCat:

DataPurpose
An anonymous app user ID, randomly generated on your device by the RevenueCat SDK To associate a purchase with an installation so that it can be restored. It is not derived from your name, email, phone number or Google account.
Purchase and receipt data: product identifier, transaction ID, purchase and expiry dates, subscription status, renewals, cancellations and refunds To verify the purchase with Google Play and unlock Pro features.
Basic technical information: platform, operating system version, app version, SDK version, device model, and country/region derived from your IP address Automatically sent with the requests above; used to process the request, apply the correct store and currency, and prevent fraudulent purchases.

The app does not collect or transmit your Android Advertising ID (GAID), and it does not attach your name, email address or any other contact detail to your purchase record.

Legal basis (GDPR). Processing of the purchase and receipt data is necessary for the performance of the contract you enter into when you subscribe (Art. 6(1)(b) GDPR). Processing of the basic technical information for purchase validation and fraud prevention rests on our legitimate interests (Art. 6(1)(f) GDPR). Under KVKK, the corresponding grounds are Art. 5(2)(c) (necessary for the performance of a contract) and Art. 5(2)(f) (legitimate interests).

International transfer. RevenueCat processes data on servers in the United States. Where data is transferred out of the European Economic Area, the United Kingdom or Türkiye, the transfer is covered by RevenueCat's Data Processing Addendum and the European Commission's Standard Contractual Clauses.

3. In-app review prompt

After you have completed a number of tasks, the app may ask Google Play once to display its standard in-app review card. This is Google's own component: the app tells Google only that this is a suitable moment to show it. We do not receive, read or store your rating or review text, and we cannot tell whether you left one. Whether the card is shown at all is decided by Google.

4. What we do not do

5. Permissions

The app requests only internet access, which is required to validate subscriptions with Google Play and RevenueCat. It does not request access to your camera, microphone, location, contacts, photos, files, calendar or call logs.

6. How long data is kept

7. Security

Your content stays in the app's private storage area, which Android isolates from other apps. Communication with Google Play and RevenueCat is encrypted in transit using TLS. Because we hold no central database of user content, there is no server-side store of your tasks that could be breached. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Your rights and how to exercise them

Depending on where you live, you have the right to request access to the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and — under KVKK Art. 11 — to learn whether your data has been processed and to request notification of any correction or deletion to third parties. Where processing is based on consent, you may withdraw it at any time. These rights apply to the limited purchase data described in section 2; we cannot act on data stored only on your device, because we have no access to it.

Deleting your data

We respond to requests within 30 days. There is no charge. Because the app holds no identifying information about you, we may need you to provide the Google Play order number from your purchase receipt in order to locate the correct record.

If you believe we have handled your data unlawfully, you may lodge a complaint with your local supervisory authority — in the EU, your national data protection authority; in the UK, the Information Commissioner's Office; in Türkiye, the Personal Data Protection Authority (KVKK).

9. Children

DoDoLine is a general-audience productivity app. It is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from them. The app is not enrolled in Google Play's Designed for Families programme. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Third-party policies

These services are controlled by their providers and process data under their own terms. We encourage you to read their policies.

11. Changes to this policy

We may update this policy, for example if the app gains a feature that changes how data is handled. The revised version will be posted on this page with a new "Last updated" date, and the previous version ceases to apply from the effective date shown. If a change materially reduces your privacy, we will seek your consent or give notice in the app where required by law. Continuing to use the app after a change means you accept the updated policy.

12. Governing law

This policy is governed by the laws of the Republic of Türkiye, without prejudice to any mandatory data protection rights you have under the laws of your own country of residence.

13. Contact

Questions, requests or complaints about this policy or your data:
Biologicsoft — Süreya Kılınç
support@biologicware.com