Doli — Privacy Policy

Effective date: July 6, 2026 · Last updated: July 2026 (effective with the sync update)

Doli (“the App”) respects your personal and health information and complies with applicable data-protection laws. This policy explains, transparently, what information the App handles and how.

1. Core principle — on-device by default, sync only if you choose it

Unless you sign in, the App does not transmit or collect any of your personal health information to any external server. Everything you enter (fasting records, weight, diet-injection logs, and so on) is, by default, stored only on your own device.

• The App’s core features work without any sign-up or sign-in.
• If you do not sign in, your health, fasting, and weight data live only on your device with no cloud backup, and no one — including the developer — can access them.
• Cloud sync is 100% optional. Your data is stored in the cloud only if you explicitly sign in with your Google account (see Section 3).

If you are not signed in, uninstalling the App permanently deletes all data stored on your device; it cannot be recovered.

2. Information the App handles

The following is entered by you or stored to make features work. If you are not signed in, all of the items below are stored only locally, on your device; they are also stored in the cloud only when you are signed in.

Weight, diet-injection logs, and fasting records may constitute sensitive (health) information under data-protection law. For signed-out users, the App protects them by keeping them only on your device and never collecting them on a server. For signed-in users, they are processed as described in Section 3, on the legal basis of your consent, given through your explicit act of signing in. Entering this information is entirely optional; you can use the App’s core features without it.

3. Cloud sync (optional — only with Google Sign-In)

When you sign in with your Google account, the following data is stored in the developer’s Firebase (Google Cloud) Cloud Firestore database, tied to your account (uid):

• Fasting records (start/end times)
• Weight entries
• Diet-injection (GLP-1) logs
• Profile (sex, age, height, weight, activity level)
• Game progress (gear, gold, level)
• App settings (language, units, character name, dark mode)

a. Purpose

Cross-device sync and restoring your data after reinstalling the App — this is the only use. Your data is never sold and never used for advertising. The ad SDK (AdMob) never receives any of your health data.

b. Legal basis for sensitive data

Weight, injection logs, and fasting records are sensitive (health) information. They are stored in the cloud only on the basis of your explicit act of choosing to sign in with Google (consent). If you do not sign in, no health data ever leaves your device.

c. Security

• Data is encrypted in transit (HTTPS/TLS) and encrypted at rest (Google Cloud default encryption).
• Firestore Security Rules restrict access so that only the account owner can access their own data.

d. Third-party processor

Cloud storage and authentication are handled by Google LLC (Firebase Authentication, Cloud Firestore), acting solely as a data processor on the developer’s behalf. Firebase privacy: https://firebase.google.com/support/privacy

e. Retention

Cloud data is kept while your account is linked. See Section 6 (Account & Data Deletion) for how to delete it. Signing out stops syncing, but the copy already in the cloud is kept until you delete it (so it can restore your data if you sign in again).

4. Third-party services and automatically processed information

The App uses the third-party services below. In the course of using them, some information may be processed by each provider.

a. Advertising (Google AdMob)

The App uses Google AdMob to show ads on the free version. To serve and measure ads, AdMob may collect device information such as an advertising identifier (Advertising ID).

• Google’s data practices: https://policies.google.com/privacy
• You can reset your advertising ID or limit personalized ads in your device settings.
• Purchasing Premium (ad removal) stops ads and the related data collection.
• AdMob never receives any of your health data (fasting, weight, or injection records).

b. Google Sign-In (optional)

Only if you choose to sign in, the App uses Google Sign-In and Firebase Authentication and receives your email address and user ID (uid). This information is used to authenticate you and to key your cloud data to your account. Sign-in is optional; signing out stops syncing (see Sections 3 and 6 for what happens to the cloud copy). The Google Sign-In process itself is governed by Google’s Privacy Policy (https://policies.google.com/privacy).

c. In-app purchases (Google Play Billing)

Premium purchases are processed through Google Play Billing. Payment details (such as card numbers) are never collected or stored by the App; they are handled entirely by Google.

d. Health Connect (optional)

Only if you choose to, the App may request permission to read weight data from Health Connect on your device. Weight imported this way is saved as a weight entry in the App and, if you are signed in, may sync like any other weight entry. You can revoke the permission at any time in your device settings.

5. Permissions the App requests

You can use the App’s core features without granting the optional permissions.

6. Account & Data Deletion (retention and deletion)

a. Signed-out users

No information is collected on any server, so there is no separate retention or deletion process. You can delete data stored on your device instantly by using the reset feature in the App or uninstalling the App.

b. Signed-in users — how to delete your account and cloud data

1. In the App (recommended): Go to Settings → “Delete account & data”. This immediately deletes your cloud data stored in Firestore and your Firebase account.
2. By email: If you have already uninstalled the App or cannot use the in-app option, email taeminkim93@gmail.com with the Google account email you used to sign in, and we will delete your account and cloud data.
3. Signing out is different: signing out only stops syncing; the cloud copy is kept until you delete it using method 1 or 2 above.

Deleted cloud data cannot be recovered. Local data on your device can be deleted separately via the in-app reset or by uninstalling the App.

7. Children’s privacy

The App is not directed to children under 14 and does not knowingly collect children’s personal information. Fasting is not recommended for growing children or adolescents.

8. Your rights

You have full control over your information. You can view, edit, and delete your data within the App at any time, and if you are signed in you can delete your cloud data and account at any time using the methods in Section 6. You can also change whether you use sync (whether you are signed in) at any time.

9. Changes to this policy

This policy may be revised in response to changes in law or App features. We will announce any changes through the App or the store listing.

10. Contact

• Developer: TaeminKim (Taenervini studio)
• Email: taeminkim93@gmail.com

Appendix — Health disclaimer

Doli is an informational app that supports healthy lifestyle habits. It is not a medical device and does not provide medical diagnosis, treatment, or prescription. The diet-injection (e.g. GLP-1) logging feature only helps you keep your own records; it provides no medical advice on dosage, timing, or anything else. Always consult your doctor or a qualified professional for any medical decision.