Privacy Policy

Dovae (“Dovae,” “we,” “us”) makes creative emotional-wellness tools. This policy explains what information we collect, how we use it, and the choices you have. It covers the dovae.co website, the Dovae Journal web app, our online shop, and our email list.

1. What we collect

Information you give us

• Account information: when you create a Dovae Journal account, your email address and password (stored in hashed form; we never see your password).
• Journal content: your check-ins, entries, mood labels, and, if you choose to log it, menstrual-cycle information. Cycle logging is optional and off by default; you can use everything without it.
• Purchases: when you buy from our shop, our commerce providers process your name, email, and payment details. We never see or store your full card number.
• Email subscription: your email address, if you join our list. You can unsubscribe with one click, any time.
• Messages: anything you send to hello@dovae.co.

Information collected automatically

• Analytics: we use privacy-focused analytics to understand page visits and feature usage in aggregate (pages viewed, approximate region, device type). We do not use this data to identify you, and we do not use third-party advertising trackers.
• Technical basics: standard log data (browser type, operating system) needed to keep the service running and secure.

2. A note on sensitive information

Journal entries, mood data, and cycle data are intimate. We treat them with a higher standard of care:

• They are used only to provide the journal’s features to you (for example, showing your own trends).
• They are never sold, rented, shared with advertisers, or used to train AI or machine-learning models.
• They are never read by a human except if you explicitly ask us to look at your account to fix a problem.
• Dovae is a self-reflection tool, not a medical service, and we do not use your data to make health decisions about you.

3. How we use information

We use your information to: provide and improve the services (sync your entries, show your trends); process orders and deliver digital products; send emails you signed up for (new tools, free downloads, never spam, and you can leave whenever you like); respond when you contact us; keep the services secure and prevent abuse; and comply with legal obligations.

We do not: sell or rent your personal information; share it for cross-context behavioral advertising; or use your journal content for marketing, profiling, or AI training.

4. Who we share information with

Only the service providers that make Dovae run, and only what each one needs:

• Hosting & infrastructure: our website and app are hosted by cloud providers (e.g., Vercel) and your journal data is stored in a secure cloud database.
• Commerce: shop purchases are processed by Shopify and its payment processors under their own privacy policies.
• Email: our email list is managed by our email service provider, used only to send you what you signed up for.
• Legal: we may disclose information if required by law, or to protect the rights, safety, and security of Dovae and its users.

If Dovae is ever acquired or merged, your information may transfer to the new entity under this same policy, and we will notify you before any material change applies to you.

5. Data retention and deletion

• Journal data: kept until you delete it. You can delete individual entries or your entire account in the app, at any time, in one tap. Account deletion permanently removes your journal content from our production systems; residual copies in encrypted backups are purged on a rolling basis (within 30 days).
• Purchase records: kept as required for tax and accounting law.
• Email list: kept until you unsubscribe; unsubscribing removes you from future sends.

6. Your rights

Depending on where you live (including the EU/UK under GDPR and California under CCPA/CPRA), you have the right to: access the personal information we hold about you; export your journal content (available in-app); correct inaccurate information; delete your information; object to or restrict certain processing; and not be discriminated against for exercising these rights.

To exercise any of these, use the in-app tools or email hello@dovae.co: we respond within 30 days. California residents: we do not “sell” or “share” personal information as defined by the CCPA/CPRA, so there is nothing to opt out of.

7. Security

We use encryption in transit (HTTPS everywhere), encryption at rest for stored data, hashed passwords, and strict access controls. No internet service can promise perfect security, but we build with the assumption that your journal deserves bank-grade care, and we will notify you promptly if a breach ever affects your data.

8. Children

Dovae is not directed to children and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact hello@dovae.co and we will delete it.

9. International users

Dovae operates from the United States, and your information is processed on servers in the U.S. If you use Dovae from elsewhere, you consent to this transfer. For EU/UK users, we rely on your consent and our contract with you as the legal bases for processing, and on standard contractual protections with our providers.

10. Not medical advice

Dovae’s products and app are for education and self-care. They are not medical or mental-health care, and nothing in them is a diagnosis or treatment. If you are in crisis, please contact a licensed professional or your local emergency services.

11. Changes to this policy

If we make material changes, we’ll update the date above and notify you by email or in-app notice before the changes take effect. Minor clarifications may be posted without notice.

12. Contact

Dovae · dovae.co · hello@dovae.co