Privacy Policy

This Privacy Policy describes how the Dopacart app for iOS and Android ("Dopacart", "we") handles information. Dopacart is a simulated, for-entertainment shopping experience: you browse a curated catalog and place pretend orders. No real products are sold or shipped, and no real payments are processed.

In short: Dopacart uses no third-party analytics or tracking SDKs and does not track you across other apps or websites. Otherwise we collect only what's needed to run and improve the app — first-party usage and interaction data, and (if you sign in) your account, the pretend orders you place, and your saved checkout details so they sync across your devices. Depending on your platform and app version, Dopacart may show ads through Google AdMob (see "Advertising"); the current Android version shows no ads. If you sign in and chat with our in-app AI assistant, DopaPuff, the messages you type are sent to third-party AI providers (OpenAI and Google) to generate its replies and any pictures (see "DopaPuff assistant").

You can use Dopacart with or without an account

You can browse and place pretend orders as a guest, or sign in to save your activity across devices. The information we handle depends on which you choose, as described below.

What we collect

• Account information (only if you sign in). Dopacart lets you sign in with Sign in with Google (on iOS and Android) or Sign in with Apple (on iOS). When you do, we receive from that provider a stable user identifier, your email address, your name, and — from Google — your profile photo. With Apple you may choose Hide My Email, in which case we receive a private relay address rather than your real one. We use this solely to create and recognize your account.
• Member profile (optional). If you sign in, you can pick a public @username and generate a send code; we store these with your account so other members can send you a (pretend) order. You can change your username at any time in the app.
• Your simulated activity. The pretend orders and items you place are stored on our server so your activity is preserved across sessions and devices (when signed in) or for the app to function (as a guest).
• Usage & interaction data (first-party). To operate, understand, and improve the app, our own server records simple in-app events: app opens and approximate time spent, the screens you view and how long you spend on each, the in-app navigation path you take, buttons and controls you tap, how far you scroll on a screen, products you view, searches you run, items you add to your cart, and the pretend orders you place and what's in them. We use this to run app features — your order history and "money not spent" stats, and merchandising such as "most viewed", "most purchased", and "most added to cart" — and to understand which features are used so we can improve Dopacart. This is first-party analytics recorded by our own server; Dopacart integrates no third-party analytics SDKs. When you're signed in it is associated with your account; otherwise it's associated with a random per-install identifier (see below).
• Per-install identifier. On first launch the app generates a random "client id" that is not derived from your device hardware and is not your name or email. It lets guest activity and pretend orders work without an account. Deleting and reinstalling the app generates a new one.
• Push token (only if notifications are available and you enable them). If your platform supports push notifications and you allow them, we store the push token your operating system issues (Apple's APNs on iOS, Google's FCM on Android) so we can send order updates and occasional announcements. You can turn notifications off at any time in your device settings.
• Requests & feedback. If you submit an "add this item" request or send feedback from the app — including asking the DopaPuff assistant to file an item request for you in chat — we store the text you provide (with your account or client id) so we can read and act on it.

Shipping & payment details at checkout

Because the checkout is meant to feel real, it asks for a recipient name and shipping address, and on some versions also for card details. There are no real charges in Dopacart. Where card fields are shown, the full card number and security code (CVV) you type are never stored and never sent to our server — they exist only in the checkout form on your device. The current Android version's checkout collects only a recipient name and shipping address and does not ask for card details.

To make checkout convenient across your devices, if you save a card (where that option exists) we keep only its brand, last four digits, expiry, and the cardholder name — never the full card number or CVV. When you are signed in, your saved shipping address and any card metadata are stored with your account on our server so a new device restores them on login; as a guest they stay on your device only. You can remove a saved card or address in the app at any time, and deleting your account removes them from our server.

Sending orders to members

Signed-in members can send a (pretend) order to another member at checkout, identified by that member's email address or send code. We use that email or code only to look up the recipient and deliver the order into their Orders, attributed to your name or @username. To protect members' privacy we never disclose whether a given email belongs to a member — if there's no matching member, nothing happens and the sender isn't told either way. We don't use these emails for any other purpose.

What we do not collect

• Your Google or Apple password — sign-in is handled by the provider; we never see it.
• Your location or contacts. The camera and microphone are used only if you choose to record a Community Reels video, and only while recording — never in the background. We never browse your photo library: the video picker runs outside the app and shares only the clip you explicitly choose.
• Any cross-app or cross-site tracking. On iOS, Dopacart does not request App Tracking Transparency permission, so ads (where shown) are non-personalized by default and your advertising identifier (IDFA) is not used to track you across other apps or websites. On Android, the current version contains no advertising SDK and collects no advertising ID.
• No third-party analytics, crash-reporting, or marketing SDKs. The only third-party SDK used for advertising is Google AdMob, and only in versions that show ads (see "Advertising").
• Real payment or financial information — there are no real purchases, and where card fields are shown the full card number and security code you type are never stored or transmitted.

Advertising

Depending on your platform and app version, Dopacart may show ads through Google AdMob (the Google Mobile Ads SDK). The current Android version shows no ads. Where ads are shown, Google may — to deliver ads, prevent fraud, and cap how often an ad is shown — collect device information and in-app activity and may use a device advertising identifier. On iOS, Dopacart does not request App Tracking Transparency permission, so by default ads are non-personalized and your advertising identifier (IDFA) is not used to track you across other apps or websites; you can further limit ad personalization in iOS Settings → Privacy & Security → Apple Advertising. On Android, you can opt out of ad personalization or reset your advertising ID in Settings → Google → Ads. Google's handling of advertising data is governed by How Google uses information from sites or apps that use our services and Google's Privacy Policy.

Where present, ads appear in a few forms: small banners, occasional full-screen interstitials, and ads within the shopping feed. Some optional extras (such as unlocking a Bonus category) can be unlocked by choosing to watch a rewarded ad — watching is always your choice, and you can use the rest of the app without it.

Affiliate links

Some product links in Dopacart are Amazon affiliate links that carry our Amazon Associates tag. When you tap one, it opens Amazon — or, for some items, the brand's own website — in your browser or app. That site then sets its own cookies and may collect information about your visit and any purchase under its own privacy policy (for Amazon, the Amazon Privacy Notice); this is what lets Amazon credit a qualifying purchase to us so we earn a small commission at no extra cost to you. Dopacart does not send Amazon (or any retailer) your name, email, or account details — it simply opens a link. From the Amazon Associates Program we receive only aggregate, anonymized reports (for example, items ordered and commissions earned); we never receive information that identifies you personally. As an Amazon Associate, Dopacart earns from qualifying purchases.

Leaderboard

If you sign in, Dopacart includes a leaderboard that ranks shoppers by the (pretend) money they "didn't spend" and by their daily streak. You are not shown on it by default — you appear only if you turn on "Show me on the leaderboard" in your profile. When you do, your entry shows your first name and last initial (for example, "Alex T.") — never your email — alongside those numbers, and you can turn it off again at any time. The leaderboard is shared across the iOS and Android apps.

Favorites sharing

You can optionally share your favorites/wishlist so other shoppers can see and "gift" them. When you turn it on, your shared favorites and your first name and last initial become visible to other users, and you can turn it off again at any time.

Reviews

If you sign in, you can post product reviews. A review is shown publicly alongside your first name and last initial (for example, "Alex T."), never your email. Reviews are moderated: a review you submit is visible only to you until we approve it. Please don't include personal or sensitive information in a review. We may edit or remove reviews and may suspend an account that abuses the feature; you can also ask us to remove a review you posted by emailing us.

Live Shopping

The Bonus tab offers short shoppable video clips ("Live Shopping"). Clips are downloaded once and kept on your device until you delete the app, so they are not re-downloaded every time you watch; playback happens on your device, and we keep no per-user viewing history beyond the standard usage events described above. You can like a clip — a like is stored under your account (or, as a guest, under the app's random install identifier) and only aggregate counts are shown to others. The app may also download a few short decorative animation clips (for example, a fun "courier picking up your package" animation shown on the order-tracking screen); these are cached on your device the same way and involve no additional data collection. If you sign in, you can post comments on clips; comments work like reviews: they appear alongside your first name and last initial, are moderated (a comment you submit is visible only to you until we approve it), can be reported by other users, and you can block a commenter so their comments no longer appear for you. We may edit or remove comments and may suspend accounts that abuse the feature.

Community Reels (videos you upload)

Signed-in members can upload short videos for possible publication. When you upload, we collect the video file, its optional caption, upload timestamps, and the account it is linked to; approved videos are shown publicly with your member handle. Videos are processed on your device before upload — location and other identifying metadata are stripped there — and are stored on our server (api.taskgizmo.com). Every upload is reviewed before publication and is visible only to you until approved. Published videos rotate out of the feed and by default are removed from our server about 30 days after upload; archived copies may be retained by the app owner under the license in the Terms of Use. Anyone appearing in a video may request its removal via email; deleting your account removes your pending uploads, and you can ask us to take down published ones.

DopaPuff assistant (AI chat)

Once you sign in, you can chat with DopaPuff, our in-app AI shopping mascot. To generate a reply — and, when you ask for one, an image — the messages you type are sent to third-party AI providers: OpenAI produces the text replies and Google (its Gemini image model) produces any pictures. Along with your message we send a short personalization summary so the replies suit you — your first name, your country, and the kinds of products you've recently viewed or saved. We do not send these providers your email, your account identifier, your address, or any card details. Your conversation is stored on our own server (api.taskgizmo.com) so it's there when you return, and any image DopaPuff makes is hosted there too. You can also attach an image or file to the chat: images you send are stored on our server and shown back in the chat, while other file types are stored compressed (as a ZIP archive) and are not publicly served — please don't upload anything sensitive. Separately, from your profile you can ask us to generate an AI profile avatar; when you do, we send your first name, country/region, handle, and shopping interests to Google (Gemini) to create a generic, invented portrait — never a real, identifiable person — which we store on your account. DopaPuff's replies can include tappable links to products in the app and, when you ask about buying an item for real, an affiliate link to the retailer (see "Affiliate links"). If you ask it to, DopaPuff can also file an "add this item" request on your behalf — the request text is stored with your account, like any other item request. Community gallery: pictures the assistant generates for you (drawings, memes) and your AI avatar appear in the community gallery alongside your first name or @username while the clearly-labeled "Share my AI images in the community gallery" toggle in your Profile is on (it is on by default); turning it off removes all of your images from the gallery immediately. Photos and files you upload to the chat always stay private unless you explicitly choose "Share to community" on an image — explicit shares are reviewed before appearing. Gallery images can be reported by others (repeatedly-reported images are hidden pending review), and you can ask us to remove anything at any time. DopaPuff is an automated assistant for entertainment: it is not a real person, and its replies and images can be wrong or deliberately absurd — please don't rely on them as advice. These providers process what we send under their own terms (see OpenAI's Privacy Policy and Google's Privacy Policy); we do not use your conversations to train AI models. Deleting your account removes your chat history.

App integrity

On iOS, Dopacart uses Apple's App Attest to confirm that requests come from a genuine, unmodified copy of the app, which protects the service from abuse. An equivalent device-integrity check may be used on other platforms. Any such check produces a device-level integrity signal only; it does not identify you and is not used for tracking.

Where your data is stored

Account records, pretend orders, reviews, Live Shopping likes and comments, your DopaPuff chat history, your imaginary credit balance, usage events, and — when you are signed in — your saved shipping address and any card metadata (brand, last four, expiry, cardholder name) are stored on our own server at api.taskgizmo.com so they sync across your devices. Your cart and app preferences (and, as a guest, your saved address and any card metadata) are stored locally on your device and are removed when you delete the app.

Third parties

When you choose to sign in, Google or Apple acts as an identity provider; their handling of the sign-in is governed by their own privacy policies. If you enable notifications, delivery is handled by Apple's Push Notification service (iOS) or Google's Firebase Cloud Messaging (Android). In versions that show ads, Dopacart uses Google AdMob (see "Advertising"). When you tap an affiliate link, Amazon (or the linked retailer) acts as a third party under its own privacy policy (see "Affiliate links"). If you chat with the DopaPuff assistant, the messages you send are processed by OpenAI and Google to generate its replies and images (see "DopaPuff assistant"). Dopacart integrates no third-party analytics or tracking SDKs, and we do not sell or rent your personal information.

Children

Dopacart is a general-audience app. It is not directed at children, and we do not knowingly collect data from children.

Your choices & account deletion

You can use the app as a guest, sign out at any time, and turn notifications, leaderboard visibility, and favorites sharing on or off. If you have an account, you can delete it and all associated data from within the app (Profile → Delete account), or by emailing us at the address below and we will delete your account and its data. Deleting the app removes the data stored locally on your device. See our account & data deletion page for full details.

Changes to this policy

We may update this policy. The "Last updated" date above reflects the most recent change.

Contact

For privacy questions or deletion requests, write to leetsyplakov@gmail.com.