← DomeOne home

Privacy policy

Effective date: November 7, 2026

1. About this policy

This Privacy Policy describes how DomeOne (the "Company", "we", "us", "our") collects, uses, shares, and protects information in connection with the DomeOne mobile application and related services (the "Service"). By using the Service you consent to the practices described here. If you do not agree, do not use the Service.

This policy is written for informational purposes. Where legally required, additional jurisdiction-specific disclosures apply and are incorporated by reference.

2. Information we collect

Account information. Name, email address, profile photo (optional), password hash, and authentication tokens.

Location data. When location sharing is enabled on a device connected to a Dome, we collect real-time and historical latitude, longitude, altitude, speed, heading, accuracy, and timestamps. Collection continues while the app is installed and location sharing is enabled, including while the app is running in the background.

Device and network data. Device identifiers, operating system, app version, battery level and charging state, network state, push-notification tokens, and diagnostic data such as crash logs and performance metrics.

Content you provide. Names, labels, notes, and photos you add for places, events, or family members. Messages sent through in-app features.

Purchase information. Subscription status and transaction identifiers from Apple App Store or Google Play. We do not receive or store payment card details.

Voice clips. We only record audio when you press record (a voice note or a voice check-in reply) or during an SOS you start. Clips are deleted after 72 hours. We never listen in the background.

We do NOT collect: your contacts, camera roll, browsing history, background microphone audio, biometric data, advertising identifiers, or data from other apps.

3. How we use information

We use collected information to: (a) operate and deliver the Service, including displaying locations to Dome members, delivering alerts and check-ins, and processing SOS events; (b) authenticate users and secure accounts; (c) provide customer support; (d) improve, test, and develop features; (e) monitor for fraud, abuse, and violations of our Terms; (f) comply with legal obligations; (g) send transactional communications; and (h) enforce our rights.

We do not sell your personal information. We do not use your data for cross-context behavioral advertising. We do not deliver targeted ads to you.

4. Who can see your information

Dome members. Each member's location, battery state, and connection status are visible to other members of the same Dome. If you enroll a child, the child's location is visible to every member of that Dome.

Service providers. We share data with vendors who help us operate the Service, including cloud hosting, database, push-notification delivery, analytics, crash reporting, and email delivery providers. These providers process data on our behalf under written agreements limiting their use to the purposes we specify.

Legal and safety. We may disclose information to comply with law, respond to lawful requests from public authorities, enforce our Terms, protect the rights, property, or safety of the Company, our users, or the public, or investigate suspected fraud or abuse. We may cooperate with law enforcement without notice to you where permitted by law.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

Aggregated data. We may share aggregated or de-identified data that cannot reasonably be used to identify you.

5. Retention

We retain account information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements.

Old data is deleted automatically every day, on this schedule:
• Location history: 30 days (7 days on the Free plan).
• Journeys and alerts: your plan's history window, and never less than 30 days (Free 30 days, Family 90 days, Pro 365 days). Low-value events such as journey start/end, reactions and on-time confirmations: 30 days.
• Voice clips: the audio is deleted after 72 hours; the remaining metadata (time, length, no audio) after 30 more days.
• A child removed from a Dome: all of that child's data 30 days after removal.
• Expired, revoked or used invitations: 30 days. Inactive push tokens: 30 days. Expired or revoked sign-in sessions: 7 days.
• Deleting your account or your whole Dome: carried out after a 7-day grace period during which you can cancel.

Diagnostic logs and audit records may be retained for up to 12 months for security and reliability purposes.

You may request deletion at any time as described below.

6. Your choices

Location sharing. You can turn off location sharing on each device through the device's system settings or the app's settings. If location sharing is off, Dome features that depend on location will not function.

Notifications. You can disable push notifications through your device settings.

Account deletion. You can delete your account in the app (Settings → Account → Delete my account) or on the web at https://domeone-api.fly.dev/account/delete, or by contacting privacy@domeone.app. Deletion is carried out after 7 days and can be cancelled until then. If other guardians remain in your Dome you leave it (ownership passes to the longest-standing guardian); if you are its only guardian, that Dome and its data are deleted too. Your personal details are erased. The Dome owner can also delete all of the Dome's data from Settings → Your data. Store subscriptions are not cancelled automatically — cancel them in the App Store or Google Play. Some information may be retained in backups, logs, or as required by law.

Download your data. You can download a copy of the data we keep about you, as a file, from Settings → Account → Download my data (once per hour).

Access and correction. Where required by law, you may request access to or correction of the personal information we hold about you.

7. Children under 13

The Service is intended for use by adults 18 and over. Children may appear in a Dome only when added by a parent or legal guardian who has the legal right to monitor them.

We collect location and device data from a child's device only after a parent or guardian has enrolled that device. Enrollment requires the parent or guardian to consent to this policy on the child's behalf.

If you believe we have collected information from a child without proper consent, contact privacy@domeone.app and we will investigate and delete the information as required.

Parents and guardians are solely responsible for ensuring that their use of the Service to monitor a child complies with all applicable laws in their jurisdiction.

8. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit (HTTPS/TLS), encryption at rest for our database and file storage, hashed passwords, sign-in tokens stored in your phone's secure keystore, access controls, and monitoring. No system is completely secure, and we cannot guarantee the security of any information. You are responsible for keeping your credentials confidential and for the security of the devices you use to access the Service.

9. International transfers

We operate and process data in the United States and other jurisdictions. If you access the Service from outside the United States, you consent to the transfer, processing, and storage of your information in the United States and other countries, which may have data-protection laws different from those in your country.

10. Third-party services

The Service uses third-party platforms including Apple, Google, mapping providers, and cellular carriers. Specifically:
• Open-Meteo (weather) and OpenStreetMap Nominatim (address lookup) receive map coordinates only — never your name, email or account.
• Google Firebase delivers push notifications and stores voice clips.
• Map tiles are loaded from OpenFreeMap and, for the satellite view, Esri.
• Anthropic or OpenAI receive alert details only if AI-written alert wording is enabled, to phrase the alert text.
Their terms and privacy practices apply to your use of them and are outside our control. We are not responsible for the privacy practices of any third party.

11. Changes to this policy

We may update this Privacy Policy at any time. Material changes will be indicated by updating the "Effective date" at the top of this policy. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

12. Contact

Questions or requests about this Privacy Policy may be sent to: privacy@domeone.app