Confidentialité

Responsible provider and contact

Dotch · DotGrid · orh4nyz@gmail.com

Notifications et appels

Notification text, sender images and call information are processed on your phone to display the island and never leave it.

Agenda

Calendar access is optional. The next event's name, time and place are read on the phone only to show them on the island; they are not stored or sent anywhere.

Today's events are read the same way for the StandBy Calendar face.

Météo

The StandBy Weather face is optional. With approximate location access, the phone's last known approximate position, rounded to about 1 km, is sent over HTTPS to Open-Meteo for the forecast; a city you choose instead is looked up there by name. Android may provide the town name. Coordinates are not stored; only the last forecast stays on the phone. Open-Meteo may see connection information such as your IP address.

Panneau latéral

Le presse-papiers et les personnes restent sur ce téléphone uniquement. L'autorisation Contacts est facultative et sert seulement à afficher les photos des personnes que tu ajoutes ; rien n'est envoyé.

Tu choisis une personne dans le sélecteur du téléphone et Dotch ne voit que celle-là. Un appui ouvre son numéro dans le clavier d'appel. L'autorisation Contacts est facultative : Dotch la demande seulement pour afficher les photos des personnes que tu ajoutes ; elles sont lues sur ce téléphone et envoyées nulle part.

Android ne montre pas le presse-papiers à une app en arrière-plan. La section Presse-papiers ne prend le dernier texte copié qu'au moment où le panneau s'ouvre ; 5 textes au plus restent sur ce téléphone et ne sont envoyés nulle part.

Caméra, micro et réseau

Dotch only asks Android whether the camera or microphone is in use and whether the internet and hotspot are on. It records nothing, sees nothing they capture and reads no network names. This stays on the phone.

La reconnaissance musicale est la seule fonction où Dotch écoute lui-même le micro.

Reconnaissance musicale

Dotch écoute par le micro uniquement quand tu le demandes, 12 secondes au plus, pour trouver le morceau qui passe autour de toi. Rien n'est enregistré ; seule une empreinte du son est envoyée à Apple pour l'identifier.

Pour utiliser le service d'Apple, Dotch obtient d'abord une clé de courte durée auprès de notre serveur, en n'envoyant que le hachage de l'identifiant de l'appareil et ton reçu d'accès ou ton achat Google Play, que le serveur vérifie sans les conserver. Aucun son n'atteint notre serveur. Apple voit l'adresse IP de la connexion. Tu peux désactiver la reconnaissance musicale dans les réglages de l'île.

Headphones and Bluetooth

Nearby devices access is optional. Dotch reads the name and battery level of connected headphones to show them on the island. For AirPods it listens only for the short Bluetooth signal their case sends, reads the battery from it and can connect them again; the address of the last AirPods is kept on the phone for that. Bluetooth is not used to find your location, and none of this is sent anywhere.

Visualisation audio

Audio permission is used to visualize playback; the wave reads only what the phone plays, not the microphone. Dotch does not save or upload audio. Capture stops while hidden or when the screen is fully off; if the player shows on the Always-On Display, the wave keeps moving there.

La reconnaissance musicale est la seule fonction où Dotch écoute lui-même le micro.

Essai et achat

To preserve your 14-day trial, a hash of an app-scoped device ID is sent to the server. The server additionally protects that identifier and stores the original trial dates. The hosting provider may process normal connection information such as IP addresses. Google Play handles payments; Dotch does not receive card details.

Purchase check

A purchase is checked by sending the server the Play purchase token, the product and a hash of the device ID, so it can ask Google Play. The server keeps only a hash of the token, the product and, if you bought on this phone, the price paid and its currency. A purchase is active on one device at a time.

With a sale the server also keeps the Google Play order number and the buyer's country, and sends the developer a private Telegram message (app, product, amount and country; no name, e-mail, purchase token or device identifier).

App integrity

When a new trial starts, Dotch gets a short-lived token from Google Play Integrity and sends it to the server. The server asks Google whether this is an unmodified Play copy; it does not store the token.

Daily check-in and counts

At most twice a day (when you unlock the phone or open the app) Dotch sends the server: a hash of the device ID, your access type (free, lifetime or supporter), the app version and whether Dotch's two essential permissions are on. This lets the developer see active-user and sales counts. No name, account, notification, call or music content is sent.

Supporter name and e-mail

If you bought the supporter package you may give a name and an e-mail, both optional. Once the developer approves it, the name shows to everyone in the in-app supporters list. Only the developer sees your e-mail; it is used only to invite you early to DotGrid's new apps and is not shared. You can change or remove both at any time.

Supporters list: if you give a supporter name, it shows to everyone in all four Dot apps (Dotch, DotWatt, DotSetup and Dotype), with the Dot apps you support; your e-mail never shows.

Deleting your data

The "Delete my data on the server" button on the trial and purchase screen removes your supporter name and e-mail and this device's last-seen record at once; the device then stops sending its daily check-in. The trial start date (one trial per device) and the purchase check stay on the server.

Authorized access code

An optional access code and a hash of the app-scoped device ID are verified over HTTPS. The server stores the code hash, protected device identifier and authorization dates. A signed access receipt lasts at most 24 hours and access can be revoked. This does not change trial dates or purchase status.

Gift code

When a gift code is entered, the code and a hash of the app-scoped device ID are verified once over HTTPS. The server stores the code hash, the protected identifier of the device that used it and the date it was used; the code cannot be used on another device. Only a server-signed receipt is kept on the device, and it works offline. Now and then, at most once a day, Dotch asks whether the code has been revoked. This is not a Google Play purchase.

Screen snapshots

While the glass background is on, and to tell whether the PIN screen is open on the lock screen, Dotch takes a momentary screen snapshot through Android's accessibility permission. The image is processed in memory on your phone and scaled down; only the blurred background or a yes/no result is used. It is never saved or sent to a server.

Pochettes d'album

Remote artwork provided by the music app may be fetched over HTTPS. The image provider may see connection information.

Retention and deletion

The protected trial identifier and original dates stay on the server while needed to enforce one trial per device; they are not deleted when the trial ends. Request access, correction or deletion at orh4nyz@gmail.com. A necessary and permitted minimal anti-abuse record may be retained; the reason is explained in response. Support emails are kept only while needed for the request, related issues or applicable obligations.

Some features change the phone's own settings: they can hide pop-up notifications, the lock-screen media player and status bar icons. Dotch gives them back when you switch it off or use Uninstall in its settings. If you remove Dotch from Google Play or the home screen instead, Android does not tell the app, so these stay changed; you can turn them back on in the phone's settings.

Notifications de mise à jour

To tell you when a new version is on Play, Dotch uses Google's Firebase Cloud Messaging. Once Dotch's service starts running, the phone registers with Google: Google creates a random installation ID and a messaging token for this copy of the app and adds it to the shared "updates" topic. The token is not sent to Dotch's server, and Dotch does not link it to your name, your account or anything shown on the island. The message itself carries only the new version's number. Google may process connection information such as your IP address. Firebase Analytics is switched off. You can switch the "Updates" notification off in Android's settings; the registration with Google stays, but nothing is shown.

Notifications de Dotch

Android's notification permission is optional and covers only Dotch's own notices: a new version, a reminder before the trial ends and the one-time setup notification where you type the Wireless debugging pairing code. That code is used only on the phone, to pair Dotch with the phone itself; it is not stored or sent anywhere.

Service providers

Supabase hosts the trial service in Frankfurt. Google Play handles purchases. Providers may process normal connection and security information. Feedback email reaches us only when you send it.

Google's Firebase Cloud Messaging delivers the update notifications.

Telegram delivers the developer's private sale notifications.

ShazamKit d'Apple trouve le morceau pour la reconnaissance musicale.

Settings file and bug report

Exporting your settings writes one file to the place you choose. It holds only your Dotch settings, including the apps you picked; trial and purchase records, the edge panel's people and copied texts and the weather city are left out. The bug report is a text you can read before you send it: the Dotch version, the phone model and Android version, which permissions and switches are on, your access type, the island's recent state changes and Dotch's own crash and memory notes. It carries no notification, message, media or contact content and goes only into the e-mail you choose to send.

You control permissions

You can revoke permissions in Android settings and switch Dotch off in its main menu. Resetting appearance preferences does not reset trial or purchase records.