Do+chat — Privacy Policy
Last updated: 2026-11-11

DO PLUS Inc. ("we") publishes the Do+chat app for iOS and Android. This policy explains what
data the app handles and where it goes.


1. Data stays on your device

Your prompts, prompt versions, chats and settings are stored only on your device. We do not run a
server for the app and we do not receive your chats, except a reply you choose to report
(section 2).

The data is included in your device's own backup (iCloud Backup on iOS, Android Auto Backup on
Android), under your account with Apple or Google. Downloaded model files are not backed up.

Deleting a message or a chat in the app hides it. The hidden content stays in the app's storage
on your device, in the device backup, and in any export file you create, until you erase it in
Settings → Erase all data, uninstall the app or delete its data.

API keys you enter (for a server or a search provider) are kept in the device's secure storage
(Keychain on iOS, Android Keystore on Android), are never exported and are not backed up.

Export and import: an export file is made only when you tap Export, and goes only where you
send or save it. Its content is encrypted (AES-256) with a key made for that export; the key is
shown to you once and is never stored by the app or sent to us, and without it the file cannot
be read. The key can be shown as a QR code holding a link to doplus-chat.pages.dev/import; the
key is in the part of the link after "#", which is never sent to a server. Opening that link on
a device without the app shows a page from doplus-chat.pages.dev (section 3). Import reads only
the file you pick.


2. Where your text is sent

- On-device models and the model built into your phone (Apple Intelligence, Gemini Nano): your
  text is processed on the device and is not sent anywhere.
- A server you configure (an "OpenAI-compatible endpoint"): while a chat or an image analysis
  uses that server, the chat's messages and prompt, and the photos you ask about, are sent to it. That server is chosen and operated by you or a
  provider you choose; its own privacy policy applies. Nothing is sent to us.
- Web search, if you turn it on: the search query, which the model writes and which can contain
  words from your chat, is sent to the search provider you set up (Brave Search, Tavily, or your
  own SearXNG server). Their privacy policies apply.
- Location stamp, if you turn it on for a prompt: the app uses your approximate location and the
  operating system turns it into a place name (city, region, country). The coordinates are sent
  to Apple or Google for that lookup by the operating system. Only the place name is stored and
  given to the model; when the chat uses a server you configured, the place name is sent there
  as part of the message.
- Reporting a reply: when you report a reply from the app, your email app sends us your report
  text together with an attached file holding the system prompt and the messages that were given
  to the model for that reply (with any time / location stamp), the reply itself (and its error
  message if the reply failed part-way), the engine and model name (not a server's address or
  key) and its settings (temperature, reply length, thinking), the app version, the platform and
  its version (iOS / Android) and the date. Like any email, it also gives us your email address
  and the name set in your email app. It is sent only when you send that email, and we use it
  only to look into the report and to reply to you.


3. Downloads

- The list of available models and ready-made prompts is downloaded from our website
  (doplus-chat.pages.dev, hosted by Cloudflare). Like any web server, it receives your IP address
  and basic request information.
- Models are downloaded directly from Hugging Face (huggingface.co), which receives your IP
  address and the files requested.
- If you add your own model list or prompt list by URL, the app downloads it from that address.


4. Advertising

The free version shows a banner ad served by Google AdMob. The app requests non-personalised ads
only and does not ask for permission to track you across apps (no App Tracking Transparency
prompt on iOS). AdMob still receives information it needs to deliver and measure ads, such as
your IP address, device and app information, and ad interactions; see Google's policy at
https://policies.google.com/technologies/partner-sites.

Users in the European Economic Area, the United Kingdom, Switzerland and US states with privacy
laws are shown Google's consent message, where they can make and change their choices.


5. Purchases

Do+chat Plus is an auto-renewing subscription that removes the ads and lets you add your own
Hugging Face models and model / prompt sources. Models and sources you added keep working if the
subscription ends. Payment is handled by the App Store or Google Play; we do not receive your
payment details.


6. Children

Do+chat is not directed to children under 13 and we do not knowingly collect data from them.


7. Your choices

You can delete the app's data at any time in Settings → Erase all data, or by uninstalling the
app. You can turn off web search
and location stamps, use only on-device models, and change your ad consent choices where the
consent message applies.


8. Changes

We may update this policy. The date at the top shows the latest version.


9. Contact

DO PLUS Inc.
Email: contact@doplus.jp