Privacy Policy

This Privacy Policy explains how Dope Capybara (“we”, “us”, “our”) handles information when you visit our website at dopecapybara.com and when you use our mobile applications (“Apps”).

We respect your privacy. We try to collect as little data as practical and do not sell personal data for money. Advertising providers may process or share limited data as described below.

1. Who we are

Dope Capybara is an indie mobile studio. For any privacy-related question, write to playdopecapybara@gmail.com. We act as the data controller for the limited data described below.

2. Website (dopecapybara.com)

Website analytics choices

We use Google Analytics 4 with analytics cookies disabled by default. You can allow or decline these cookies in the website notice and change your choice through Analytics choices in the footer. Declining does not limit access to the website or its tools.

If you allow analytics cookies, Google can use them to distinguish visits and measure how people use the website. If you decline, the Google tag sends measurement requests without reading or writing analytics cookies. Such requests may support Google’s statistical modeling; they do not necessarily appear in our reports. Measurement requests can include:

• Page URL visited
• Approximate country / region
• Approximate device type (mobile / desktop)
• HTTP referrer (where you arrived from)
• Tool starts, completions and calculator use, plus clicks to app pages and stores

These interaction events identify the tool or app and the page where the action happened. They do not include your quiz answers, scores, selected dates, photo contents or video dimensions.

Advertising storage, advertising user data and ad personalization remain disabled regardless of your analytics choice. We do not enable Google Signals. We remember your allow or decline choice in local storage for 90 days, then ask again. Withdrawing permission disables analytics cookie use and removes the website’s accessible _ga cookies; it does not delete data already collected by Google. Your light or dark theme preference is also saved locally. See Google’s explanation of measurements without cookies for details of this analytics mode.

If you submit our contact form, we receive the information you choose to send us (name, email, topic, message, optional rating). This data is delivered to our inbox via Resend for the sole purpose of replying to you. We do not add you to any mailing list or use this information for advertising.

3. Mobile apps

Our Apps are built around the principle of “data minimization”:

• No account or sign-up required. Our Apps do not ask you to create an account.
• Offline-first. Most features work fully offline. The Apps do not transmit personal data to our servers in the normal course of use. The exceptions are features you start yourself that need a server, such as the AI document features described in sections 3.8 and 3.9.
• Data stored locally. Things like your goals, progress, test results, settings and preferences are stored locally on your device. If Android Backup is enabled, eligible data may also be included in your Google-managed, encrypted device backup and restored after reinstalling the App or moving to a new device. We cannot access that backup.
• No profile details requested. We do not ask for your name, email, contacts, photos, or precise location in our Apps. Some Apps ask for the camera, the microphone or approximate location, only for the features described in the app-specific sections below. Third-party SDKs may automatically process technical identifiers and other signals described below.

Some Apps may include the following limited integrations. Each App’s Google Play listing details exactly which apply.

3.1 Crash reporting

Some Apps include a crash reporting SDK (e.g. Firebase Crashlytics or Google Play’s built-in crash reports). When the App crashes, a technical report may be sent containing the device model, OS version, app-instance identifier, and stack trace. This data is used to diagnose and fix bugs.

3.2 Usage analytics and app event measurement

Some Apps use Firebase Analytics. Year Progress 2026: Life, Habits & Goals also sends app events to Meta App Events through the Facebook SDK and to TikTok for Business through the TikTok Business SDK.

These events may cover app installation and launch, screen views, onboarding or tutorial progress, feature milestones, paywall views, checkout, trials, purchases or restores, and ad impressions. Event details may include a product or order identifier, purchase value and currency, subscription type, ad format and source, feature category, locale, premium status, and app or device information. Google, Meta, and TikTok may also process an app-instance identifier, the Android Advertising ID where permitted, an IP address and approximate location inferred from it, device model, operating system, app version, and SDK diagnostics.

We share this data with those providers for product analytics, install and purchase attribution, campaign measurement, fraud prevention, and ad delivery and optimization. We do not send the text of your goals, habits, countdowns or notes, your exact birth date, contacts, photos, or payment-card details through these event integrations.

Where required, the Apps request consent through Google’s User Messaging Platform. Your choice affects advertising identifiers, personalization, and event delivery. You can revisit it through Privacy choices in the App where available or reset or delete the Android Advertising ID in your device settings.

3.3 Advertising and mediation

Apps marked “Contains ads” use Google AdMob to serve and measure ads. AdMob may use mediation partners. Depending on the App and current mediation setup, these may include Meta Audience Network, Unity Ads, Liftoff Monetize (Vungle), and Pangle. Depending on your region, consent choice, and the ad shown, these SDKs may collect and share advertising or device identifiers, IP-derived approximate location, device and app information, ad impressions and clicks, diagnostics, and, where applicable, purchase or ad-performance signals. They use this data to deliver and measure ads, prevent fraud, comply with law, and, where you consent, personalize advertising.

In the EEA, UK, and Switzerland, Apps request consent through Google’s User Messaging Platform. Choosing non-personalized ads limits personalization but does not stop processing needed for contextual ads, measurement, security, and fraud prevention. Where available, you can revisit your choice through Privacy choices in the App’s settings. You can also reset or limit the Android Advertising ID in your device settings. Purchasing Pro removes ads.

Provider policies: Google/AdMob, Meta, TikTok, Unity, Liftoff Monetize, and Pangle.

3.4 In-app purchases

In-app purchases are processed by Google Play Billing. We never receive or store your payment details; Google handles billing entirely. We receive only a purchase token and status used to grant the entitlement.

3.5 Link safety checks (QR Code Scanner: Link Preview)

Our QR scanner can check a scanned link before you open it. When automatic link protection is enabled, the address contained in a scanned or shared code is sent to the Google Web Risk API and checked against Google’s lists of phishing, malware and unwanted-software sites. Only the address is sent — never the scanned image, your scan history, or any identifier of you or your device. Google processes the request to return a safety verdict, and the verdict is cached on your device for up to 24 hours.

Automatic checking is off until you turn it on: the app asks once, and you can turn it off at any time in Settings. With it off, links are graded entirely on your device. Everything else in that app — scan history, generated codes and favourites — stays on your device and is not sent to us or to anyone else.

3.6 PocketRates

PocketRates (dope.capybara.pocketrates) converts currencies and keeps a trip expense ledger.

• Exchange rates. The App downloads reference rates from public rate services: Frankfurter for currency rates, the Bank of Russia (cbr.ru) for Russian ruble history, and CoinGecko for cryptocurrency prices. Requests contain only currency codes and dates. Like any internet request, they reveal your IP address and basic technical request details to that service. Rates are refreshed periodically in the background so conversions, the home-screen widget and rate alerts work offline; rate alerts are checked on your device.
• Camera (Lens). Lens uses the camera only while it is on screen. Camera frames are analyzed on your device by Google’s ML Kit text recognition to find prices. They are not saved and are not sent to us. ML Kit may send Google limited diagnostic and usage information, such as device model, operating system and app version, performance metrics and a per-installation identifier, but not the camera image or the recognized text.
• Approximate location (Travel Mode). Travel Mode auto-detect is off by default. When you turn it on in Settings, the App uses the country of your mobile network or SIM card, which needs no permission, and asks for approximate location, which you can decline. If the network or SIM country is not available and you allowed approximate location, the App reads the device’s last known approximate location when you open it and uses Android’s Geocoder to turn it into a country. On most devices the Geocoder is provided by Google or the device maker and may send the coordinates to that provider to answer the request. The App does not use precise or background location, and it does not store the coordinates or send them to us. The detected country code (for example, “PL”) is included in analytics events when the App suggests or starts a trip.
• Trips and expenses. Trips, expenses, favourites, custom rates and rate alerts are stored only on your device. They are excluded from Android cloud backup and from device-to-device transfer, so they do not move to a new device, and uninstalling the App deletes them.
• Sharing. Rate cards, conversions and trip summaries leave your device only when you share them through Android’s share sheet. Shared cards and captions include a link to dopecapybara.com/pocketrates.
• Analytics. Events can include the currency codes you convert between, trip length, expense categories and counts, the number of prices Lens recognized, and the detected country code. They do not include amounts, notes, camera images or location coordinates.

3.7 Voice Recorder

Voice Recorder (dope.capybara.whisper) uses microphone access only when you start audio capture. While a recording is running, the App shows an ongoing notification. Recordings, filenames, notes, bookmarks, and waveforms are stored locally and are not automatically uploaded to us, our servers, Firebase, advertising providers, or other SDKs. A recording leaves the device only when you deliberately share it through Android’s share sheet; the chosen recipient then processes it under its own privacy terms.

For product analytics, the App may send recording events with format, sample rate, channel count, duration in seconds, file size in kilobytes, bookmark count, and the screen where an action occurred. Analytics and crash reports do not include recording audio, filename, notes, waveform, transcript, or other recording content. Advertising SDKs likewise do not receive recording content.

Deleted recordings remain in the in-app Trash for up to 30 days unless you permanently delete or restore them sooner. Expired items are removed from local storage. Uninstalling removes App-local recordings and metadata. Recordings are excluded from Android cloud backup, but Android may transfer them directly during a device-to-device migration that you start.

3.8 AskPDF

AskPDF (dope.capybara.askpdf) opens PDF files and can summarize them or answer questions about them.

• Your files. The App reads only the PDFs you open through the system file picker, “Open with” or “Share”. Pages are displayed and text is extracted on your device. To show your recent documents, the App remembers each file’s address, title, page count and when you last opened it. This list is stored on your device and may be included in your Google-managed Android backup. The App does not upload your PDF files or include them in its backup.
• Summaries and questions. When you ask for a summary or ask a question, the App sends the text extracted from the document (up to about the first 60,000 characters), your question and the language for the answer over HTTPS to our AI relay server. The relay forwards them to a third-party AI model provider that generates the answer on our behalf. The PDF file, page images and advertising or device identifiers are not sent; like any internet request, the relay receives your IP address, which may be used to prevent abuse and enforce usage limits. Answers are shown in the App and are not saved after you close the document. We use this content only to provide the summary or answer; it is not used for advertising and is not sent to analytics, crash-reporting or advertising SDKs. Your daily count of free AI actions is kept on your device.
• Analytics. Events record how a PDF was opened, its page count, and which AI action you used and whether the daily limit blocked it. They do not include file names, document text, questions or answers.

3.9 Honest PDF Scanner

Honest PDF Scanner (dope.capybara.honestpdf) scans paper documents to PDF and converts, merges, splits and compresses PDF files on your device.

• Scanning. Document capture uses Google’s ML Kit Document Scanner, which runs through Google Play services on your device; the App itself does not hold the camera permission. Captured pages are returned to the App and stored in its private storage. You can also import images or PDFs that you pick or share with the App.
• Text recognition. Text on scanned pages is recognized on your device with ML Kit and saved with the document, so exported PDFs are searchable. As with PocketRates, ML Kit may send Google limited diagnostic and usage information, but not page images or recognized text.
• Storage and backup. Page images and PDFs are kept in the App’s private storage and leave your device only when you export or share them. The App’s database (document names, folders and tags, recognized text and saved AI results) and its settings may be included in your Google-managed Android backup; page images and PDF files are not.
• AI features. Rename, Summarize and Ask are optional and may not be available in your version of the App. When you use one, the recognized text of the pages involved and, for Ask, your question are sent over HTTPS to our AI relay server, hosted on Cloudflare, which forwards them to a third-party AI model provider that generates the result on our behalf. Page images and PDF files are not sent. Each request also carries the App’s package name and version and a Google Play Integrity token, which Google Play generates from device and app integrity signals so the relay can check that the request comes from a genuine copy of the App; like any internet request, the relay also receives your IP address. Results are saved with the document on your device. We use this text only to provide the result; it is not used for advertising and is not sent to analytics, crash-reporting or advertising SDKs. Your AI page allowance is tracked on your device.
• Analytics. Events count pages scanned, exported, recognized and processed by AI and note the export format and filters used. They do not include document names, page images, recognized text, questions or answers.

3.10 Third-party services

The third parties referenced above operate under their own privacy policies: Google, Meta, TikTok, Unity, Liftoff, Pangle, CoinGecko, Cloudflare, Vercel, and Resend. We do not send them data beyond what is needed for the services described in this policy.

4. Data retention

• Website analytics: consented measurements may use cookie identifiers; they are not solely anonymous aggregates. Retention follows our Google Analytics property settings. The local analytics choice expires after 90 days.
• Contact form messages: retained in our inbox until the conversation is resolved, after which they may be archived. You can ask us to delete your message at any time.
• App data: stored locally on your device. Clearing the App’s storage or uninstalling it removes the on-device copy. It may not immediately delete an existing Google-managed Android backup; you control that backup through your Android and Google Account settings.
• AI document requests (AskPDF, Honest PDF Scanner): the document text and questions you send are used only to return the result you asked for, and the AI model provider processes them on our behalf. Sections 3.8 and 3.9 describe what each App keeps on your device.
• Advertising, analytics, and diagnostics: processed and retained by the relevant providers under their policies. We do not store the raw SDK event stream on our own servers.

5. Your rights

If you are in the EU/EEA, UK, or another jurisdiction with similar laws, you have the right to access, correct, port, restrict, object to, and request the deletion of personal data we hold about you. To exercise any of these rights, email playdopecapybara@gmail.com and we will respond within 30 days.

Residents of US states with applicable privacy laws may also have rights to know, delete, or correct personal data and to opt out of applicable sale, sharing, or targeted advertising. We do not sell personal data for money. Advertising providers may process data in ways that qualify as sharing or targeted advertising under some state laws. Use Privacy choices in an App where available, your Android advertising privacy controls, or contact us by email to exercise these rights. We will not discriminate against you for doing so.

For provider-side app event data, you can also manage activity off Meta technologies or use TikTok’s privacy request form. Because our Apps do not create accounts, we usually cannot identify a provider-side SDK record from an email address alone.

In practice, the personal data we store directly is usually correspondence you initiated. The providers listed above may separately process technical data from an App or website.

6. Children’s privacy

Our Apps are rated for general audiences and do not knowingly collect personal information from children. If you believe a child has provided us personal information through our website or contact form, contact us and we will delete it.

7. Security

We use industry-standard transport security (HTTPS) for the website and our APIs. We rely on Google Play and our hosting provider for infrastructure-level security. No internet-connected service is 100% secure, but we minimize what we hold so the impact of any breach stays minimal.

8. Changes to this policy

We may update this policy. The “Last updated” date at the top reflects the most recent version. Material changes will be announced on this page or through the App where applicable.

9. Contact

Questions, requests, or concerns? Email us at playdopecapybara@gmail.com.