隐私 · privacy
What we collect, and why it’s so little.
Last updated 18 October 2026
This notice covers both the 豆丁 app for iPhone and iPad and this website at getdouding.app.
豆丁 is a reading app with no account, no sync and no analytics. Everything you read and log stays on your device and is never sent anywhere. This website collects one thing — an email address, if you choose to give it — so we can tell you when the app reaches the App Store. That is the whole of it; the rest of this page is the detail behind those two sentences.
Who is responsible
This site and the 豆丁 app are run by the maker of 豆丁 / Douding. For anything on this page, including any request about your data, write to hello@getdouding.app. We are the data controller for the waitlist described below.
The app collects nothing
豆丁 stores your progress locally using Core Data on the device, and your two preferences — theme, and whether pinyin is shown — in the device’s own settings. There is no account to create, no server to sync with, and no copy of your reading held by us or anyone else.
- ·Your reading history (everything filed in 藏), the days that make up your streak, the phrases you log as “said out loud”, and your preferences are never sent to us or anyone else. If you back up your device to iCloud or a computer, that backup includes them, as it does every app’s data — it is yours, and we cannot see it.
- ·There is no analytics SDK, no crash reporter, no advertising identifier, and no third-party SDK of any kind in the app.
- ·Deleting the app deletes that data. There is nothing left for us to delete on your behalf, because we never had it.
- ·The app asks for no permissions — no contacts, no location, no photos, no microphone, no notifications. The only network traffic it causes is Apple’s own, for the App Store and subscriptions.
Because nothing leaves the device, there is no consent to withdraw and no deletion request to make for app data: removing the app, or deleting it from your device’s storage, is the whole of it. If you would like written confirmation that we hold nothing about you, ask and we will send it.
Apple separately collects information about downloads and subscriptions as the seller of record. That processing is Apple’s and governed by Apple’s privacy policy; we see only aggregate sales figures, never who you are.
Subscriptions, and how we know you have one
豆丁 has a free portion and a paid subscription. Apple is the seller: you pay Apple, and your subscription is tied to your Apple Account, not to any account with us — because there isn’t one.
The app checks whether you have an active subscription by asking StoreKit on the device. That check happens between your device and Apple; no request reaches us, and we are never told who you are. It is also why restoring a purchase on a new iPhone or iPad works without you giving us anything.
What we see in App Store Connect is aggregate: how many people subscribed, how many cancelled, how much was paid out. We cannot see your name, your email address, or which phrases you read — and we could not link a subscription to a person even if we wanted to.
What this website collects
If you submit the waitlist form, we store the email address you type. Nothing else on the page asks for information about you. There is no tracking, no advertising, and no cookie banner — because there are no tracking cookies to consent to.
Fonts are served from this domain rather than a font CDN, so reading the page does not tell any third party that you were here.
Who processes it
| Service | What it handles | Where |
|---|---|---|
| Resend | Stores your waitlist email address and sends the launch email. | United States |
| Vercel | Hosts the site, and keeps standard server logs that include IP addresses for operational and security purposes. | United States |
| Upstash | Rate limits the waitlist form. Briefly stores your IP address as a counter key so the form cannot be scripted. | United States |
These are processors acting on our instructions, under contracts that require them to protect your data to the same standard set out in this notice. We do not sell your address, share it for anyone else’s marketing, or add you to any other list.
The app shares nothing with any of them. They exist only because this website has a form on it.
Why we are allowed to hold it
- ·Your consent, for the waitlist address. You gave it by typing it in, and you can withdraw it at any time.
- ·Our legitimate interest, for server logs and rate-limit counters: keeping a public form from being abused and keeping the site running.
How long we keep it
| Data | Retained |
|---|---|
| Waitlist email address | Until you unsubscribe, or 90 days after the launch email is sent — whichever comes first. Then deleted. |
| Rate-limit counter (IP address) | About ten minutes. It expires automatically and is never read for any other purpose. |
| Server logs | Kept by Vercel on their standard log retention. |
Your rights
If you are in the UK, EU, or another region with comparable law, you can ask us to give you a copy of what we hold, correct it, delete it, or stop using it. In practice, for almost everyone, what we hold is a single email address.
Write to hello@getdouding.app and we will act within 30 days. Every email we send also carries a one-click unsubscribe, which removes you from the list outright rather than flagging you as opted out. You may also complain to your data protection authority — in the UK, the ICO.
Children
豆丁 is written for adults and is not directed at children under 13. We do not knowingly collect anything from them. If you believe a child has given us an address, tell us and we will remove it.
Changes
The app is early, and this notice will change as it grows. If 豆丁 ever gains accounts, sync, or anything else that leaves the device, this page will say so before that ships, not after. The date at the top reflects the current version, and anyone on the waitlist will be told about a change that materially affects them.