Privacy policy
Last updated 17 August 2026
This policy explains what data DonRetto uses, why it is needed, who may receive it, and how you can control or delete it.
What your account holds
Your name, email address, protected password and language preference. Your name is visible to people in your groups.
What your activity holds
Your groups, roles, Rettos, nicknames, goals, evidence, photos, notes, votes, review decisions and feedback. This data is used to provide the features you choose and keep group activity consistent.
What the app needs to work
DonRetto keeps the session and device information needed to keep you signed in securely. If you enable notifications, it keeps a notification identifier for that device. We also retain your Terms acceptance and limited security records used to prevent abuse.
Country, counted
At registration, DonRetto adds an approximate country to an anonymous aggregate count. It is not linked to your account, and the app does not request device location.
What is never collected
DonRetto does not use your data for advertising or cross-app tracking. It does not request contacts, microphone or precise location. Camera and photo access are requested only when you choose a feature that needs them, and you can decline.
Your photos
A photo is uploaded only after you choose it and tap send. DonRetto does not scan your library. The original remains on your device.
Service providers
DonRetto uses trusted providers for hosting, private media storage, account email and optional notification delivery. They receive only the data needed to perform those services and may not use it for advertising by DonRetto.
Who can see your evidence
Your evidence is private to you and the authorized group members who need to review it under that Retto's rules. It has no public or shareable address.
Explore and the public showcase
A public Retto may show its name, description, rules and reward in Explore. A group manager may separately publish selected showcase images with consent. Private submission evidence is not published as showcase media, and published images can be removed.
How long things are kept
Account and activity data are kept while your account exists or as needed for safety and legal obligations. Temporary security and recovery records expire automatically. Removed photos are deleted from storage.
Deactivating and deleting
You can deactivate or delete your account from Profile. Deactivation is reversible. Deletion signs you out and starts a 30-day recovery period; after that, your account and associated content are permanently removed. You may also begin deletion at /delete-account.
One case where deletion is refused
If you are the last manager of a group that other people still use, transfer management or empty the group before deleting your account. DonRetto identifies the affected group when this applies.
Security
DonRetto uses reasonable technical and organizational safeguards, limits access to private content and protects sensitive account information. No internet service can guarantee absolute security.
This is a beta
Features may change during the beta. Questions and privacy requests can be sent through the feedback form in the app.
DonRetto does not sell your data, does not share it for advertising, and shows no ads.