dandi
Privacy Policy
Last updated: August 28, 2026

What Dandi is

Dandi is a personal goal-tracking app. We help you set goals, break them into steps, and stay on track with progress tracking and reminders. This policy explains what information we collect, how we collect it, how we use it, and how you can control or delete it.


Information we collect and how we collect it

Information you provide directly — entered by you in the app:

Information stored automatically when you use the app:

What we do not collect: location, contacts, photos, browsing history, phone number, device identifiers, or advertising identifiers. We do not use any analytics, crash-reporting, or advertising SDK that sends your data to a third party.


How we use your information

We do not use your information for advertising, profiling, or selling to third parties. We have no advertising business and your data is never monetized.


Third-party services

Service Purpose Data shared
Supabase Account authentication and goal data storage Email, name, goal content

Supabase is contractually required to protect your data under terms consistent with this policy. They may not use your data for their own purposes. You can review their privacy practices at supabase.com/privacy.

No other third-party services receive your data.


Data storage and security

Your data is stored on servers provided by Supabase, located in AWS US West (Oregon), United States.

All data sent between the app and our servers is encrypted in transit using HTTPS/TLS. Passwords are hashed before storage and are never accessible in plain text. Your session credentials are stored in your device's encrypted Keychain.

Your local data on your device is stored in the app's private storage area and is not accessible to other apps.


Data retention and deletion

We retain your personal information and goal data for as long as your account is active. We do not retain data beyond what is needed to provide the service.

You can permanently delete your account at any time from Settings → Delete Account inside the app. Deleting your account immediately and permanently removes all your personal information and goal data from our servers. This action cannot be undone.

You may also request data deletion by contacting us at hello@danditheapp.com. We will complete the deletion within 30 days.


Push notifications

If you grant notification permission, Dandi schedules reminders locally on your device. These notifications are generated and delivered entirely on your iPhone — they are not sent through an external server. Your notification content never leaves your device.

You can turn off notifications at any time in Settings → Notifications inside the app, or in your iPhone's Settings app.


Withdrawing consent

You can withdraw your consent for data collection and use at any time by deleting your account from Settings → Delete Account. This permanently removes all your data from our servers.

To stop receiving push notifications without deleting your account, disable them in Settings → Notifications inside Dandi or in your iPhone's Settings app.

If you have questions or want to exercise any data rights, contact us at hello@danditheapp.com.


Children's privacy

Dandi is not directed at children under 13 and we do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, contact us at hello@danditheapp.com and we will delete it promptly.


Changes to this policy

If we make significant changes, we will notify you through the app or by email before the changes take effect. The date at the top of this page shows when it was last updated. Continued use of the app after changes constitutes acceptance of the updated policy.


Questions about your privacy?

Email us at hello@danditheapp.com