DateDots — Privacy Policy

Last updated: July 7, 2026

DateDots is operated by Big Mountain Outpost, LLC ("Big Mountain Outpost", "we"). This Privacy Policy explains what data the DateDots app ("DateDots", "the app") collects, how it is used, and how it is stored. By using DateDots you agree to the terms below.

Geographic scope

DateDots is offered for use outside the European Economic Area (EEA), the United Kingdom (UK), and Switzerland. It is not offered to, marketed to, or directed at individuals located in the EEA, the UK, or Switzerland, and it is not intended for use there. We do not target those regions or monitor the behavior of individuals in them.

If you are located in the EEA, the UK, or Switzerland, please do not use DateDots or sign in for cloud sync. If, despite this, you are located in one of those regions and the EU GDPR, UK GDPR, or Swiss FADP nonetheless applies to you, the conditional provisions in §1.4, §1.5, and §5.2 apply to the extent that law applies to you.

1. What we collect

1.1 Data stored on your device

DateDots saves the following information locally on your phone:

• The alarms you create (time, label, sound choice, repeat days, snooze preferences, vibrate toggle, group assignment).
• Your routines — groups of alarms you create, whether built by hand or made from a timeline (name, color, shape, shared sound, sort order).
• The timelines you create (offsets, names, sound choices), and the calendar dates and event times you assign to your routines.
• Your app settings (theme, 24-hour toggle, default sound, calendar first day, inactivity timeout, pre-alarm minutes, schedule reminder), and an optional "your name" value used only to match your own shifts when importing a schedule.

This local data never leaves your device unless you sign in (see §1.2).

1.1a Importing a schedule (spreadsheet or device calendar)

DateDots can create routines by importing a spreadsheet you choose, or by reading events from your device's calendar (with your permission). This processing happens entirely on your device: the imported events and any names in them are used only to build the alarms you confirm, are held in memory during the import, and are not uploaded to the cloud or sold or shared. DateDots reads your calendar but never writes to or modifies it. It requests only calendar read access and never adds, edits, or deletes calendar events.

1.2 Data stored in the cloud (when you sign in with Google)

If you sign in to DateDots with your Google account, the same alarm, routine, timeline, calendar-date, and settings information described in §1.1 is also stored in Google Cloud Firestore under your private user document, which is keyed by your Google account ID. This sync runs through Firebase Authentication and Cloud Firestore, both operated by Google.

To enable this, Google Sign-In additionally provides DateDots with:

• Your Google account ID (a unique identifier).
• Your name as registered with Google.
• The email address tied to your Google account.
• A URL pointing to your Google profile photo, if you have one.

Your name, email address, and profile photo URL are held by Firebase Authentication (they are not written into your Firestore content); your Google account ID identifies your private Firestore document. These four items are used only to display your account in the app's Settings screen and to identify your data. They are never sold, transferred to third-party advertising networks, or used for any purpose other than authenticating you and syncing your DateDots data.

1.2a Purchase records (DateDots Pro)

If you buy DateDots Pro while signed in, our server verifies the purchase with Google Play and stores a small entitlement record in Cloud Firestore tied to your account. That record contains your Pro status, the Google Play order ID, and the purchase token — used to recognize your Pro unlock across your devices and to protect it against tampering. We never receive or store your payment-card details; Google Play processes the payment (see §1.3). This entitlement record is deleted when you delete your account (see §5).

1.3 Data we do NOT collect

DateDots does not collect, request, or store:

• Your location.
• Your contacts, photos, or files outside the app's own data.
• Your microphone or camera input.
• Browser history or other app usage.
• Advertising identifiers.
• Your payment details. In-app purchases (such as DateDots Pro) are processed by Google Play; we never receive or store your card information.

DateDots does not contain advertising and does not include third-party analytics or tracking SDKs.

To operate Firebase, Google may assign a Firebase installation identifier to your copy of the app. We do not use it for advertising or to track you across other apps or websites.

1.4 Legal basis for processing (GDPR / UK GDPR)

As stated under "Geographic scope," DateDots is not offered to or directed at individuals in the EEA or the UK. If you are nonetheless located in the EEA or the UK and that law applies to you, our legal bases for processing your personal data are:

• Performance of a contract — when you sign in and use cloud sync, we process your Google account identifiers and your DateDots content to provide the sync service you requested.
• Consent — you choose whether to sign in at all and whether to grant the optional calendar-read permission; you may withdraw consent at any time by signing out, revoking the permission, or deleting your account (see §5).
• Legitimate interests — keeping the service secure and functioning (for example, enforcing per-user data isolation), balanced against your rights.

If you never sign in, your data stays on your device and is not processed by us at all.

1.5 International data transfers

DateDots is not offered to or directed at individuals in the EEA, the UK, or Switzerland. If you are nonetheless located in one of those regions and sign in, your data is stored in Google Cloud Firestore and may be stored and processed on Google's servers in the United States and other countries, which may have different data-protection laws than your own. This transfer is carried out by Google as part of the Firebase platform under Google's data-processing terms and safeguards (such as Standard Contractual Clauses where applicable). See Google's Privacy Policy.

2. Who has access to your data

• You: through the app itself and via your Google account.
• Google: as the operator of Firebase Authentication and Cloud Firestore, Google processes your data on our behalf. Google's own privacy practices apply to that processing — see Google's Privacy Policy.
• DateDots developer: the developer can view aggregate Firestore usage metrics through the Firebase console and does not access individual users' alarm content in the ordinary course of operating the app. The developer accesses individual content only where necessary to diagnose a problem at your request, to protect the security and integrity of the service, or to comply with law.

DateDots does not sell your personal information, and does not share your personal information with third parties for advertising, marketing, or cross-context behavioral advertising — for money or for any other valuable consideration. We have not done so in the past 12 months. The only third party that processes your data is Google, acting as our service provider to operate authentication and cloud storage as described above.

3. How long we keep your data

• On-device data: kept until you delete the app or clear its data.
• Cloud data: kept until you delete your alarms / groups in the app, or request account deletion (see §5).

4. Children's privacy

DateDots is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect information from children. If you believe a child has signed in with their Google account, contact us at bigmountainoutpost@gmail.com and we will remove the associated data.

5. Your rights

You can:

• View all your data inside the app.
• Export a copy of your data (your alarms, routines, timelines, calendar assignments, and settings) to a JSON file from Settings → Export my data.
• Edit or delete individual alarms, groups, and calendar assignments through the app's UI; these changes propagate to the cloud copy.
• Sign out at any time from Settings → Account. Sign-out stops further sync but does not by itself delete cloud data.
• Delete your account and all cloud data at any time from Settings → Account → "Delete account & data". This permanently removes your Firestore data and your authentication account. (Alarms saved on the device itself remain until you uninstall or clear the app's data.)
• Alternatively, request deletion by emailing bigmountainoutpost@gmail.com from the Google account in question. Deletion is performed within 30 days.
• Step-by-step deletion instructions are also available on the web, without needing the app installed, at https://big-mountain-outpost.github.io/delete.html.

Depending on where you live, additional rights may apply. You can exercise any of the rights below by emailing bigmountainoutpost@gmail.com from the Google account in question; we will verify your request through control of that account and respond within the time required by law.

5.1 California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect (account identifiers and the app content described in §1), the purposes for which we use it (§1.2), and the fact that we disclose it only to Google as our service provider (§2).
• Access a copy of the personal information we hold about you.
• Delete your personal information (built into the app — see above).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information. We do not sell or share your personal information (see §2), so there is nothing to opt out of.
• Not be discriminated against for exercising these rights.

5.2 EEA / UK / Switzerland residents (GDPR / UK GDPR / FADP)

DateDots is not offered to, or directed at, individuals in the EEA, the UK, or Switzerland (see "Geographic scope"). If you are nonetheless located in the EEA or the UK, then to the extent that the EU GDPR or UK GDPR applies to you, you have the right to access, rectify, erase, restrict, or object to our processing of your personal data; the right to data portability; and the right to withdraw consent at any time (without affecting processing already carried out). You also have the right to lodge a complaint with your local data-protection supervisory authority.

If you are located in Switzerland, comparable rights may apply under the Swiss Federal Act on Data Protection (FADP) to the extent it applies to you.

6. Security

Data in transit between the app and Firebase is encrypted using TLS. Data at rest in Firestore is encrypted by Google. No system is perfectly secure, and DateDots cannot guarantee against unauthorized access or breach.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the app's About screen and the "Last updated" date at the top of this document. Continuing to use the app after a change constitutes acceptance.

8. Contact

For privacy questions or data-deletion requests, contact:

bigmountainoutpost@gmail.com

© 2026 Big Mountain Outpost, LLC. All rights reserved.