Privacy policy
Updated 29 September 2026
Who is responsible
Victor Vernier, entrepreneur individuel (EI), France, operates Do 100 and is responsible for the personal information described here. Contact support@do100.app for support or privacy requests.
Local storage and optional iCloud sync
Do 100 stores your list locally on iPhone or iPad. When iCloud Sync is enabled, Apple’s CloudKit also stores challenges, selected interests, goals, tasks, notes and progress in your private iCloud database and synchronizes them with devices using the same Apple Account. No Do 100 account is required and this content is not sent to a Do 100 server or RevenueCat. The sync switch applies to this device and takes effect after fully closing and reopening the app. Turning it off keeps downloaded data and leaves iCloud data in place; turning it on resumes synchronization. Local settings such as sound and haptics are not part of this sync. Widgets use a local shared copy and may reveal goal information. Apple device backups are separate from synchronization.
App lock, exports and sharing
iOS handles Face ID, Touch ID and passcode authentication. Do 100 receives the result, not your biometric data or passcode. You choose where to send exports and shared images. Those copies may contain personal information and are handled by the destinations you select. Deleting local app data does not delete these copies.
Support correspondence
When you email us, we receive your address, message and any attachments you provide. We use them to answer requests and resolve problems, based on our legitimate interest in providing support or, when necessary, performing our contract with you. Routine support correspondence is retained for 12 months after resolution. Limited records may be kept longer where required by law or necessary for a legal claim. Zoho Mail hosts our support mailbox in the United States; Spark is used to access it. Please avoid sending passwords, card details or unnecessary personal goal information. Victor handles support personally. We do not use Spark AI or email-sharing features for support correspondence.
Website and security
OpenAI Sites and Cloudflare infrastructure host and protect do100.app. Technical processing can include IP addresses and request information. We have not added advertising pixels or visitor-analytics scripts. Cloudflare’s __cf_bm security cookie expires after 30 minutes of continuous inactivity. Necessary hosting and security processing serves our legitimate interest in operating a reliable, secure website.
Beta testing
Apple processes TestFlight testing, crash and feedback information and makes certain reports available to us. We use relevant reports to investigate bugs and improve reliability. Feedback or screenshots you send may contain personal information. Apple explains its handling in the TestFlight privacy notice linked below. We consult these reports within Apple’s service and do not download or keep separate copies. Apple controls their availability and retention within TestFlight. Our use of feedback serves our legitimate interest in fixing bugs and improving the app.
Retention
Local app data remains until you delete it or its local storage is removed; you manage backups and exports separately. We remove routine support correspondence 12 months after resolution, subject to the limited exceptions above. Provider recovery copies may persist after deletion: Zoho normally allows recovery for 30 days after removal from Trash; additional archive settings or legal holds can affect this. Spark describes a four-hour cache for recent emails and backups typically retained for one week. Hosting and security records follow provider retention criteria, including service operation, security investigations and legal requirements, rather than one fixed period for all records. The provider documents below explain these practices.
International processing
Service providers may process information outside the European Economic Area, including in the United States. OpenAI and Spark’s processing terms and Zoho’s privacy policy describe transfer protections, including standard contractual clauses where applicable. The relevant provider documents are linked below. Contact support@do100.app for information about safeguards or to request a copy. We do not promise EU-only processing.
Your rights
Contact support@do100.app to request access, correction, deletion or restriction, to object to processing based on legitimate interests, or to request portability where applicable. We may need information to verify your request. We cannot remotely retrieve or erase goals stored only on your device. You may complain to the CNIL or another competent supervisory authority.
Purchases and the subscription screen
Apple processes in-app payments. RevenueCat manages purchase validation, subscription status and access to paid features for us. It receives a randomly generated app user identifier, transaction and purchase history, trial and renewal status, and technical information such as app/OS version, device type, language and currency. RevenueCatUI also sends subscription-screen views, closes, cancelled purchase attempts and interactions with plans and controls, with timestamps and session identifiers. Network requests expose an IP address to the service. This processing can begin when you open the app or subscription screen, even without buying. We do not send goal content, names or email addresses to RevenueCat, and we do not receive your full payment-card details. We do not use these data for advertising tracking.
Why and how long purchase data is used
Purchase processing enables us to perform our contract with you, including granting and restoring access. Security and purchase/paywall analytics serve our legitimate interests in preventing fraud and understanding how the offer works. RevenueCat processes data on our behalf, including in the United States; its Data Processing Addendum provides standard contractual clauses for applicable international transfers. Purchase records are retained as needed to manage access and restoration, resolve disputes and meet legal obligations. Technical and paywall records follow service-operation and security needs; they do not share the 12-month support-email period. Contact us for a deletion request or information about applicable safeguards.
Deleting data and managing subscriptions
Use “Delete all Do 100 data” in Settings to permanently remove challenges, goals and progress. With sync enabled, deletions also sync to iCloud and your other devices; this may take time. Deleting the app or turning sync off does not delete the iCloud copy. Manage backups, exports and shared copies separately. This action does not cancel a subscription. Deleting local goals or uninstalling Do 100 does not cancel an Apple subscription or automatically delete Apple or RevenueCat purchase records. Manage cancellation in your Apple subscription settings. For purchase-data access or deletion requests, email support@do100.app; we may need limited transaction information to locate the correct record. Do not send card details or passwords. Apple handles its own payment records under its privacy terms. We will update this notice when data handling changes.