Privacy policy

Who is responsible

Domipo is operated by [LEGAL ENTITY NAME], [STREET ADDRESS], [CITY, COUNTRY], the "controller" in GDPR terms.

For anything in this policy, write to the postal address above.

What we store

If you only browse, the app creates an anonymous account so you can follow cities and save places. It holds a random identifier, the cities you follow and the places you save, and nothing that identifies you. The catalog is streamed from our servers as you browse; it is not stored on your device. Anonymous accounts that go unused for thirty days are deleted automatically.

If you create an account, we store your email address (for signing in) and your chosen handle; your contributions (level ratings, facts about wifi, power, noise and bathrooms, measured speed-test results, photos, and the timestamp of each); and the cities you follow, so the app knows which places to show you first.

We do not collect your location history, advertising identifiers, contacts, or anything else from your device beyond what is listed here.

Where it lives

Account data and contributions are stored with Convex on servers located in the European Union (AWS, Ireland). Backups stay in the EU as well. We do not transfer your personal data outside the EU.

Analytics, strictly opt-in

The app ships with analytics off. If you explicitly opt in (settings → share usage data), we use PostHog on EU servers to see which features get used and where the app breaks. Opting out again stops collection immediately, and deleting your account deletes what was collected.

This website sets no cookies and runs no analytics at all. Fonts are self-hosted; loading a page here sends no request to any third party.

Crash reports

If the app crashes, a report with the stack trace, app version, device model and OS version is sent to Sentry on its EU servers (Germany), our crash reporting processor. Reports carry no account identifier, no location and no contributions.

Photos

Photos you attach to a place are stripped of EXIF metadata (GPS coordinates, device identifiers, embedded timestamps) before they are stored. Photograph spaces, not people; see the community rules.

Speed tests

Wifi measurements use NDT7, the open measurement protocol run by Measurement Lab (M-Lab). When you start a test, your device talks directly to an M-Lab server, and M-Lab publishes raw measurement data (including the IP address the test came from) as open data under its own privacy policy.

We store only the resulting numbers (download, upload, latency) attached to your contribution. Speed tests run only when you start one, never in the background.

No ads, no resale

We show no ads, sell no placement, and never sell or share your personal data with advertisers, brokers or "partners". There is nothing here to monetize. That is the point.

Deletion and export

Delete your account in the app (settings → delete account) and everything personal goes with it: email, handle, followed cities, and any opt-in analytics. Your contributions to places remain in the community catalog but are anonymized (no handle, no account link) because the catalog is a shared work.

You can export everything we hold about you from the app (settings → export my data) in a machine-readable format, any time.

Your rights

Under the GDPR you can:

1. Access. Ask for a copy of the data we hold about you.
2. Rectify. Have anything wrong corrected.
3. Erase. Delete your account and everything personal in it.
4. Restrict and object. Limit what we do with your data.
5. Port. Take your data elsewhere; the in-app export is built for this.
6. Withdraw consent. Switch analytics off again, any time.
7. Complain. To your local data protection authority, if we let you down.

Most of these are one tap in the app. For the rest, write to the postal address in section 01 and you will have an answer within 30 days.

Changes

If this policy changes in any meaningful way, the app will tell you before the change takes effect, and the date at the top of this page will move.