Your account. An email address, a username, and a date of birth. The email signs you in and resets your password; it is never shown to anyone else and never attached to anything you publish. Your username is public — it appears on runs and reviews you choose to publish. The date of birth is used for one thing only, checking you are 21 or older, and is never shown to anyone.

Your logbook. Grows, harvests, sensory readings, projects and photos live on your device. If you turn on sync they are also stored in your account so they survive a lost or replaced phone. Synced data is private to you: it is protected by database rules that check your account on every single read, not by an app setting.

Your consumption archive. Private, and deliberately more private than everything else. There is no staff exception anywhere in our database rules — nobody who works on Dodi can read your archive, including us. Publishing a review is a separate action that writes a separate record.

Photos. Stored in a private bucket, filed under your account id. Access rules check that the folder belongs to you on every request, so no other user can read your images even if they know the exact filename.

Searches. We record what strains are searched for, to show what is popular. These records contain the search text and nothing else — no account, no device, no address. We cannot tell who searched for what, and neither can anyone else.

No analytics services. No advertising. No trackers of any kind. No third-party SDK in this app is collecting anything about you, because there are none. We do not sell data, and there is no arrangement under which we would.

We do not ask for your location. We do not read your contacts. The camera and photo library are only accessed when you tap to add a photo, and the permission prompt appears at that moment rather than at launch.

Publishing a run shares that run: the strain, conditions, dates, your sensory readings, and your username. If you choose to withhold the yield, that number is never uploaded at all — it is not sent and hidden, it simply does not leave your device.

Publishing a review shares the review text, rating, and your username. Where you obtained it is never included, even though the app lets you record that privately for your own reference.

Everything else stays private: every other run, your archive, your email, and anything you have not explicitly published.

If you use the in-app assistant, your question and relevant context from the screen you are on are sent to Anthropic to generate a reply. Do not put anything in it you would not want processed by a third party. The assistant is optional and nothing else in Dodi depends on it.

Supabase hosts our database, authentication and file storage. Cloudflare serves the website. Anthropic processes assistant questions. If you buy merchandise, Stripe handles the payment and we never see your card details.

You can change your username, block other users, and report anything you think should not be here. To delete your account and everything in it, email us — it is a real deletion, not a flag, and it takes your logbook, archive and photos with it.

You can also simply not sign in. Logging grows works with no account at all; an account is only needed to publish or to sync.