What we collect, and why.

Quick summary

• We collect your email + display name (for sign-in) and the scores you create.
• We don't sell, rent, or share your data with advertisers.
• We use Firebase (Google Cloud) to host auth, database, and functions.
• We use anonymous analytics to understand which features get used.
• You can delete your account and all your scores at any time.

Who we are

DomiSol is operated by the DomiSol team. Reach us at hello@domisol.app with any privacy question. This policy applies to domisol.app and dash.domisol.app.

What we collect

Account information

When you sign up — with Google or with an email and password — we receive your email address and (when available) your display name and avatar URL. These are stored in our Firebase Auth instance and mirrored to a /users/{uid} document in Firestore.

Scores you create

Every score you save is stored in our Firestore database under your user id. Scores are private by default. If you publish a score to a public share link, the score's contents and your display name become readable by anyone who has the link.

Feedback you send

When you use the in-app Feedback button, we store your message, category, the page URL you were on, your browser user-agent, the app version, and your email so we can reply.

Analytics

We use PostHog (privacy-focused analytics) to count feature usage in aggregate — how many users opened the AI roadmap, how many scores get exported to PDF, etc. We do not link analytics events to your email or display name.

What we do not collect

• Your password — only Firebase Auth ever sees it (hashed).
• Tracking cookies for advertising.
• Audio recordings (when humming-input ships, audio is processed in your browser unless you explicitly opt in to cloud OMR).

Where it's stored

Authentication, Firestore, Cloud Functions, and Storage all run on Google Cloud (Firebase) in the nam5 multi-region (United States data centers). The marketing site and the editor front-end are hosted on Cloudflare Pages globally.

Who we share it with

We share data only with infrastructure providers who process it on our behalf:

• Google (Firebase) — auth, database, functions, storage
• Cloudflare — static hosting, CDN, DDoS protection
• PostHog — anonymous product analytics
• Sentry — error reporting (no PII in payloads)
• Resend — transactional email (welcome, password reset)

We do not sell, rent, or trade your data to third parties for advertising or any other purpose.

How long we keep it

• Account data + scores: as long as your account exists.
• Feedback messages: indefinitely (so we can track recurring requests).
• Anonymous analytics: 12 months by default.
• Sentry error reports: 30 days.
• Server logs: 30 days.

Your rights

Regardless of where you live, you can:

• Access your data — email us and we'll send you an export.
• Correct your profile — change your name and email in the editor.
• Delete your account — email hello@domisol.app and we'll wipe everything within 30 days.
• Export your scores — every score can be saved as PDF; the canonical JSON form is available on request.

If you live in the EU, UK, or California, you have additional rights under GDPR / CCPA — same email gets the same response.

Cookies

We use one cookie for authentication (the Firebase Auth session) and one localStorage entry to remember whether you've seen the beta-welcome modal. We do not use third-party tracking cookies.

Children

DomiSol is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, please email us and we'll delete it.

Changes

If we materially change this policy, we'll email signed-in users at least 14 days before it takes effect. Smaller edits (typos, clarifications) will be updated here without notice with the date stamp at the top.

Contact

Questions, requests, or complaints: hello@domisol.app.