Privacy Policy

1. The short version

Doppel is an Android app that lets you run a second copy of most installed apps. We collect what we need to run the service (your email, your entitlement state, the apps you've added) and we do not look inside the instances you create. We don't sell your data and we don't use the contents of your instances to train anything.

2. Who we are

Doppel is operated by Innoventis Infotech ("we", "us"). For the purposes of the GDPR and similar laws, Innoventis Infotech is the data controller for the personal data described in this policy. Our registered address is [Registered address — TO CONFIRM]. You can reach us about anything in this policy at support@innoventisinfotech.com.

Legal bases for processing (GDPR Article 6). Where the GDPR applies, we rely on: (a) performance of a contract — to provide the core app functionality you sign up for, such as running instances, enforcing your plan limits, and sending transactional email; (b) consent — for analytics and personalized advertising, which you can give or withdraw at any time; and (c) legitimate interests — to keep the service secure and prevent abuse (crash diagnostics, integrity attestation, and admin audit logging), balanced against your rights and freedoms.

3. What we collect and why

3.1 Account data

When you create an account we store your email address and a randomly generated user ID. If you sign in via Google, we also store the display name and avatar URL Google provides — nothing else from your Google profile.

• Email address — for sign-in and transactional email (purchase receipts, expiry warnings, password reset).
• User ID — an opaque random identifier we use to associate your data internally.
• Display name / avatar — only if you signed in via Google.

3.2 Purchase data

If you make the one-time Lifetime purchase, your entitlement state is processed by Google Play Billing and synchronized to our servers via RevenueCat. We never see your payment method — that stays inside Google's billing infrastructure.

• Plan tier — Free or Lifetime — so the app knows what features to unlock.
• Purchase and entitlement events — the one-time purchase, and any refund or restore. These come to us as webhooks from RevenueCat.

3.3 Device data

• FCM push token — required to send you notifications (expiry warnings, purchase confirmations, support replies). Stored as one or more tokens per account.
• Crash reports — automatically generated by Firebase Crashlytics when the Doppel app crashes. Includes stack trace, device model, Android version, and the state of the Doppel app at the time. No data from your instances is included.
• App Check tokens — an integrity attestation from Google Play Integrity that we use to verify requests come from a real Doppel install, not a script attacking our API. We don't store these long-term; they're validated and discarded.

3.4 Usage data inside Doppel

We log a small amount of operational data so the service works:

• Which apps you've added — the package names, not the contents. We need this to enforce plan limits and to render the instances list on your device.
• Support tickets and feedback — if you write to us from inside the app, we store the message body along with your account ID.
• Admin actions — if a Doppel staff member takes an action on your account (e.g. processing a refund), we log the action, the operator, and the timestamp. This is a security audit log, not a marketing log.

3.5 What we do NOT collect

• The contents of any instance — messages, photos, files, cookies, account credentials, anything.
• Network traffic between your instances and their servers. We don't proxy or man-in-the-middle it.
• Your location, contacts list, SMS, call log, microphone, or camera.
• The contents of clipboard or notification panel outside Doppel itself.

4. Advertising on the Free tier

The Free tier shows banner and interstitial ads inside the Doppel app itself. Ads are served by Google AdMob. Some details are worth being explicit about:

• We never show ads inside any of your instances. The instance is the instance — we don't inject anything into it.
• Google's SDK may collect device-level identifiers (advertising ID) and ad interaction events. This is governed by Google's ad-services privacy notice, not by us. You can reset your advertising ID at any time in Android Settings.
• On a rewarded ad, we record the grant in our database so the reward (extra instance duration, etc.) can be applied. We don't record what ad you saw.
• If you're in the EEA or UK, we show you a Google-certified consent form (Google's User Messaging Platform, or "UMP") before serving personalized ads, and we honor your choice. You can change it later from the app's privacy settings.
• The one-time Lifetime purchase removes all advertising.

5. Who we share data with (sub-processors)

We use a small number of third-party services to run Doppel. Each one only sees the minimum data needed to do its job:

6. Retention

• Account data — kept while your account exists. If you delete your account, we begin removal immediately and complete it within 30 days.
• Account deletion records — we keep a minimal record (user ID, deletion timestamp) for 90 days after deletion in case of legal or fraud-investigation obligations.
• Admin audit log — 365 days, then purged.
• Webhook event logs — 90 days for billing event idempotency, then purged.
• Crash reports — governed by Firebase Crashlytics' retention (currently ~90 days).

7. Your rights

Depending on where you live, you have some or all of the following rights:

• Access — ask us for a copy of the data we hold about you.
• Correction — ask us to fix data that's wrong.
• Deletion — ask us to delete your account. You can do this from inside the app under Settings › Account › Delete account, or by emailing support@innoventisinfotech.com.
• Portability — export your data in a machine-readable format.
• Objection / restriction — tell us to stop processing your data in certain ways.
• Complaint — lodge a complaint with your local data protection authority.

8. Children

Doppel is not directed at anyone under 16, and you must be at least 16 to create an account (see our Terms of Service). We don't knowingly collect personal data from children under 16. If we learn that we have, we'll delete it.

9. International transfers

Our backend runs on Google Cloud infrastructure in the United States. If you're accessing Doppel from outside the US, your data will be transferred there. Where required by law (e.g. EEA/UK), we rely on Standard Contractual Clauses to make that transfer lawful.

10. Security

We use TLS for everything in transit, encrypted storage at rest in Firebase, and least- privilege IAM for our service accounts. Admin operator access is logged. Despite all this, no system is unbreakable; if a breach happens we'll notify affected users without undue delay.

11. Changes to this policy

We'll update this page if our practices change. The effective date at the top of this policy is always the most recent version. If we make changes that meaningfully affect how we use your data, we'll surface a notice inside the Doppel app the next time you open it.

12. Contact

Questions, complaints, or formal requests: support@innoventisinfotech.com. We'll respond within 30 days at the outside, usually much sooner.