Didja
TermsDownload Android

Privacy Policy

Privacy Policy

Updated: June 13, 2026. This policy applies to the Didja app, browser app, and supporting services.

1. Who we are

Didja is a lightweight social commitment and witness tool. You can create commitments, invite buddies or verifiers, submit progress and proof, and generate success or failure result cards. During testing, privacy questions can be sent to support@didja.it.fangyuanhuanke.com.

2. Information we collect

To provide account login, commitment creation, witness invitations, proof submission, and final settlement, we process information such as phone numbers, verification-code records, login devices, refresh tokens, nicknames, avatar URLs, bios, goals, Didja IDs, commitment titles and details, due times, participants, invitation codes, buddy relationships, friend requests, in-app notifications, progress text, proof text, proof images, validation decisions, failure reasons, result cards, reports, blocks, analytics events, request logs, and necessary backups.

If you upload an avatar, proof images, or save a result card, we also process the related image files, dimensions, file sizes, upload times, and object-storage access URLs.

3. Device permissions

Camera permission is used to scan invitation codes, user QR codes, and other supported QR codes. Photo-library permission is used to choose avatars, submit proof images, scan QR codes from images, and save result cards. Notification permission is used for due-time reminders, validation reminders, friend requests, and invitation handling. You can disable permissions in system settings, but related features may stop working.

4. How we use information

We use this information to authenticate accounts, keep sessions active, create and manage commitments, invite buddies, submit progress and proof, validate results, generate result cards, show history, send reminders, process friend requests, detect abuse, handle reports and blocks, troubleshoot issues, protect service security, and measure basic stability and feature availability during testing.

5. Sharing and visibility

Commitment content is visible to the participants of that commitment. Invitation codes, invitation links, QR codes, result cards, or public image links that you share may be viewed, forwarded, or saved by people who receive them. Proof images, avatars, and result cards may be stored as accessible object-storage URLs. Do not upload identity documents, bank cards, addresses, other people's private information, medical information, or other sensitive materials as proof.

The current testing version does not include advertising SDKs and does not sell personal information. To operate the service, we use infrastructure such as servers, databases, cache, object storage, logs, and HTTPS gateways.

6. Retention

While your account exists, we retain profile information, commitment records, buddy relationships, and result records so you can view your history. Verification codes, session tokens, notifications, logs, and backups are retained for reasonable periods based on security and operations needs. After account deletion, we delete or anonymize data directly associated with the account, except where law, security auditing, or dispute handling requires retention.

7. Account deletion

You can delete your account in the Android app under Settings - Delete Account. Deletion removes profile data, login devices, refresh tokens, buddy relationships, friend requests, in-app notifications, commitments you created, participation records, progress, proof, validation records, result cards, and related personal references. After deletion, the data cannot be restored and the account can no longer be used.

8. Your rights

In the app, you can view and edit your nickname, avatar, bio, and goals; view commitments you created or witnessed; delete your account; disable system permissions; and delete or manage in-app notifications. To access, correct, or delete other personal information, contact us using the email in this policy.

9. Security

We protect data using HTTPS, access controls, token authentication, signed object-storage uploads, least-privilege permissions, and log auditing. No internet service can guarantee absolute security, so please protect your verification codes, account devices, and shared links.

10. Minors

Minors should use the service with guardian consent and guidance. Do not create commitments involving personal safety risks, unlawful content, lending or debt collection, medical advice, or other content unsuitable for minors.

11. Policy updates

We may update this policy when features, data processing, or compliance requirements change. Major changes will be communicated through the app, browser app, or other reasonable methods. Continued use means you understand the updated policy.