Privacy Policy

DoWeDontWe

Operated by Optional Salad

Last updated: 25 May 2026

1. Who we are

DoWeDontWe is a shared decision-making app operated by Optional Salad ("we", "us", "our"). We are in the process of incorporating as a limited company in the United Kingdom.

For privacy enquiries and data requests, contact us at:

privacy@optionalsalad.com

2. Minimum age

DoWeDontWe is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a person under 16 has provided us with personal data, please contact us at privacy@optionalsalad.com and we will delete it promptly.

3. What data we collect

Data you provide

• **Display name** — a name or nickname you choose during onboarding. This does not need to be your real name.
• **Avatar** — an emoji and colour you select. No photos or images are collected.
• **Room content** — URLs and web links you add to shared rooms, along with any text labels you apply.
• **Age verification** — a record that you confirmed you are 16 or older. We do not store your date of birth.

Data we collect automatically

• **Anonymous user ID** — a randomly generated identifier created by Firebase Authentication when you first open the app. No email address or password is required.
• **Device and usage data** — crash reports and anonymised analytics events (such as "room created" or "share tapped") collected via Firebase Crashlytics and Firebase Analytics. This data does not identify you personally.

Data we do not collect

• Email addresses (unless you choose to link an account in a future update)
• Passwords
• Phone numbers
• Location data
• Photos, videos or audio
• Payment information

4. How we use your data

We use the data we collect to:

• Provide the core features of the app — creating rooms, sharing decisions, and collaborating with others
• Display your chosen display name and avatar to other members of rooms you join
• Identify your contributions within a shared room (e.g. which links you added or liked)
• Diagnose crashes and improve app stability via Crashlytics
• Understand how the app is used in aggregate via Analytics, so we can improve it
• Comply with our legal obligations

5. Legal basis for processing (UK & EU users)

We process your personal data on the following legal bases under UK GDPR and EU GDPR:

• **Contract** — processing your display name and room content is necessary to provide the service you signed up for.
• **Legitimate interests** — crash reporting and aggregate analytics help us maintain and improve the app. We have balanced these interests against your privacy rights and determined they are proportionate.
• **Consent** — where we rely on consent, you may withdraw it at any time by deleting your account.

6. How we share your data

We do not sell your personal data. We share data only in the following circumstances:

With other app users

• Your display name and avatar are visible to other members of any room you join.
• Links and content you add to a room are visible to all members of that room.

With service providers

We use the following third-party services to operate the app:

Where data is transferred outside the UK or EU (for example to Google's US servers for Analytics), we rely on Standard Contractual Clauses approved by the UK ICO and European Commission.

Legal requirements

We may disclose data if required to do so by law or in response to valid requests from public authorities.

7. Data retention

• **Active accounts** — your data is retained for as long as your account exists.
• **Deleted accounts** — when you delete your account, your user profile is permanently deleted and you are removed from all rooms. Room content you contributed (links etc.) may remain in shared rooms if other members are still active, as it forms part of a shared collaborative space.
• **Analytics and crash data** — retained for up to 14 months by Google, in accordance with their standard retention policies.

8. Your rights

Under UK GDPR and EU GDPR, you have the following rights:

• **Right of access** — you can request a copy of the personal data we hold about you.
• **Right to rectification** — you can correct your display name and avatar at any time in the app settings.
• **Right to erasure** — you can delete your account and all associated data at any time via Settings → Delete account in the app.
• **Right to restriction** — you can ask us to restrict processing of your data in certain circumstances.
• **Right to data portability** — you can request your data in a machine-readable format.
• **Right to object** — you can object to processing based on legitimate interests.
• **Right to withdraw consent** — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights (other than deletion, which is self-serve in the app), contact us at privacy@optionalsalad.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local EU supervisory authority.

9. Cookies and local storage

The web version of DoWeDontWe uses browser local storage and service workers to cache the app for offline use. These are technical necessities, not tracking cookies. We do not use advertising cookies or third-party tracking pixels.

10. Security

We use Firebase's built-in security features including Firestore security rules, which ensure users can only access rooms they are members of. Data in transit is encrypted via HTTPS/TLS. We do not store passwords as we use anonymous authentication.

11. Changes to this policy

We may update this policy from time to time. We will notify users of significant changes by updating the "Last updated" date above and, where appropriate, displaying a notice in the app. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy questions or data requests:

privacy@optionalsalad.com

For general enquiries:

hello@optionalsalad.com

Optional Salad

United Kingdom