Privacy Policy – DOOEET

Preamble

It is hereby specified that this "Privacy Policy" forms a single contractual whole with the two other documents specifying the "General Terms of Sale" and the "General Terms of Use" that Users are invited to read in their entirety[cite: 3].

1. Legal notices and data controller

This Privacy Policy describes the manner in which the company Barexys SASU (hereinafter "Barexys" or "we"), publisher of the mobile application DOOEET, collects, uses, and protects the personal data of users[cite: 3].

Barexys undertakes to respect the principles of lawfulness, fairness and transparency, minimization, and data security in compliance with the General Data Protection Regulation (GDPR) and the "Informatique et Libertés" law[cite: 3].

Barexys SASU
200 Rue de la Croix Nivert, 75015 Paris – France
SIREN: 992 464 891
TVA: FR55992464891
Contact: contact@dooeet.com

DOOEET is a personal assistant mobile application, acting as an external memory to capture and retrieve private micro-tasks contextually[cite: 3]. The application is available on Android and iOS[cite: 3].

2. Data collected

When using DOOEET, we collect only the data strictly necessary for the operation of the service[cite: 3]:

• Email address (and its cryptographic footprint – hash)[cite: 3].
• Device identifier (deviceID) randomly generated and used for the technical management of sessions[cite: 3].
• Profile information: nickname and profile picture (optional)[cite: 3].
• Contents of captured tasks: voice dictations (textually transcribed), titles, dates, time slots, and routine data[cite: 3]. These are exclusively private micro-tasks[cite: 3].
• Connection and usage data necessary for the security and stability of the application[cite: 3].

There is no public data shared among all users on this platform[cite: 3]. The only information shared is done so on a strictly private and explicit basis between two users who have consented to link their accounts (via the pairing functionality by OTP code)[cite: 3].

Furthermore, DOOEET does not collect or store any financial data: all transactions and subscriptions are processed securely and exclusively by the Apple App Store and Google Play Store application stores[cite: 3].

3. Purposes of processing

Data is processed for the following purposes[cite: 3]:

• Creation and management of user accounts[cite: 3].
• Parsing by artificial intelligence (Gemini) of transmitted voice dictations to extract the action, timing, and context in order to automatically structure your tasks[cite: 3].
• Private transmission of micro-tasks between two users who have voluntarily linked their accounts via OTP code[cite: 3].
• Operation of proactive reminders and notification routines[cite: 3].
• Service improvement and customer assistance[cite: 3].
• Compliance with applicable legal obligations[cite: 3].

Data processing is based on the performance of a contract (Article 6(1)(b) of the GDPR) and on the legitimate interest of Barexys in ensuring the security and proper functioning of the service (Article 6(1)(f))[cite: 3].

4. Data security and encryption

All sensitive content related to user tasks (task texts, dates, schedules, etc.) is encrypted using the AES security algorithm in CBC mode with PKCS7 padding[cite: 3]. Only the user's nickname is stored in clear text for technical display and account linking needs[cite: 3].

Tasks do not include any associated image (the only image potentially provided by the user being their profile picture)[cite: 3].

Encrypted content can only be decrypted by the user themselves, by the second explicitly linked user in the case of using the OTP functionality, or by authorized DOOEET administrators for strict maintenance or technical assistance needs[cite: 3]. Access to this data is drastically restricted[cite: 3].

The data is hosted with top-tier cloud technical service providers (Firebase / Google Cloud) adhering to rigorous security standards and compliant with the GDPR[cite: 3].

5. Data sharing and recipients

Barexys does not resell, rent, or transfer any personal data or task content to third parties[cite: 3]. Certain data is exclusively transmitted to trusted technical service providers (notably Google Firebase for the backend infrastructure and the Gemini API for the AI parsing of the voice dictation) acting as processors in strict compliance with the GDPR[cite: 3].

Apart from these technical necessities, data can only be communicated to competent judicial or administrative authorities, upon legal and reasoned request[cite: 3].

6. Retention period

Data is retained only for the duration necessary to achieve the purposes set out above[cite: 3]. In the event of an account deletion request by the user from within the application, all of their profile data, encrypted micro-task histories, and routine configurations are permanently and immediately deleted from our production servers[cite: 3].

7. Rights of users

In accordance with the General Data Protection Regulation (GDPR) and the "Informatique et Libertés" law, every user has the following rights[cite: 3]:

• Right of access: the user can consult all of their tasks and profile information at any time directly from the application interface[cite: 3].
• Right to rectification: correct or modify their tasks or profile data at any time[cite: 3].
• Right to erasure: request the permanent deletion of their account and all of their data directly from the application settings[cite: 3].
• Right to restriction of or objection to processing: the user can choose at any time to stop the processing of their data by ceasing to use the application or by deleting their account[cite: 3].
• Right to data portability: DOOEET does not offer a standardized external automated file export (e.g., JSON or XML)[cite: 3]. The data remains encrypted within the infrastructure for security reasons, but the user retains total control over its deletion[cite: 3].

For any request related to the exercise of these rights, the user can contact support at the address: support@dooeet.com[cite: 3].

8. Cookies, trackers and analysis tools

DOOEET uses standard tracking technologies and device identifiers (notably via Firebase Analytics) for the sole purpose of analyzing the general use of the application, measuring the stability of features (crash tracking), and optimizing the user experience[cite: 3].

These tools measure activity on an aggregated and anonymous basis (screens viewed, session duration, type of operating system)[cite: 3]. No data from these trackers is collected or used for advertising, commercial, or undesirable marketing profiling purposes[cite: 3]. The user consents to the use of these essential technical trackers by using the application, and can delete them at any time by uninstalling DOOEET[cite: 3].

9. Complaints and CNIL contact

In the event of a question or complaint, the user can contact: support@dooeet.com[cite: 3]. The user retains the right to formally lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) if they believe their rights are not being respected[cite: 3].

10. Updates to the policy

This Privacy Policy may be updated at any time to reflect changes in services, technologies, or regulations[cite: 3]. Users will be informed of any substantial modification directly through the application[cite: 3].

Done for Barexys (SASU) — DOOEET

Last updated: July 2026