What we hold, and what we don't.

The short version

Dash is made by Oasis Software. What you write in Dash — your stones, the people you keep, your thoughts, your growth, your birth year — stays on your device unless you sign in. Signing in syncs it securely to your other devices, over servers we operate.

What you write

Everything you enter is stored on your device first, and Dash works with no account at all — no sign-in, nothing sent anywhere. Signing in adds a cloud copy so your entries reach your other devices.

That copy lives in a database we run on Amazon Web Services. It is encrypted in transit and at rest, and the app's authorization rules keep other Dash users out of it. It is not end-to-end encrypted: operating the service means we, and Amazon as the host, can access what is stored.

Deleting an entry removes it from your devices and marks it deleted in sync so your other devices drop it too.

Your account

Signing in takes an email address and nothing else. We send a one-time code to confirm it — there is no password to store, and we don't ask for your name, your phone number, or your contacts. The email address is used to identify your account and to send you that code.

Analytics

The iPhone app sends anonymous usage analytics through PostHog — which screens are opened, which features are used, and errors when something breaks. This never includes anything you write. It tells us that the Growth screen was opened, never what is on it. The website and the web app send no analytics at all.

Who else is involved

• Amazon Web Services — sign-in and the storage your synced entries live in
• PostHog — anonymous usage analytics from the iPhone app
• Apple — distributing the app through the App Store
• Expo — building the app and delivering updates to it

Each has its own privacy practices, and each is worth reading if you'd like to.

Keeping and deleting

We keep what you've written for as long as your account exists. You can delete it yourself in the iPhone app, under Settings → Account → Delete account. That removes your synced entries and the account itself, and takes effect immediately rather than going through us.

If you'd rather ask, or you only use Dash on the web, choose Data Deletion on the contact page and include the email address on the account. We'll process it within 30 days.

You can also ask what we hold about you, ask us to correct it, or ask us to stop sending you anything that isn't essential to the account.

Children

Dash isn't directed at children under 13, and we don't knowingly collect anything from them. If you believe a child has created an account, write to us and we'll remove it.

Changes

If this policy changes, the date at the top changes with it. Anything that meaningfully affects what we collect or who sees it will be said plainly rather than buried.

Asking us anything

Questions about any of this go to hello@oasissoftware.dev, or through the contact page. We answer privacy questions within 30 days, and usually a lot sooner.