1. Who we are
Doni is a WhatsApp-based service in Nigeria that makes documents, pictures, videos, reminders and records from the messages you send. It is published and operated by S & CO. TECH PARTNERS LIMITED, Lagos, Nigeria ("we", "us"). Contact: wa.me/2349153264893, the feedback form on getdoni.com/about, or email (privacy email address being set up; please use WhatsApp or the form until it appears here).
2. What we keep, why, and for how long
| Data | Why | How it is stored | How long |
|---|---|---|---|
| Your WhatsApp number (or a random browser id for guests on this site) | To know whose messages and reminders are whose | On our server | While you use Doni |
| Messages you send and Doni's replies (chat history) | So Doni remembers your tasks, reminders and preferences | On our server. Replies that contain Gmail or Google Calendar content are stored only as the line "Google mail/calendar reply: content not stored" | Until you say delete my data |
| Tasks, reminders, notes and a short memory summary | To remind you and keep context | On our server | Until done, deleted, or delete my data |
| Files Doni makes for you and files you upload | So you can find them again | On our server | 30 days, or sooner with delete my data |
| Token balance, top-ups and payment records | Accounting and preventing abuse of free tokens | On our server; no message content | Kept even after delete my data |
| Usage and cost logs (which feature, which provider, what it cost) | Keeping the free tier honest | On our server; no message content | Kept for accounting |
| Google refresh token | To read mail or calendar when you ask | Encrypted with AES-256-GCM; short-lived access tokens are kept in memory only | Until you say disconnect google or delete my data |
| Your last inbox list (sender, subject, a one-line preview) and an email draft you are working on | So "read 2", "reply 2" and "send" work | Encrypted with AES-256-GCM | Treated as expired after 30 minutes (list) and 15 minutes (draft); cleared on disconnect |
| Email bodies | To write the summary or reply you asked for | In memory for that one request only; never written to disk | Not kept |
| Calendar event titles and times | To show your day and, only if you switch it on, to remind you | Read when you ask. If you say calendar reminders on, events in the next 48 hours become reminders on our server | Until the reminder is done, you say calendar reminders off or disconnect google, or delete my data |
| Daily server backup | Recovery if the server fails | Encrypted disk on our hosting provider; contains the data above in the same form (Google content is already sealed or absent) | The last 14 days, then overwritten |
We do not read your other WhatsApp chats, groups or contacts. WhatsApp only delivers to us the messages you address to Doni's number. There are no advertising trackers on this site.
3. If you connect Google (Gmail and Calendar)
This is optional. It happens only when you say "connect gmail" or "connect calendar" to Doni, open the link, check that the page shows your own number, and approve on Google's own page. Doni asks only for what that feature needs, and asks again later if you start using the other one:
gmail.readonly: to list your unread mail and read a message when you ask for it.gmail.send: to send an email only after you have seen the draft and replied "send".calendar.events.owned: to show your day, add an event when you ask, and (only if you switch it on) remind you before events. It covers only calendars you own.userinfo.email: to show you which Google account is connected.
How we handle Google data:
- Doni reads your mailbox and calendar only when you ask, plus two things that only show counts: the morning brief line ("3 unread, 2 on your calendar today") and, if you switch them on, calendar reminders.
- AI provider. When a summary or a draft needs an AI model, the text needed for that one request is sent to OpenAI through its paid API, and to no other AI provider. Google data never goes to the free AI providers Doni uses for other features, and is never machine-translated.
- No training. We do not use Google user data to train or improve any AI or machine-learning model, ours or anyone else's. OpenAI does not use data sent through its API to train its models.
- Google content is not written into your chat history, our admin chat viewer, or our logs; those keep only a placeholder line.
- Doni never deletes emails, never reads mail you did not ask about, and never sends without your explicit "send".
- Say disconnect google at any time: we revoke access with Google and delete the token, your inbox state and any reminders made from your calendar. You can also remove Doni at myaccount.google.com/permissions.
Google API Services User Data Policy. Doni's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features you asked for, is transferred only to OpenAI and only as needed to provide those features, is never used for advertising, is never sold, is never used to train AI models, and is never read by a human except with your permission, for security purposes, or where required by law.
4. Who else sees your data
- Meta / WhatsApp carries your messages to and from Doni under WhatsApp's own terms.
- AI model providers (for text, images, video and speech) receive only the specific content needed for a request. For Google data that is OpenAI only, as above. For everything else we route by task across several providers; accounts without tokens are served by free providers, whose terms may let them keep or learn from what they receive.
- Hosting: our server is at Vultr and is accessible only to the operator.
- We do not sell personal data and we do not share it with advertisers or data brokers.
5. How to delete your data
- Send delete my data to Doni, then reply DELETE to confirm. Doni immediately erases your chat history, tasks and reminders, memory and notes, files it made and files you uploaded, your web logins, and your Google connection (revoked on Google's side too). Your token balance and payment records stay for accounting. Copies in the daily backup are overwritten within 14 days.
- To remove only Google, send disconnect google.
- If you can no longer reach Doni on WhatsApp, use the feedback form and we will do it for you.
6. Your rights
You can ask us at any time to see what we hold about you, correct it, or delete it. Message Doni or use the feedback form. Nigerian users are covered by the Nigeria Data Protection Act 2023; we honour those rights for everyone.
7. Children
Doni is a business tool for adults (18+). We do not knowingly collect data from children.
8. Changes
If this policy changes in a way that matters, Doni will tell you in the chat before the change applies. The date at the top is always the current version.