How we collect, use, and protect your personal data — in plain language.
Hi! This is a short summary for easy orientation. The full text below is legally binding.
DobrOS is a mental wellbeing application currently operated by Ing. Alexander Frič (OSVČ — Czech sole trader, IČO: 05939470), based in Praha, Czech Republic ("DobrOS", "we", "us", "our"). If the operator of the application changes in the future, we will inform you in advance within the application.
Data Controller:
Ing. Alexander Frič (OSVČ)
IČO: 05939470
Praha, Czech Republic
Email: privacy@dobros.cloud
As the data controller, we are responsible for deciding how and why your personal data is processed. If you have any questions about this Privacy Policy or our data practices, please contact us at the email above.
The supervisory authority for data protection in the Czech Republic is the Úřad pro ochranu osobních údajů (ÚOOÚ), which you may contact at www.uoou.cz if you have concerns about how we handle your data.
We collect only the data that is necessary to provide and improve the DobrOS service. Here is a complete breakdown:
| Data | Source | Purpose |
|---|---|---|
| Name | Google / Apple Sign-In | Personalizing your experience |
| Email address | Google / Apple Sign-In | Account identification, communication |
| User ID | Generated at registration | Account management |
| Registration date | System | Account management |
| Data | Source | Purpose |
|---|---|---|
| Habits (names, frequencies, completion) | You enter it | Habit tracking, streak calculation |
| Journal entries | You write it | Reflective journaling feature |
| Mood logs | You submit it | Mood tracking, insights |
| Mind game scores | App generated | Brain Profile calculation |
| Deep Work sessions | App generated | Productivity tracking |
| OKR / Goal data | You enter it | Goal management |
| Course progress | App generated | Learning feature |
| XP, levels, badges | App generated | Gamification, motivation |
| Data | Source | Purpose |
|---|---|---|
| Device type and OS version | Your device | App compatibility, bug fixing |
| App version | App | Version management |
| Crash logs and error reports | Firebase Crashlytics | Stability improvements |
| App usage events | Firebase Analytics | Feature improvement, understanding usage patterns |
| Push notification tokens | Firebase Messaging | Sending notifications you've enabled |
Mood entries and journal text can reveal information about your mental state. We therefore treat them as special category data under Article 9 GDPR. The basic legal basis under Article 6 GDPR is performance of contract (providing the app features); we process this special category of data only on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give at sign-up and can withdraw at any time.
Under Czech Act No. 110/2019 Coll., § 7, the digital age of consent in the Czech Republic is 15 years. Users aged 15-17 in the Czech Republic can therefore provide their own explicit consent to the processing of special-category data. In countries where local law requires a higher age for independent consent, that higher age applies. For users below the applicable age threshold, parental consent under Art. 8 and Art. 9 GDPR is required.
We use your data only for the purposes described below. We never sell your data to third parties. We do not use your data for advertising targeting.
Under GDPR, we must have a valid legal basis for each type of data processing. Here is ours:
| Processing Activity | Legal Basis |
|---|---|
| Creating and maintaining your account | Performance of a contract (Art. 6(1)(b)) |
| Storing your habits, journal, mood, and app data | Performance of a contract (Art. 6(1)(b)) |
| Mood entries and journal text (special category) | Performance of contract (Art. 6(1)(b)) + explicit consent (Art. 9(2)(a)) — consent withdrawable anytime in settings |
| Sending push notifications you have enabled | Consent (Art. 6(1)(a)) — withdrawable anytime in settings |
| Analytics and app improvement | Legitimate interests (Art. 6(1)(f)) — we balance this against your rights |
| Crash reporting and security | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
We keep your data for as long as your account is active or as long as necessary to provide the service. Here are the specific retention periods:
| Data Type | Retention Period |
|---|---|
| Account data and app content (habits, journals, etc.) | Until you delete your account |
| Analytics and usage events | 14 months (Firebase default, then automatically deleted) |
| Crash logs | 90 days |
| Support correspondence | 3 years from last contact |
| Financial records (if applicable) | 10 years (Czech accounting law requirement) |
| Data after account deletion | Deleted within 30 days of account deletion request |
When you delete your account, all personal data is permanently deleted from our systems within 30 days, except for data we are required to retain by law (such as financial records).
We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We use the following service providers who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase | Database, authentication, analytics, crash reporting, notifications | EU (europe-west3, Frankfurt, Germany) |
| Google LLC | Sign-in via Google | USA (EU Standard Contractual Clauses apply) |
| Apple Inc. | Sign-in via Apple, iOS platform | USA (EU Standard Contractual Clauses apply) |
All data stored on Firebase is kept within the EU (Frankfurt, Germany data center). Where processing occurs outside the EU (e.g., authentication infrastructure), we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection.
We may also disclose your data if required by law, court order, or to protect the rights, property, or safety of DobrOS, our users, or the public.
Under GDPR, you have the following rights regarding your personal data. You can exercise all of them by contacting us at privacy@dobros.cloud. We will respond within 30 days.
In line with Czech Act No. 110/2019 Coll., § 7, the minimum age for independent use of the app in the Czech Republic is 15 years. In countries where local law requires a higher age for independent consent, that higher age applies.
If we learn that someone below the applicable age threshold has signed up independently without parental consent, we delete the account without undue delay. If you believe a child has signed up in this way, please contact privacy@dobros.cloud.
DobrOS provides wellbeing education, self-reflection tools, and brain training. It is not a medical device, medical advice, diagnosis, therapy, or treatment, and it does not replace professional care by a physician, psychologist, or psychotherapist.
The data you keep in the app is not a medical record, is not a professional opinion, and cannot be used as medical evidence. If you are experiencing difficult mental states, please consult a physician, psychologist, or a crisis helpline.
Crisis lines (Czech Republic, all free and available 24/7):
Outside the Czech Republic please contact your national crisis helpline or call your local emergency number.
We take the security of your data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, loss, destruction, or alteration.
Despite these measures, no system is 100% secure. If a personal-data breach occurs, we assess the risk, document the incident, and where required by Art. 33 GDPR notify the Czech Data Protection Authority (ÚOOÚ) normally within 72 hours after becoming aware of it. If the breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay (Art. 34 GDPR).
The DobrOS mobile app does not use browser cookies. We use Firebase Analytics to collect anonymized, aggregated data about how the app is used. This data does not identify you individually and is used solely for app improvement.
The DobrOS website (dobros.cloud) may use essential cookies required for its operation. We do not use advertising cookies or third-party tracking cookies. If you access DobrOS as a Progressive Web App (PWA), the same principles apply.
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you in the app and update the "Last Updated" date at the top of this page.
For material changes that affect how we use your personal data, we will seek your renewed consent where required by law. Continued use of the app after notification of changes constitutes your acceptance of the updated policy, to the extent permitted by law.
We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Ing. Alexander Frič (sole proprietor / OSVČ)
Company ID (IČO): 05939470
Registered office: Praha, Czech Republic
Data protection contact: privacy@dobros.cloud
Legal questions: legal@dobros.cloud
Website: dobros.cloud
If the operator of the application changes in the future, we will inform you in advance within the application.
We aim to respond to all requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Úřad pro ochranu osobních údajů (ÚOOÚ):
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
www.uoou.cz
We're here to help. Reach out anytime — we respond within 30 days.