Privacy policy
DorjeMala · a mantra counter for Buddhist practice · 5 November 2026
What the app keeps
Your practice: your mantras (name, text, goal, mala size, the stone and picture you chose), how many times you recited each one and on which days, your retreats, and the app's settings (language, theme, vibration, reminders). If you add a photo of your own to a mantra, the app keeps that photo too.
Records of practice speak of your faith. The European data protection rules (GDPR) count such data as a special category. The app keeps it only to show it back to you, and does nothing else with it.
Where it is kept
On your phone, and a copy in a Firebase database (a Google service) on servers in Europe. Photos of your own are kept in Firebase Storage, next to it.
- Without signing in. When you start, the app creates an anonymous account for you: no name, no email, only a random id. Your practice is kept under it. Nobody can link it to you, and you cannot reach it from another phone either: if the app is removed or the phone is lost, this practice cannot be brought back.
- Signed in with Google. From Google the app receives your name, email address, profile picture and account id, the list Google shows on its sign-in screen. The app uses the name and email only to show in Settings who is signed in, and the id to find your practice. It has no access to the rest of your Google data. Your practice then comes back on any phone where you sign in with the same Google account.
Only you can read and change your practice. The app's author also has technical access to the database, but does not look at or use your data, except to fix a fault at your request. Your data is not sold or passed to anyone; there are no ads and no analytics.
Reminders and vibration
Reminders of special days are set on the phone itself, and vibration is the phone's own. Neither sends anything anywhere.
What Google sees
Whenever the app talks to Firebase (to keep your practice, or when you sign in), Google sees your IP address and device details, as any server does. Firebase keeps the IP addresses logged at sign-in for a few weeks, for security and to prevent abuse. Installs and updates are handled by Google Play under Google's policy; Play shows the author only overall numbers, such as how many installs and crashes, with nothing about you. More in the policies of Google and Firebase. This page itself is served by Cloudflare.
How long data is kept, and deleting it
- Your practice is kept for as long as you have the account.
- Settings → Account → “Delete account” (signed in with Google) or “Delete all data” (without signing in): your practice, your photos and the account are deleted from the cloud and from the phone at once. Google removes them from its backup systems within 180 days.
- If the app is no longer on your phone, write to support@dharmaapps.org from the Google address you signed in with, and the account will be deleted together with your practice. Practice kept without signing in cannot be found by anyone, so it can be deleted only from the app.
Your rights
- To get a copy of your data, or to have it corrected or deleted: write to the address below.
- To withdraw your consent: delete the account, as above.
- To complain to the data protection authority of your country.
Who is responsible for your data
Yurii Titulov, the app's author
Questions about your data, or a request to correct or delete it: support@dharmaapps.org
Changes
- 5 November 2026 — first version.