Doma · Legal

Doma Privacy Policy

Effective date: 27 September 2026 · CO DIGIT d.o.o., Zagreb, Croatia

The short version

• We do not collect your data. Codigit runs no server for Doma and never receives your messages, photos, videos, voice recordings or location.
• Content is end-to-end encrypted. It is encrypted on your iPhone before it syncs, with a key that is shared only through the pairing QR code.
• It lives in your own iCloud. The encrypted data syncs through Apple CloudKit in the iCloud account of the two people using the app.
• No accounts, no ads, no tracking. Doma contains no analytics, advertising or third-party tracking code.

1. Who we are

Doma is made by:

• Company: CO DIGIT d.o.o.
• Address: Obrež 20, Zagreb, Croatia
• OIB: 34317148047
• Email: marino@codigit.io

Because Doma sends nothing to us, we do not act as a controller or processor of the content you exchange in the app. If you email us for support, we process your email address and message only to answer you (see section 7).

2. What Doma handles

Doma exists to carry a private conversation between two people. To do that, the app handles the following on your behalf:

Data	Why	Where it is stored
Message text, including edits	Delivering your messages to your partner	Encrypted, in iCloud (CloudKit); a copy on both iPhones
Photos and videos you send	Delivering them to your partner	Encrypted, in iCloud until delivered (see section 5); a copy on both iPhones
Voice messages and their transcripts	Delivering them, and showing a written transcript under the recording	Encrypted, in iCloud until delivered; a copy on both iPhones
Location coordinates	Sending your location once, or sharing it live for up to one hour when you choose to	Encrypted, in iCloud; a copy on both iPhones
Delivered and read markers, message timestamps, record identifiers	Syncing the conversation and showing delivered/read ticks	In iCloud, not end-to-end encrypted by Doma (see section 3)
Reminders and notes you create from messages	Keeping them in the app for you	On your iPhone only
Your partner's name and phone number, if you add them for the Call button	Showing their name and starting a call in the Phone app	On your iPhone only
The conversation key	Encrypting and decrypting your content	In the iOS Keychain on each of the two iPhones, and inside the pairing QR code

3. Encryption and iCloud

When one partner creates "Our home", Doma generates a random encryption key on that iPhone. The key is passed to the other partner only inside the pairing QR code. Every message, photo, video, voice recording, transcript and location is encrypted on the sending iPhone with that key (AES-GCM, using Apple's CryptoKit) before it is uploaded, and decrypted only on the receiving iPhone.

The encrypted data is stored with Apple CloudKit: in the private iCloud database of the partner who created the home, shared with the other partner through iCloud sharing. Apple acts as the storage provider for your iCloud data under the Apple Privacy Policy and the iCloud terms you agreed to with Apple. Apple stores the encrypted content but does not have the Doma key, and neither do we.

Some technical information has to stay readable for syncing to work: when records were created, which message a delivered or read marker belongs to, record identifiers, and the iCloud account identities Apple uses to share the conversation between the two of you. This information is stored in iCloud and protected by Apple's iCloud security, but it is not end-to-end encrypted by Doma.

Anyone who has the pairing QR code can join the conversation, so treat the code (and any screenshot of it) like a key and delete the screenshot once you are paired.

4. Permissions Doma asks for

Doma asks for each permission only when you first use the feature that needs it. You can change any of them later in the iOS Settings app.

• Camera: to scan the pairing QR code and to take photos or videos inside a conversation.
• Photos: to send photos or videos you pick, to read a pairing QR code from a screenshot you pick, and to save photos or videos you capture in Doma to your library. Doma only sees the items you select.
• Microphone: to record voice messages and the sound of videos.
• Speech recognition: to create a written transcript of voice messages. Doma asks iOS to do this on the device whenever your iPhone supports it. If on-device recognition is not available, iOS may send the audio to Apple to be transcribed, under Apple's own privacy terms and your Siri and dictation settings. Doma does not send the audio anywhere else.
• Location (While Using): to send your current location once, when you choose to.
• Location (Always): used only while you are actively sharing your live location, which stops automatically after at most one hour or earlier if you stop it. Doma does not track your location at any other time.
• Calendar: used only when you turn a message into a calendar event, to add that event to the calendar you pick.
• Notifications: to tell you that a new message arrived. The notification only says "New message in Doma" and never shows the content.

Doma does not access your contacts.

5. How long data is kept

• Messages and locations stay until you delete them in the app, disconnect, or delete the data from iCloud.
• Photo, video and voice files are removed from iCloud about seven days after they have been delivered to your partner's iPhone. The copies already on the two iPhones stay until you delete them.
• Live location updates stop after at most one hour.

6. Deleting your data

• Delete a message: delete any message you sent from inside the app.
• Disconnect: either partner can disconnect at any time. If you created the home, disconnecting stops sharing it and your partner loses access. If you joined, disconnecting removes you from the shared conversation. The conversation key is removed from your iPhone.
• Delete the app: removes the messages and files Doma keeps on that iPhone. iOS can keep Keychain items after an app is deleted, so disconnect first if you also want the conversation key removed.
• Remove the iCloud data: open Settings, tap your name, then iCloud, then Manage Account Storage (called Manage Storage on some iOS versions), choose Doma and delete its data.

7. What Codigit receives

Nothing from the app itself. We do not operate servers for Doma and the app contains no analytics, advertising or third-party SDKs. We do not sell, rent or share any data, because we do not have any.

• Crash reports: if Doma crashes, iOS may hand the app a crash diagnostic on the next launch. It is kept on your iPhone and only leaves it if you choose to share it with us.
• Apple's app statistics: if you turned on "Share with App Developers" in iOS settings, Apple may give us anonymised, aggregated crash and usage statistics. That is controlled by Apple and by your settings, not by Doma.
• Support email: if you write to us, we use your email address and message only to reply, and delete the conversation when it is no longer needed, at most two years later.

8. Children

Doma is not directed at children under 13 and we do not knowingly handle their data.

9. Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. Your Doma content is in your own hands and your own iCloud, so you can exercise most of these rights directly as described in section 6. For anything else, or for the support emails we hold, contact marino@codigit.io. We will respond within 30 days. You can also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr).

10. Changes to this policy

If Doma starts handling data differently, we will update this page and the effective date above before the change ships.

Contact

Questions about privacy in Doma: marino@codigit.io. Help with the app: Doma support.