Privacy Policy

Dommi is a members’ House you enter by invitation. This Privacy Policy explains what information we collect through the Dommi mobile application and the website at dommisociety.com (together, the “Service”), how we use it, who we share it with, and the choices and rights you have.

The controller responsible for your information is [PLACEHOLDER: legal entity name], located at [PLACEHOLDER: registered postal address]. If you have any question about this policy or how we handle your information, contact us at [PLACEHOLDER: privacy contact email].

Some of the information you provide to Dommi is, under privacy law, sensitive information. In particular, the role you select, the terms and preferences you record, and the structure of the relationships you seek and agree to may constitute special category data under the EU and UK General Data Protection Regulation, specifically data concerning your sex life or your sexual orientation. For members in California and certain other jurisdictions, this is treated as sensitive personal information.

We collect and process this information only where you have given us your explicit consent to do so, and only to provide the Service to you. You provide that consent within the app before this information is used. You may withdraw your consent at any time (see Section 9), and doing so does not affect the lawfulness of processing carried out before you withdrew it. We aim to store this information in the least identifiable form consistent with operating the Service.

Information you give us

• Account information. The details you provide when you create a membership, such as your email address, sign-in credentials, date of birth or age confirmation, and any profile details.
• Your Declarations. The written statements you author within the Service describing what you offer, what you seek, and what you will not cross.
• Quiz responses. The answers you give to the in-app typology questions used to shape your experience and the defaults in your agreements.
• Media and portrait. Photographs or other media you choose to upload.
• Your role, terms, and preferences. The sensitive information described in Section 2, including the role you select and the terms you record and agree to with other members.
• Communications. The content of messages you exchange through the Service and any correspondence you send to our support team.

The waitlist on this website

If you request an invitation through the form on dommisociety.com, we collect the email address you submit and store it in our database so we can contact you about admission to the House and related updates. You can ask us to remove your email from this list at any time by writing to [PLACEHOLDER: privacy contact email].

Information we collect automatically

When you use the Service, we automatically collect certain device and usage information, such as device model and operating system, app version, language, general location inferred from your IP address, and how you interact with the Service. We use this to operate, secure, and improve the Service.

• To create and administer your membership and authenticate you.
• To operate the core features of the Service: presenting members to one another, supporting Declarations, agreements, and the ongoing practice they become.
• To personalize your experience using your quiz responses and stated preferences.
• To support safety, moderation, and integrity across the House.
• To communicate with you about your membership, respond to your requests, and, where you have asked to join the waitlist, contact you about admission.
• To comply with legal obligations and enforce our Terms of Service.

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Explicit consent for special category data (the sensitive information described in Section 2). You can withdraw this consent at any time.
• Performance of a contract to provide the Service you have signed up for.
• Legitimate interests in securing, maintaining, and improving the Service, where those interests are not overridden by your rights.
• Legal obligation where we are required to process your information to comply with the law.

Dommi uses third-party artificial intelligence and large-language-model services (our “third-party AI processors”) to process content you submit, such as your Declarations and messages. We use these services to help structure and format your content, to power in-app assistance, and to support safety and moderation. Our current provider is [PLACEHOLDER: name of third-party AI provider].

Where a feature sends your content to a third-party AI processor, we ask for your consent before that content leaves the app, and we tell you what will be shared and with whom. These providers act as processors on our behalf and are bound by contract to use your content only to perform the service we have requested, not for their own purposes. We do not use your information to make decisions that produce legal or similarly significant effects about you without a lawful basis and appropriate safeguards.

Our application and website data are hosted on Supabase, our primary data platform and infrastructure provider. Supabase acts as a processor on our behalf and stores your information on secured servers.

We share your information only in these circumstances:

• With other members, to the extent you choose to share it through the Service (for example, your Declaration or the terms of an agreement you enter into).
• With service providers who process information on our behalf, such as our hosting platform, our third-party AI processors, and our payments and analytics providers, under contracts that limit their use of it.
• For legal reasons, where we are required to disclose it by law or to protect the rights, safety, and security of our members and the House.
• In a business transfer, if we are involved in a merger, acquisition, or sale of assets, subject to this policy.

We do not sell your personal information, and we do not share your sensitive information for cross-context behavioral advertising.

We keep your information for as long as your membership is active and for as long afterward as we need it to fulfil the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your membership, we delete or anonymize your personal information within a reasonable period, except where we are required to retain it. Waitlist emails are kept until you ask us to remove them.

Depending on where you live, you have some or all of the following rights over your personal information:

• To access the information we hold about you.
• To correct information that is inaccurate or incomplete.
• To delete your information.
• To receive a copy of your information in a portable format, and to ask us to transfer it where technically feasible.
• To restrict or object to certain processing.
• To withdraw your consent at any time, including your consent to process the sensitive information described in Section 2.

To exercise any of these rights, write to us at [PLACEHOLDER: privacy contact email] or use the account tools within the app. We will respond within the time required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, the California Consumer Privacy Act, as amended, gives you the right to know what personal information we collect, to access and delete it, to correct it, and to limit the use and disclosure of your sensitive personal information. We do not sell your personal information or share it for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights. To make a request, contact us at [PLACEHOLDER: privacy contact email].

We are based in, and process information in, the United States, and your information may be transferred to and processed in countries other than the one you live in. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the Standard Contractual Clauses approved by the relevant authorities.

Dommi is strictly for adults. You must be at least 18 years old to use the Service. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it.

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and data minimization for sensitive information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you through the Service. Your continued use of the Service after an update means you accept the revised policy.

For any question about this policy or your information, contact [PLACEHOLDER: legal entity name] at [PLACEHOLDER: privacy contact email], or by post at [PLACEHOLDER: registered postal address]. You can also reach our team through the Support page.