Effective Date: October 13, 2026 | Version: 2.0

1. Zero-Knowledge Encryption & Data Collection

SegunDOko is an offline-first productivity ecosystem. We collect only the minimum necessary information to authenticate your session via Google One-Tap (your email address and basic profile). All highly sensitive data—specifically your Journal contents, Note contents, Task titles and links, Tracker row data, and Connection Hub URLs—is strictly End-to-End Encrypted (AES-256) locally on your device.

By default, the encryption key is derived securely from your Google ID. You may optionally opt-in to Passphrase Protection for absolute security. The developers of SegunDOko have absolute zero access to your data, your encryption keys, or your Google Drive contents.

2. Unencrypted Metadata

To allow the application to organize, sort, filter, and schedule your workspace efficiently without decrypting your entire database, certain metadata is intentionally NOT encrypted. This includes: Dates and times, Task statuses and priorities, Tracker column names, Connection Hub categories, and Music playlist metadata (titles, artist names, and YouTube/Spotify IDs). Do not put sensitive personal information in these specific fields.

3. Third-Party Services & Integrations

SegunDOko relies on several external services to function:

• Google APIs: Used for authentication and synchronizing your encrypted backup file (segundoko_backup.json) to your personal Google Drive. Your OAuth token is stored strictly locally on your device.
• Vercel: Provides hosting and collects anonymous, aggregated analytics regarding page views and web performance.
• YouTube & Spotify: Embedded iframes are used to play music. These services may collect usage data according to their own privacy policies.
• Tesseract.js: OCR language models are downloaded to your device upon your first scan, but image processing happens 100% offline.
• Other APIs: We fetch randomized quotes via DummyJSON and typography from Google Fonts.

4. Voice Dictation & Local Processing

Our AI Assistant (Mascot) and OCR Image Scanner run 100% locally on your device. No LLM queries or image files are ever sent to an external server. However, our Voice Dictation feature relies on the Web Speech API. Audio captured during dictation is sent to your browser vendor's servers (e.g., Google or Apple) for transcription, governed by their respective privacy policies.

5. Data Retention, Deletion & Account Transfers

Your data is retained entirely within your local IndexedDB and your personal Google Drive indefinitely until you delete it. Important Disclosures:

• If you initiate an Account Transfer, the generated file is completely unencrypted. Anyone with access to this file can read your data.
• Using the Delete Account feature in the app will wipe your local database and revoke access, but it does not delete the backup file in your Google Drive. You must delete that file manually.

6. User Rights (RA 10173) & Children's Privacy

Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you have the right to be informed, access, object, erase, or rectify your personal data. Because SegunDOko operates locally and we do not store your data on our servers, you exercise these rights directly by managing your local storage and Google Drive. Furthermore, this service is not directed at children under 13.

7. Changes to this Policy

We may update this policy periodically. Continued use of SegunDOko after updates constitutes acceptance of the revised policy.

8. Contact Information

If you have any questions or concerns regarding this policy, please contact the developer at regioroland011@gmail.com.