Privacy Policy
Last updated 12 October 2026
1. In short
Dobry records attendance. We collect only what that needs, we do not sell it, we do not show adverts, and we do not use it for anything except running Dobry for the organisation that collected it.
2. Who is responsible
Dobry is based in Malaysia.
For attendance records, the lecturer, trainer or employer who uses Dobry decides what is collected and why. They are responsible for those records; we look after them on their behalf. If you are a student, participant or staff member with a question about your attendance record, please ask them first.
For account details of the people who log in to Dobry (lecturers, trainers, managers), we are responsible.
3. What we collect
From people who log in (lecturers, trainers, managers and admins):
- name and email address;
- the organisation’s name;
- the classes, lists, sessions and settings they create;
- a record of payments, if they pay. Card details go straight to Stripe; we never see or store them.
From people who check in or clock in (students, participants, staff):
- the name and ID they type, or that is on the list their lecturer or employer uploaded;
- the date and time of the scan, and whether it was by QR or added by hand;
- a random label for the phone, used to notice one phone checking in for several people. It does not identify the phone’s owner to anyone else;
- their location at the moment of the scan, only if the organiser has switched the location check on, and only after the phone asks for permission;
- a document such as a medical certificate, only if the organiser asks for one and it is uploaded.
People who check in do not need an account, and we do not ask for their email or phone number.
4. What we use it for
- to record attendance and show it to the organiser who collected it;
- to make their lists, reports, letters and exports;
- to run accounts, plans and payments;
- to send a few emails about the account, such as a welcome, a trial ending or a failed payment;
- to keep the service safe and working, and to stop misuse.
We do not use this information for advertising, and we do not sell or rent it to anyone.
5. Who else handles it
We use a small number of companies to run Dobry. They may only handle the information to provide their service to us:
- Google (Firebase): sign-in and the database. The database is kept in Singapore.
- Vercel: hosting the website and the app.
- Stripe: payments.
- Resend: sending account emails.
We may also share information if the law requires it.
6. How long we keep it
Records are kept for as long as the organiser’s account is open, because attendance records are often needed for a whole course or a whole year of work.
When an account is closed, or when the organiser asks, we delete its records within 30 days, except what the law requires us to keep, such as payment records.
7. Your choices
You can ask to see, correct or delete information about you.
- If you log in to Dobry: change your name on your Account page, or write to us.
- If you checked in to someone’s class or workplace: ask that organiser, since the record is theirs. If they do not help, write to us and we will pass it on.
You can refuse the location permission on your phone. The organiser decides whether a check-in without it is accepted.
8. Cookies and your device
Dobry does not use advertising or tracking cookies. It keeps a few things on your device so it works: that you are logged in, your language, and small preferences. Installing Dobry on your home screen keeps a copy of the app on the device so it opens quickly.
9. Keeping it safe
Each organisation’s records are kept apart, and access rules decide what each person can see. An attendance time cannot be changed by the person who checked in, and anything added by hand is labelled. All traffic is encrypted.
No service is perfectly safe. If something happens that puts your information at risk, we will tell the organisations affected without delay.
10. Children
Dobry is made for universities, training providers and workplaces. It is not meant for children under 13, and should not be used to record them without the consent the law requires.
11. Changes
If we change this policy in a way that matters, we will say so in the app or by email before the change applies.
12. Contact
Questions or requests about your information: hello@dobry.app.