DotGrid · com.dotsetup
Privacy
2026-11-13
What DotSetup handles and where, in short.
Data collected
DotSetup has no account, ads, third-party analytics or trackers, and your archive (screenshots, wallpapers, setups) never leaves the phone. The only data collected: Google Play purchase details and a one-way hash of the device ID (purchases), a notification device ID (update notifications) and an optional supporter name and e-mail. The app also sends an anonymous check-in at most twice a day: the same hash, the app version and the access level. Each is explained below. The free trial and access codes also send that hash to our server; both are explained below. No other data is collected. If you turn on the clock widget’s weather, an approximate location (rounded to about 10 km) is also sent to Open-Meteo; see Widgets.
What stays on your device
Your screenshots, wallpapers, setups and notes stay only on this device, in the app's own storage. Uninstalling the app removes them.
Photos
Images are chosen with Android's system Photo Picker. The app asks for no photo or storage permission and sees only what you pick. When an image is added to the app, EXIF data such as location and device details is removed.
Sharing and backups
Share images and backup files are created only when you ask, and go only to the app or location you choose. That app has its own privacy rules. Make sure your screenshots show no personal information before you share them. Images you save to the gallery stay in your device's Pictures/DOTSETUP folder.
Google Play and purchases
When you download the app from Google Play, download and device details are handled under Google's own privacy policy. Wallpapers, icon packs and widgets unlock with a one-time purchase through Google Play. Payment is handled entirely by Google Play; we never see your payment details. The app learns from Google Play which product you own and keeps that on your device. When you buy, Google Play is given a one-way hash of the device ID as the "obfuscated account ID"; Google uses it only for fraud checks, and neither your device nor its ID can be found from it.
Purchase check
To verify your purchase, the app sends our server (DotGrid's Dot server, hosted on Supabase) the Google Play purchase token, the product, the price you paid and a hash of the device ID. The server checks the purchase with Google and keeps the token and device ID only as keyed hashes (HMAC). This record is kept to handle refunds and to keep a purchase active on one device at a time. When a purchase is new, the developer gets a short sale notice through Telegram with the product, the amount, the Google Play order number and the buyer's country; it contains no name, e-mail or device ID. The order number and country are also kept with the sale record.
Free trial
When you start the 14-day free trial, and when the app later checks it, the app sends our server the hash of the device ID, the action (start or check) and the app version. The server keeps the device ID only as a keyed hash (HMAC), with the trial's start and end dates, and notes the check on this device's last-seen record. The trial record stays after the trial ends and after you delete your data on the server: it is what allows only one free trial per device.
Access codes and gifts
If you enter an access code, or open a supporter gift sent from another Dot app, the app sends our server the code and the hash of the device ID. The server keeps only a hash of the code, the device it was redeemed on (as a keyed hash) and the date, so that a code works on one device only. A supporter gift adds days to your trial and shows the sender's name from the Supporters list.
Anonymous check-in
When you open DotSetup, at most once every 12 hours, the app tells our server that it is in use: it sends only the hash of the device ID, the app version and the access level (free, lifetime or supporter), nothing else. The server keeps these with the dates the device was first and last seen, and the device ID only as a keyed hash (HMAC); the developer uses this only to count how many devices use the app and on which versions. "Delete my data on the server" (in the app under Privacy and on the purchase screen) deletes this record and stops the check-in on this device.
Supporter name and e-mail
If you bought support (Lifetime access + Support, or Become a supporter) you may give a name (up to 24 characters, a nickname is fine) and an e-mail. Both are optional. The name is for the in-app Supporters list: once the developer approves it, it is public there (anyone using DotSetup can see it); with "Show on the list" off it does not show. The e-mail is used only to invite you early to DotGrid's new apps, never for newsletters, ads or anything else; only the developer sees it and it is not shared with anyone. Both are stored on our server with a keyed hash of the purchase token (not the purchase itself or your Google account). Your device keeps only the name you show, not the e-mail. The Supporters list is shared by all four Dot apps (Dotch, DotWatt, DotSetup and Dotype): an approved name appears in each of them, together with which Dot apps that person supports.
Changing and deleting your data
Change your name and e-mail at any time from the "Your name on the list" and "Early access e-mail" rows on the purchase screen, or clear a field and save to remove it. The "Delete my data on the server" button on the same screen deletes your supporter name, e-mail and this device's record on the server at once. If you cannot reach the app, write to orh4nyz@gmail.com and we delete it within 30 days. The purchase check record (a keyed hash) is kept for refunds. The free-trial record and access-code redemptions are kept too, so the trial cannot be started again on this device.
How long data is kept
The check-in record is kept until you turn the check-in off or delete your data on the server. Your supporter name and e-mail are kept until you change or delete them. The purchase check and the sale record (order number, country, amount) are kept as long as needed for refunds, accounting and tax rules. The trial record and code redemptions are kept as long as needed to allow one trial per device and one device per code; they are not deleted when the trial ends. E-mails you send us are kept only as long as needed to answer them. Data we no longer need is deleted.
Update notifications
The app registers with Google's Firebase Cloud Messaging (FCM) so a new version can be announced. For this Google creates a device-specific notification ID (FCM registration token / Firebase installation ID). It stays with Google, is never sent to our server and is used only for update notifications; the notice goes to everyone at once through a topic, never as a personal message. Firebase Analytics is off. The notice shows only while Android allows DotSetup's notifications, and you can turn them off there at any time; Google deletes an unused ID under its own rules. Uninstalling the app also invalidates it.
Missing icon requests
"Request missing icons" reads the list of apps on your phone, on the device only, to find apps without an icon. The list is sent nowhere; it is shared only if you copy and paste it yourself.
Service providers and network
Every connection is encrypted (HTTPS/TLS). Data is never sold, never used for advertising and never shared with anyone else; only Google Play, Firebase Cloud Messaging, Supabase (our server) and Telegram (the developer's sale notices) process it on our behalf. The app has the internet permission; Google Play's billing library, update notifications and the server requests described here use it. If you turn on the clock widget’s weather, Open-Meteo receives an approximate location (rounded to about 10 km) at most once an hour to return the weather.
Children
DotSetup is not directed at children and does not knowingly collect data from them.
Changes
Changes to this policy are published on its web page with a new effective date. Effective: 2026-11-13.
You control permissions
You can revoke any permission in Android settings at any time (usage access is under Special app access); a widget that loses its permission shows a note instead of the data. Update notifications can be switched off in Android's notification settings for DotSetup. Deleting your archive or uninstalling the app does not remove the purchase check record kept for refunds.
Changing and deleting your data