doordot

privacy policy

Last updated: February 2026

Introduction

DoorDot ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the DoorDot mobile application or the DoorDot visitor web page — a privacy-first NFC doorbell for iPhone.

Our Privacy Promise

DoorDot is designed with privacy at its core. We do not use cameras, microphones, or any form of audio/video surveillance. No personal information is collected from visitors beyond what they voluntarily provide (an optional note, label, or photo).

Information We Collect

  • iCloud Account Information: Your iCloud user record identifier (an opaque string) is used to associate Dots with your account. We do not access your name, email, or any other personal details from your Apple ID.
  • Dot Data: Names you assign to your doorbells (e.g. "Front Door"), unique tokens, and creation timestamps.
  • Event Data: When a visitor rings your doorbell, an event record is created containing a timestamp, an optional note, an optional visitor label, and an optional photo. Events are linked to Dots by a random token — not by personal identifiers.

Data Storage

  • All data is stored in Apple's CloudKit infrastructure using the public database. Apple manages the security and encryption of this data.
  • A local cache of your Dots and recent events is stored on your device for offline access.
  • When visitors ring your doorbell via the web page, their request is processed by a lightweight server-side API that authenticates with CloudKit on their behalf. This API does not store any data itself — it passes data directly to CloudKit. Visitor-submitted photos are stripped of all metadata (EXIF, GPS, ICC profiles) on the server before being stored, to protect visitor privacy.
  • Uninstalling the app removes all locally cached data. CloudKit records persist until you delete them through the app.

Push Notifications

  • Push notifications are delivered through Apple's CloudKit subscription system. When a visitor creates an event, CloudKit automatically sends you a push notification.
  • No third-party push notification services are used.
  • You can disable notifications at any time through iOS Settings.

NFC and QR Codes

  • DoorDot reads NFC tags containing URL records and can write your doorbell's deep link URL to blank NFC tags. When locked, written tags become permanently read-only to prevent tampering. No tracking data is stored on NFC tags.
  • QR codes are generated locally on your device and contain only the doorbell's deep link URL.

Third-Party Services

  • Apple CloudKit: Used for data storage and push notifications. Subject to Apple's privacy policy.
  • Apple App Store: Payment processing for subscriptions is handled securely by Apple. Subscription status and purchase history are managed through Apple.
  • Sign in with Apple / Google Sign-In: Used for account authentication. We receive only an opaque user identifier and, if you choose to share it, your name and email. We do not access your password or other account details.
  • No analytics, advertising, or tracking SDKs are included in the app.

Your Rights

  • You can delete individual Dots and their associated notification subscriptions at any time through the Settings screen.
  • You can clear all locally cached data through the Settings screen.
  • You can rotate tokens to invalidate existing NFC tags and QR codes (Premium feature).
  • Uninstalling the app removes all local data.

Visitor Privacy

When a visitor rings a DoorDot doorbell via the web page, the following data may be submitted voluntarily:

  • An optional name or label (e.g. "Delivery")
  • An optional text note
  • An optional photo

We do not collect visitor IP addresses, device fingerprints, cookies, or any form of tracking data. Photos are automatically stripped of all metadata (EXIF, GPS location, camera info) before storage. Visitor data is stored in CloudKit and is accessible only to the doorbell owner.

Children's Privacy

DoorDot does not knowingly collect personal information from children under 13. The app does not require account creation and collects minimal data as described above.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

support@hatchingpoint.com