Do With Me Privacy Policy

Last updated: September 16, 2026

Overview

Do With Me is an iOS app developed by PRPL Solutions Inc., a company incorporated in Alberta, Canada. It lets you hold a habit with somebody else: a shared task, a check-in from each of you, and a streak that only counts while everyone keeps it. Because it is shared, it needs an account and a server, and this policy describes exactly what that server holds.

Your Phone Number

You can sign in with Apple or with your phone number. If you choose the number, the app asks for it on the second screen of sign-up, under the line “We will send an SMS code to this number for verification. Message and data rates may apply.” Entering your own number and tapping Continue is what asks us to send that message. Nothing is sent before it.

Your device converts the number to its standard international form and hashes it with SHA-256. Only the hash is stored. The digits themselves exist on our server in memory only, for as long as it takes to hand the message to our messaging provider, and are never written to a database or a log. The code you are sent is stored hashed as well, and is deleted the moment it is used, expires after ten minutes, or is guessed wrong five times.

SMS Messages

The only text message Do With Me sends is a verification code you asked for. It reads “Your Do With Me OTP verification code is: 123456. This code expires in 10 minutes. Sent by Notify.” and contains no links. There is no marketing, no newsletter and no promotional messaging of any kind, and we do not sell, rent or share phone numbers with anyone for marketing.

One message is sent per request, another cannot be requested within a minute of the last, and most accounts receive exactly one message ever. Messages are delivered through AWS End User Messaging, operated by Amazon Web Services, which processes the number solely to deliver the message and sends it on a template approved for verification codes.

Text HELP for help. Text STOP to cancel. Because every code is one you asked for by typing your number into the app, there is no mailing list to leave either: stop asking and nothing is sent. If codes are arriving at a number that is not yours, write to hello@prplsolutions.com and we will look into it. Message and data rates may apply.

  • No mobile numbers will be shared with third parties or affiliates for marketing or promotional purposes.
  • Text messaging originator opt-in data and consent will not be shared with any third parties.
  • Messages are delivered through AWS Notify. AWS does not share end user phone numbers with third parties for marketing or promotional purposes.

Our terms of service set out the messaging terms in full.

Contacts

Importing contacts is optional and asked for on the screen where it pays off. If you allow it, your device hashes each contact's phone number the same way it hashed yours and sends only the hashes, so it can tell you which of the people you know already have an account. Names and phone numbers never leave your phone. The matching endpoint accepts nothing but hashes, and answers with accounts rather than numbers. Declining costs you nothing but having to type a number to invite somebody.

What the Server Holds

  • The display name you chose, which is what everybody you invite reads
  • The SHA-256 hash of your phone number, if you gave one
  • Apple's opaque identifier for you, if you signed in with Apple. We never receive your Apple password, and if you chose to hide your email we never see the real one
  • Your tasks, who is in them, the check-ins made against them, and the streak each one carries
  • Your device's push token and which of the four kinds of notification you want, so a reminder or a nudge can reach you

Everyone in a task can see who else is in it, whether they have checked in for the window that is running, and the history of that task. Nothing about your other tasks is visible to them.

What We Do Not Do

  • No third-party analytics or tracking SDKs
  • No advertising, and no advertising identifiers
  • No selling or sharing of personal data with third parties
  • No storing of raw phone numbers or contact names
  • No reading of your contacts without the system permission

Notifications

Push notifications are optional and delivered by Apple Push Notification service. They cover a window closing, somebody nudging you, somebody joining a task, and a streak breaking. Settings inside the app turns any kind of them off, and refusing the permission outright leaves everything else working.

Deleting Your Account

Settings inside the app deletes your account. Your user row, your device tokens, your memberships and your check-ins go with it. Tasks you shared with other people carry on for them, without you counted in the window. You can also write to hello@prplsolutions.com and ask us to do it.

Where Data Is Held

Do With Me is operated from Calgary, Alberta by PRPL Solutions Inc. The service, its database and our messaging provider all run on cloud infrastructure in the United States, so your data is stored and processed outside Canada. Push notifications are delivered by Apple.

Children's Privacy

Do With Me is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, write to us and we will delete it.

Changes to This Policy

If we ever change this privacy policy, we will update this page with the new effective date. We encourage you to review this page periodically.

Contact

If you have any questions about this privacy policy, please contact us:

PRPL Solutions Inc.
Calgary, Alberta, Canada
hello@prplsolutions.com