Privacy policy
Effective: 12 November 2026
DoomsHuman is a free thinking gym. You write first. This page says what we keep, why, and who else gets to see it.
1. Who runs this
DoomsHuman is an experimental personal project run by Hiren Akbari, from India.
- Address: 34, 1st Floor, Kailashdham Soc., Near Gajera Circle, Katargam, Surat, Gujarat 395004
- Contact: support@doomshuman.com
- Grievance officer: Hiren Akbari, support@doomshuman.com
It is free. There is no payment, no paid plan and no ads.
2. Who can use it
You must be 18 or older. We do not offer accounts to anyone under 18. If you think someone under 18 has made an account, write to support@doomshuman.com and we will delete it.
3. What we collect
| Data | Why | Where it is kept | Who else receives it |
|---|---|---|---|
| Name, email, password (stored as a hash, not as plain text) | To make your account and sign you in | Our database on our hosting provider's servers (GoDaddy) | Nobody. Your name is shown to other members if you post on the wall or make your profile public |
| Google account ID, name and email, if you use Sign in with Google | To sign you in without a password | Our database | Google already has them. We ask Google only for your basic profile and email |
| Age (kept as a birth year) and profession, if you give them | So DoomsAI writes at your level | Our database | Google's Gemini API, as an approximate age and the profession text, when you press a DoomsAI button. Never shown on a profile |
| The minutes you said you scroll per day (intro) | To show you the number as days per year | Our database | Nobody |
| What you write: topics, descriptions, bullets, notes, reflections, quick captures, saved links, people and conversations you log, recall answers, field logs | It is the product | Our database | Other members: nothing. Google's Gemini API: only the parts listed in section 4, only when you press a DoomsAI button |
| Photos you upload: topic covers, field proof, avatar, wall photos | To show them back to you (wall photos and avatars: to members) | A file folder on our server. Each file has a long random name and opens by direct link | Nobody is sent them. Anyone who has the exact link can open the file |
| Dives, recall questions and field ideas DoomsAI wrote for you | To show them and schedule recalls | Our database | Nobody |
| Usage records: thinking time per day and topic, XP, streak, wall reading time per day, count and time of DoomsAI calls | Scores, streak, the daily limits | Our database | A public profile shows totals (section 6) |
| Wall posts, reflections, "Got the Same", reports, follows and stars | The community wall | Our database | Signed-in members (section 6) |
| Weekly letter choice: when you said yes or no and where (sign-up, Me page, unsubscribe link); for each week, whether your letter was sent or failed | To send one email a week only if you asked for it, and to stop at once when you say no | Our database | Nobody. The letter itself goes through our hosting's mail server to your email provider (section 8) |
| Notification settings: the hour you chose, your time zone, and your device's push address and keys | To send one notification a day, if you turn it on | Our database | Your browser's push service (Apple, Google or Mozilla, depending on your device) delivers the message |
| Sign-in session: IP address, browser type, last activity time | To keep you signed in | Our server | Nobody |
| The time you ticked "I am 18 or older and I agree to the Terms and the Privacy policy" | To record that you agreed | Our database | Nobody |
First visit details: utm campaign fields, the site that referred you (host only), the first page you landed on, whether an ad click ID was present |
To learn which channels bring people who stay | A cookie in your browser for 90 days; copied to your account when you sign up | Nobody |
| Contact form messages: your name (optional), email, topic and message, and your account if you were signed in | To answer you | Our database, and a copy in our support mailbox | Nobody |
| Analytics events | To see where people lose interest | Google Analytics 4 | Google (section 5) |
We do not ask for your phone number, your contacts or your location.
"Private" on this page means other members cannot see it. The person who runs the server can technically reach the database. We do not read your notes, except to fix a problem you report or when the law requires it.
4. DoomsAI (Google's Gemini API)
DoomsAI runs only when you press a DoomsAI button. Nothing is sent in the background.
When you press it, our server sends Google's Gemini API:
- the topic's title, the titles and descriptions of its parent topics, and the titles of the topics beside and under it
- your bullets on that topic
- the titles of links and the names of people or organisations you saved under that topic
- titles of cards from your earlier dives on that topic, so it does not repeat itself
- your approximate age and your profession, if you gave them
It does not send your name or your email. Notes and reflections are not part of the prompt.
DoomsHuman is on the unpaid tier of Google's Gemini API while it is being tested. Google's Gemini API terms say that on the unpaid tier Google may use what is sent, and the answers, to improve its products, and that human reviewers may read it. Do not put anything in a bullet that you would not want read. Google's terms are here: https://aistudio.google.com/docs/terms. We do not control how long Google keeps what it receives.
Pictures in a dive. DoomsAI names Wikipedia articles and photo searches. Our server asks Wikipedia and Wikimedia Commons for those pictures. Your own text is not sent there. Your browser then loads each picture straight from Wikimedia, so Wikimedia sees your IP address, as any website you visit does.
5. Analytics, cookies and browser storage
Google Analytics 4. We use GA4 on the public pages and inside the app. Events carry names, step numbers and counts, for example "bullet 10 added" or "dive card 4 viewed". They never carry what you wrote: no bullet, note, reflection, topic title, name or email. The address of a private page is sent as its shape only (for example /units/_), never with a topic's number or name. Advertising signals are switched off. For visitors from the EEA, the UK and Switzerland, analytics cookies are off by default. Where analytics cookies are on, signed-in visits also carry an opaque ID made by us, not your email; where they are off, no such ID is sent.
We do track usage. What you write is not part of it.
Cookies
| Cookie | Set when | What for | Lasts |
|---|---|---|---|
Session cookie (doomshuman-session) |
You open a page | Keeps you signed in | 30 days after your last activity |
XSRF-TOKEN |
You open a page | Stops other sites from submitting forms as you | Same as the session |
remember_web_… |
You sign in with "remember me" ticked, or with Google | Keeps you signed in between visits | Until you sign out |
First-touch cookie (dh_ft) |
Your first visit | Section 3, "First visit details" | 90 days |
_ga, _ga_<ID> |
Your first visit, where analytics cookies are on | Google Analytics: tells one browser from another | up to 2 years |
Kept in your browser only (not sent to us as storage)
| Item | What for |
|---|---|
dh.theme (localStorage) |
Light, dark or auto |
dh.install (localStorage) |
Whether you have seen the install prompt |
dh.ethics (localStorage) |
Whether you have seen the wall's ethics sheet |
dh.nudge.last (localStorage), dh.nudge (sessionStorage) |
Which slow-down message you saw last |
dh.topics.mode, dh.topics.sort, dh.topics.path, dh.topics.drafted (localStorage) |
How your Topics page was last arranged |
doomshuman / outbox (IndexedDB) |
Quick captures written offline. They are sent to our server when you are back online, then removed from the browser |
Service worker cache dh-v2 |
The offline page, styles and icons. Your pages are not cached |
dh.cow (sessionStorage) |
The cow test thoughts, section 7. Removed when you finish the intro or close the tab |
Contact form. The contact page loads nothing from other companies. It keeps bots out with checks on our own server.
Fonts. Pages load their fonts from Bunny Fonts (fonts.bunny.net). That service sees your IP address when the font loads.
6. The Goosebump wall and public profiles
The wall is for signed-in members only. It is not open to the web.
- If you post or reflect, members see your name, your avatar, your text and your photo. This is true even when your profile is private.
- "Got the Same" counts on your post are shown to you only.
- Reports. If 3 different members report a post, it is hidden until the admin looks at it. The admin sees the post, your name and the number of reports.
- Your profile is private by default. If you switch it to public on the Me page, members can see: your name, avatar and one-line bio; your level, XP, streak, total thinking time, and how many bullets, dives and field activities you have; the titles and scores of up to 12 of your top-level topics; your last 10 wall posts; your follower and star counts. Members who follow you also see the titles of the three topics you touched most recently, and your minutes this week. A public profile also puts you in the weekly ranking.
- Never shown on a profile: your bullets, notes, reflections, age, profession and email.
Topic titles are visible on a public profile. Keep the profile private if a title says more than you want to share.
7. The cow test on the home page
You can try the cow test without an account. What you type stays in your browser. It is not sent to our server or to analytics. If you create an account in the same browser tab, the intro shows them again and saves them as your first bullets when you finish it. If you close the tab, they are gone.
8. Email
We send account mail: the password reset link you ask for, and the 6-digit code that confirms your email address when you sign up with one. It is sent from the site's own mailboxes on our hosting.
The weekly letter. We send it only if you ask for it: the box at sign-up is not ticked, and you can turn it on or off on the Me page (Me → Emails). It is one email a week at most, on Monday morning in your time zone (India time when we do not know yours), in your language, and only to a confirmed address.
It is built from your own account and sent only to you: how many recall questions come back that week and the names of their topics, one field activity you picked (or an idea from our "What should I do right now?" page), your minutes in the app last week, the word of the day and a line from the founder. Your bullets, notes and reflections are not in it. Like any email, it passes through our hosting's mail server and your email provider.
It has no tracking pixel, so we do not know whether you opened it. Its links carry utm campaign tags (for example utm_campaign=weekly-2026-46), so Google Analytics can count a visit that came from the letter; the tags never carry your email or anything you wrote.
Every letter has an unsubscribe link that works in one tap without signing in, and supports your mail app's own unsubscribe button. We keep when you said yes or no and where (sign-up, Me page or the unsubscribe link), and for each week whether your letter was sent or failed, never its text. We do not send any other marketing email.
9. How long we keep it
- Account data and what you write: until you delete it or delete your account. We do not delete inactive accounts automatically.
- Sign-in sessions: expire after 30 days without activity.
- Password reset links: work for 60 minutes.
- DoomsAI reviews: a copy is cached on our server for up to 120 minutes so reopening one does not cost you a credit.
- Backups: We do not run our own backups today. Our hosting provider may keep its own copies for a time we do not control.
- Contact messages: stored so we can answer them, and deleted when you ask. A message sent while signed in is also deleted with your account.
- Google Analytics: up to 14 months.
- Google's Gemini logs: a limited time set by Google.
10. Deleting your data
You can delete single items inside the app: a topic, a bullet, a note, a field activity, a wall post, a reflection.
You can delete the whole account from Me → Account → Delete Account. The steps, what goes and what stays are on the Delete account page.
11. Your rights
Write to support@doomshuman.com from the email on your account. We reply within 7 days.
If you are in India. The Digital Personal Data Protection Act, 2023 gives you the right to:
- ask what personal data of yours we hold and what we do with it
- have it corrected, completed or updated
- have it erased
- withdraw consent you gave
- raise a grievance with our grievance officer, and after that with the Data Protection Board of India
- nominate someone to use these rights for you if you die or cannot act
You can already see and correct most of it yourself: name and email on the Account page, age and profession on the Me page.
If you are in the EEA, the UK or Switzerland. DoomsHuman is run from India and is not aimed at any one country. Data protection law where you live may give you rights to access, correct, delete, restrict or object to our use of your data, to receive a copy of it, and to complain to your local data protection authority. Your data is stored on our hosting provider's servers (GoDaddy), outside your country, and, when you use DoomsAI or where analytics is on, handled by Google. Write to us and we will act on your request.
We do not have a "download my data" button yet. Ask by email and we will send you an export.
12. Security, in plain words
- Passwords are stored as a hash. We cannot read your password.
- Every page except the public ones needs a sign-in. Each account can open only its own topics, notes and scores.
- The site is served over HTTPS.
- This is a small project on shared hosting, run by one person. No system is perfectly safe. Do not store things here that would hurt you if they leaked, such as passwords, bank details or medical records.
- If we learn of a breach that affects your data, we will tell you by email.
13. Changes
If this policy changes, we will change the date at the top. If the change is important, for example a new place your data goes, we will tell you in the app or by email before it takes effect.
14. Contact
support@doomshuman.com
Hiren Akbari, 34, 1st Floor, Kailashdham Soc., Near Gajera Circle, Katargam, Surat, Gujarat 395004
Grievance officer: Hiren Akbari
Questions about this page? Write to us.
