Effective September 24, 2026. This policy covers the Dump iOS app and dump-app.com.
Who is responsible
Dump is operated by Dalina Dabush, based in Berlin, Germany. I am the sole developer and the data controller for personal data processed through the app and this website. There is no separate company entity behind Dump. For any privacy question, contact hello@dump-app.com.
The short version
Dump is built around small, invite-only groups. We collect only what the app needs to run — your email, a username, the photos you choose to dump, and your group memberships. We don't run ads, we don't sell your data, and we don't use it to train AI models. Every table in our database is protected by row-level security, so no one — including us, by default — can read your data outside of what the app's own rules allow.
What we collect
- Account info. Your email address, the username you choose, and an optional profile photo.
- Dumps. The photos you upload each week, which groups you send them to, and when you posted them.
- Groups. The groups you're in, their names and emoji, and who owns each one.
- Group chat messages. Group chat is not enabled in the current version of the app. If it is switched on in a future release, we will store the messages you send in a group's chat and when you last read them; we already store when you last opened a group, so the app can show you what's new.
- Reports and blocks. If you report a photo or message, we store your report (the reason, any details you add, who reported, and who or what was reported). If you block someone, we store that block so each of you stops seeing the other's content.
- Reactions. The emoji you leave on a friend's photo, which is visible to the group for that week and then deleted (see below). Dump has no activity feed and sends no alerts about who posted or reacted; the only thing waiting for you is a pending group invite.
- Crash reports. When something goes wrong in the app, we record the error message, the technical stack trace, which screen you were on, your device platform and browser engine version, and your account id, so the bug can be found and fixed. These reports go to our own database — not to a third-party analytics or crash-reporting service — and are write-only: the app can file one but cannot read any back.
- Widget access token. If you use the home screen widget, the app creates a read-only token so the widget can fetch your friends' current-week photos in the background. The token is stored on your device and only a hash of it is stored on our servers. Your device also keeps your widget settings and cached photos. All of this is removed, and the token revoked, when you sign out or delete your account. A device holds at most a few tokens at a time, and a token that goes unused for 90 days is deleted automatically.
Dump has its own in-app camera, so taking a photo asks for camera access; choosing an existing photo asks for access to the ones you pick. We don't ask for your contacts, your location, or access to your full camera roll beyond the photos you actively pick to dump.
How we use it
Strictly to run the app: to show your dumps to the groups you chose, to show you your friends' current-week dumps, to email you the six-digit code that confirms your address, to power the home screen widget, to show you pending group invites, and to fix crashes. We don't use your photos or activity for advertising, and we don't build an algorithmic feed from them.
Under EU data protection law, the main legal bases are: providing the service you signed up for (contract), keeping the app secure and working (legitimate interest), and, where required, your consent — for example if you choose optional features that need it.
Who can see what
- A dump is visible only to members of the group(s) you sent it to, and only for the current week.
- Your own past dumps stay in your private history, visible only to you.
- Group chat messages are visible only to members of that group.
- Reports are visible only to you and to me (the operator) for review. Blocked users can't see your content, and you can't see theirs.
- Groups are invite-only; only a group's owner can invite someone, by username or link.
Where it's stored
Dump runs on Supabase (Postgres, Auth, Storage, and Realtime), with row-level security enforced on every table — the anonymous, signed-out role has no access at all. Sign-in emails are sent through Resend from noreply@dump-app.com (that address is for outgoing mail only; it is not monitored). We don't run our own servers holding a copy of your data outside of this infrastructure. Our Supabase project is hosted in the EU (West EU, Ireland), so your photos, messages and account data are stored there. Resend, which sends sign-in emails, may process your email address in other countries, including the US, under standard contractual clauses or an equivalent safeguard. Supabase and Resend act as processors under their own terms and data protection commitments.
How long we keep data
- Account and profile. Kept while your account is active. When you delete your account, we delete your profile, photos, and other personal data from our systems, as described below.
- Dumps and group data. Stored while your account exists so the app can work. Group members can see a dump only during the week it was posted; your own older dumps remain in your private history, visible only to you, indefinitely, until you delete them or your account.
- Reactions. Deleted automatically once the week they belong to has finished — a nightly job removes them a day after the week closes, so nobody keeps a record of who reacted to what. Your own history shows your photos without them.
- Crash reports. Kept while we investigate the problem and for a reasonable period afterwards to spot patterns, then deleted. When you delete your account, your crash reports are no longer linked to you.
- Group chat messages. If group chat is enabled in a future release: kept while the group and your account exist, unless you or the group owner remove them. Messages you sent would be deleted with your account.
- Reports. Kept as long as needed to review and act on them and to protect other users, then deleted. If you delete your account, the reports you filed are deleted; reports about you may be retained where needed for safety or legal reasons.
- Sign-in codes. Short-lived — only long enough to let you sign in.
- Support email. If you email hello@dump-app.com, I keep that correspondence only as long as needed to answer you and handle any follow-up, then delete it unless I must keep it longer for legal reasons.
- Infrastructure logs. Supabase and Resend may retain technical logs (for example security or delivery logs) for a limited period under their own policies. I don't use those logs to build profiles or track you across services.
dump-app.com (this website)
The marketing site is static HTML. It does not set analytics or advertising cookies, and it does not use a tracking pixel. When you open these pages, all styling and fonts are served from this website itself, so your browser doesn't contact any font or CDN provider. The only party that sees your connection data is the host:
- Hosting. Whoever hosts dump-app.com (for example Netlify or similar) will process connection data (IP address, time of access) to deliver the site. I use this only to operate the website, not for cross-site tracking.
The iOS app is separate from this website and does not load these marketing-site resources.
Launch waitlist
If you enter your email address on dump-app.com to hear when Dump launches, we store that address and nothing else — no name, no tracking, no profile. It is used once, to email you when the app is available, and the list is deleted after launch. It goes into our own database (the same Supabase project described above), not to a mailing-list provider. The legal basis is your consent, which you can withdraw at any time by emailing hello@dump-app.com — we'll remove your address straight away.
Sign-in
You sign in with your email address and a password. When you sign up, and whenever you reset your password, we email you a six-digit code to confirm the address belongs to you. Passwords are stored only as salted hashes by our authentication provider — we never see them. There are no social logins and no address book upload.
Your rights (EEA, UK, and similar laws)
If EU/EEA or UK data protection law applies to you, you have the following rights regarding your personal data, subject to legal limits:
- Access — ask what personal data I hold about you and receive a copy.
- Rectification — ask me to correct inaccurate data (you can also update your username and profile photo in the app).
- Erasure — ask me to delete your data; you can also delete your account in the app, which removes your photos, profile, and personal data from our systems.
- Restriction — ask me to limit how I use your data in certain situations.
- Portability — ask for a copy of data you provided in a structured, commonly used format, where technically feasible.
- Objection — object to processing based on legitimate interest, where applicable.
- Withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting prior lawful processing.
- Complaint — you can lodge a complaint with your local supervisory authority. In Germany, that is typically the authority in the state where you live; Berlin residents may contact the Berlin Commissioner for Data Protection and Freedom of Information.
To exercise any of these rights, email hello@dump-app.com. I may need to verify your identity before responding.
Deleting your account
You can delete your account at any time from the app. This removes your photos, profile, and personal data from our systems. If you own a group, ownership transfers automatically to another member so the group isn't disrupted for your friends. If you're the only member of a group you own, the group is deleted.
Data breaches
If a personal data breach puts your rights at risk, I will notify you and the competent authority as required by law.
Push notifications
Dump doesn't send push notifications, so we don't collect a push token or use one to contact you.
Children's privacy
Dump isn't directed at children under 16, and we don't knowingly collect data from them. If you believe a child has created an account, email hello@dump-app.com and we'll delete it.
Changes to this policy
If this policy changes in a meaningful way, we'll update the date at the top of this page.