Privacy Policy
Effective 9 October 2026
This policy covers Dovri Technologies LLC — the Dovri mobile app and joindovri.com. It says what we collect, why, who else sees it, how long we keep it and how to have it deleted.
What we collect
What you give us
- Your name, date of birth, residential address, phone number and email address.
- The last four digits of your Social Security number, used for identity verification.
- The circles you create or join, the amount and frequency you choose, and the people you invite.
What we receive from your bank
When you link a bank account, you do it through Plaid Inc. Plaid shows you its own consent screen and you enter your bank credentials there. Your bank username and password are never sent to Dovri and we never see them. From Plaid we receive the account and routing numbers needed to move money, the account holder name and type, the available balance, and transaction history for the linked account. Plaid's handling of your information is governed by the Plaid End User Privacy Policy.
What we collect automatically
- Device type, operating system version and app version.
- IP address and approximate region, used to detect fraud.
- Log records of actions in the app — sign-ins, contributions, payout dates.
Why we use it
- To verify who you are. Federal rules require us and our partners to confirm the identity of every member before money moves.
- To move money. Each contribution is a debit from your linked account and a credit to the member whose turn it is.
- To run your circle. Showing contribution dates, who has paid, and whose turn is next.
- To prevent fraud. Confirming the name on a linked bank account matches the member who signed up, and checking there are sufficient funds before a debit.
- To contact you. Reminders before a contribution date, confirmation when a payout is sent, and replies to your support messages.
What other members see
Members of a circle you join can see your first name and last initial, your position in the turn order, and whether each of your contributions has been made. They cannot see your bank account, your balance, your contact details, your address, or any other circle you belong to.
Who we share with
We share only what each partner needs to do its job, and only with these categories:
- Payment and verification partners who execute transfers and perform identity checks on our behalf. They are bound by contract to use the information only for that purpose.
- Infrastructure providers — hosting, database, error monitoring and messaging — who process data under our instructions.
- Law enforcement or regulators where we are legally required to respond, or where we reasonably believe disclosure is necessary to prevent fraud or harm.
- A successor if Dovri is acquired or merges, in which case this policy continues to apply until you are notified of a change.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not license or monetise data obtained through Plaid for any purpose other than delivering the service described here.
How long we keep it
| Information | Kept for |
|---|---|
| Identity records — name, date of birth, address, SSN last four, verification results | Five years after your account is closed, as financial-records rules require. |
| Transaction records — contributions, payouts, fees, circle history | Five years after the transaction, as financial-records rules require. |
| Bank account details and Plaid access tokens | Deleted within 30 days of you unlinking the account or closing your Dovri account. |
| Transaction history pulled from your linked account | Deleted within 30 days of you unlinking the account or closing your Dovri account. |
| Device and log records | 13 months. |
| Support messages | 24 months after the conversation ends. |
| Early access email address, if you joined the list before launch | Until you ask us to remove it, or 24 months after launch. |
We review these periods at least once a year and whenever the law or a partner requirement changes. The full Data Retention and Disposal Policy sets out how records are disposed of when a period ends.
Your rights
Wherever you live, you can ask us to:
- Tell you what personal information we hold about you and give you a copy.
- Correct anything that is wrong.
- Delete your information, subject to the records we are legally required to retain.
- Unlink a bank account at any time, which removes the stored account details and access token.
Email support@joindovri.com from the address on your account. We respond within 30 days and we will not charge you or treat you differently for asking.
If you are a California resident, the rights above are the rights granted to you under the CCPA as amended by the CPRA, including the right not to be discriminated against for exercising them. We have no financial incentive programmes.
How we protect it
- Data is encrypted in transit using TLS 1.2 or better, and encrypted at rest.
- Access to production systems requires multi-factor authentication and is limited to people who need it.
- We do not store your bank username or password. We never have them.
- Dependencies are scanned automatically for known vulnerabilities and patched.
No system is perfectly secure. If a breach affects your information, we will notify you and the relevant regulators within the time limits the law sets.
Children
Dovri is for adults. You must be 18 or older to open an account. We do not knowingly collect information from anyone under 18, and we delete it if we discover we have.
Changes
If we change this policy in a way that materially affects how we use your information, we will email you and show a notice in the app before the change takes effect. The date at the top shows when this version took effect.
Dovri Technologies LLC · a Virginia limited liability company