Privacy Policy

Effective 8 October 2026

This policy covers the Ding app and the service behind it at api.ding.social. Ding is a project by vāyumaṇḍala. Send privacy requests to [email protected]. If you publish notifications to Ding users, the publishing privacy policy also applies.

What Ding handles

• Your identity. Your AT Protocol DID and handle. You sign in through your own account’s sign-in page; Ding never receives your password.
• Sign-in grant. Ding asks your account for identity access and permission to read your Contrails activity history. If you choose Bluesky notification import, it also asks to read your Bluesky notifications. Ding cannot post, like, follow or change anything in your account. The resulting credentials are stored encrypted.
• Your sessions and phones. A session for each device you sign in on, with its label and when it was created and last used; push tokens for devices that receive alerts; and whether notifications are allowed on each.
• Your notifications. Notifications Ding creates for you from public AT Protocol activity, such as likes, replies, follows, watched records and events, along with whether you read, saved or muted them.
• Your settings. Which notification types you turned on, delivery modes, quiet hours, time zone, mutes, watched accounts, records and conversations, and the apps you connected.
• Public network information. To decide what to alert you about, Ding reads public AT Protocol data: who you follow, your followers, profile counts, and posts and records related to your alerts. This data is already public; Ding keeps the parts needed for your notifications.
• Connected apps. If you allow an app to send you alerts, the alerts it sends and your permission choices.
• Operational records. Security and request logs, delivery outcomes and errors. Our hosting and network providers may process IP addresses and technical request data to deliver and protect the service.

Why we use it

To send the notifications you asked for, keep your inbox and settings, protect your account and sessions, prevent misuse and keep the service running. We do not use your information for advertising, do not sell it, and Ding has no analytics or tracking in the app.

Who processes it

Our server host stores Ding’s data. Push alerts travel through Expo and Apple or Google push services, which process the alert text and device routing information to deliver them. Public AT Protocol data comes from network services, including Bluesky and firehose.stream. Cloudflare serves parts of the website. Providers may process information in other countries under their own terms. We may disclose information when legally required, or to investigate abuse or protect people and the service.

How long we keep it

Your inbox, settings and sessions stay until you remove them or disconnect. Delivery records are deleted after 30 days. Signing out of a device ends that session and stops its alerts. Disconnecting your account (Settings, then Security, then Delete Ding data for this account) deletes your Ding data for that account, revokes Ding’s sign-in grant and stops monitoring. Encrypted backups may contain your data for a limited time after it is deleted.

Your choices

You can turn each notification type on or off, choose inbox-only delivery, mute people, apps and publications, set quiet hours, sign out of other devices, and disconnect completely. You can also turn off notifications in your phone’s settings at any time. To ask for a copy of your data or for correction or deletion, email [email protected] from a channel that lets us verify the request relates to your account. Where available, you may complain to your local data-protection authority.

Children and changes

Ding is not directed at children under 13. If practices change, we will update this page and its effective date, and tell you in the app about material changes.