Doru is a training log and social app for riders, trainers, and horse owners. It's operated by Holly Koksel (“Doru,” “we,” “us”). This policy explains what information Doru collects, where it comes from, who can see it, and what you can do about it. It applies to the Doru website at doruequestrian.com and the Doru iOS app.

1  Information you give us

Account information. Your email address, password (stored only in hashed form by our authentication provider), first and last name, and the roles you choose (trainer, rider, and/or owner).

Horse information. Barn name, show name, breed, color, year of birth, height, USEF number, and owner name when you add or edit a horse. If you enter an owner's name as free text, that name is stored even if the owner doesn't use Doru.

Ride information. Ride date, duration, location (only if you type it in), discipline, notes, and — when available — calories, average heart rate, distance, and weather. Rides you time with the in-app ride timer also record the start time.

Soundness notes. Observations about a horse's soundness, including severity, affected area, notes, and photos.

Photos. Photos you attach to rides or soundness notes.

Social activity. Who you follow, follow requests, likes, comments, and requests to link people to horses.

Invitations. If you invite someone to Doru by email, we store that email address and use it to send them one invitation email on your behalf.

2  Health information from Apple Health (iOS app only)

This section describes exactly how Doru uses Apple HealthKit.

What we ask for. Doru asks for permission to read workouts from Apple Health. We don't request access to steps, heart rate samples, sleep, or any other health data type, and Doru never writes anything to Apple Health.

What we do with it. When you open the Doru app, it checks Apple Health for workouts recorded since its last check. It looks only for workouts recorded as Equestrian Sports — for example, a ride tracked on your Apple Watch. Other workout types are ignored on your device and are never sent to Doru.

For each Equestrian Sports workout, Doru sends the following to its servers to create a draft ride:

• the workout's start time (used as the ride date and to avoid creating duplicates),
• its duration,
• average heart rate,
• active calories burned, if recorded, and
• distance, if recorded.

Doru does not currently store GPS routes or location from Apple Health.

Who can see it. A draft ride is visible only to you. It stays private until you open it, choose a horse and discipline, pick who can see it, and save it. Once you finish a draft, its duration, calories, and distance become part of that ride and follow the visibility rules in Section 5 — so if you share the ride with followers, they can see those details. You can delete a draft or a finished ride at any time.

What we will never do with health data.

• We never use information from Apple Health for advertising, marketing, or selling to anyone.
• We never share it with data brokers, insurers, or other third parties, except the infrastructure providers listed in Section 7 that store and run Doru on our behalf.
• We never store it in iCloud.
• We only use it to create and display your ride log.

Turning it off. You can revoke Doru's access at any time in the iPhone Settings app under Health → Data Access & Devices → Doru (or Privacy & Security → Health → Doru). Revoking access stops new workouts from being read. Rides already created stay in your log until you delete them.

3  Location

When you start a ride with the in-app timer, Doru asks for your device's location once per ride so it can look up current weather (for example, “68°F, partly cloudy”). Your device sends approximate coordinates directly to our weather provider, Open-Meteo. Doru does not save your coordinates — only the resulting weather description is saved with your ride. If you decline location access, the timer works normally without weather.

Doru never fills in a ride's Location field automatically. That field only contains what you type.

4  Information collected automatically

Sign-in cookies. We use cookies to keep you signed in. We don't use advertising or cross-site tracking cookies.

Push notification tokens. If you allow notifications in the iOS app, Apple gives Doru a device token so we can send you notifications. We store that token linked to your account. You can turn notification categories on or off in Doru's Settings, or turn notifications off entirely in iOS Settings.

On-device settings. The iOS app stores a few small settings on your phone, such as when it last checked Apple Health and whether you've already seen the notification prompt.

Server logs. Our hosting providers keep standard technical logs (such as IP address, request times, and errors) for security and troubleshooting.

5  Who can see your information

Doru is a social app, and much of its value comes from sharing rides with your trainer, your horse's owner, and people who follow you. Here's how visibility works:

Your name and roles are visible to other signed-in Doru users, so people can find you in search and on horse rosters. Your email address is not shown to other users.

Horse profiles (barn name, show name, breed, and the other details in Section 1, including owner name) are visible to all signed-in Doru users.

Rides. When you log a ride, you choose Followers or Private:

• Followers rides can be seen by people with an approved follow on you or on the horse.
• Private rides are hidden from followers.
• In both cases, a ride on a horse is also visible to that horse's current owner and actively linked trainers, because Doru is built around trainers and owners following their horses' work. If you remove yourself from a horse, or someone else does, that visibility ends for them.
• Draft rides and rides still being timed are visible only to you.

Soundness notes are more restricted than rides. They're visible only to the person who logged them, the horse's actively linked riders and trainers, and the horse's owner — and the owner only if a rider or trainer has turned on soundness sharing for that horse. Soundness notes are never visible to followers.

Photos follow the same rules as the ride or soundness note they're attached to. Photos are stored privately and are only ever shown through short-lived, access-checked links.

Likes and comments are visible to anyone who can see the ride.

Private follow mode. You can require approval before anyone follows you, and a horse's owner can require approval before anyone follows the horse. Turn this on in Settings (for you) or on the horse's page (for a horse you own).

6  How we use information

We use your information to:

• run Doru — show your roster, rides, soundness history, feed, and notifications;
• create draft rides from your Apple Health workouts, if you allow it;
• send notifications and the emails you request (such as password resets and invitations you send);
• keep Doru secure, prevent abuse, and fix problems;
• comply with the law.

We don't sell personal information, and we don't use it for advertising.

7  Service providers

We use a small number of providers to run Doru. They process information only on our behalf and under their own security and privacy commitments:

Your information is stored in the United States.

We may also disclose information if required by law, to protect someone's safety, or as part of a merger or sale of Doru — in which case this policy would continue to apply to your information, including the Apple Health commitments in Section 2.

8  Keeping and deleting your information

We keep your information for as long as your account is open.

Deleting content. You can delete your own rides, drafts, photos, soundness notes, and comments at any time. Deleted photos are removed from storage.

Deleting your account. You can delete your account from Settings → Delete account. When you do, we delete your profile, every photo you uploaded (including ride, soundness, and horse profile photos), your comments, likes, follows, unfinished draft rides, and push tokens. Rides and soundness notes you logged stay on the horse's record so its owner and trainers keep an accurate history, but they're no longer connected to you: your name and written notes are removed, rides are made private to the horse's owner and trainers, and any Apple Health data (heart rate, calories, distance) and location are erased. We may keep limited records where the law requires it, and backups are overwritten on a rolling basis within 30 days.

You can also email us at hollykoksel.dorutest@gmail.com to request deletion or a copy of your data.

9  Security

We protect your information with encryption in transit, private storage for photos, and database-level access rules that limit every piece of data to the people allowed to see it. No system is perfectly secure, but we take security seriously and review it regularly.

10  Children

Doru is not directed to children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, contact us and we'll delete it. Anyone under 18 needs a parent or legal guardian's consent to use Doru.

How consent works. When you sign up, Doru asks for your date of birth. If you're under 18, your account stays limited until a parent or guardian creates or links their own Doru account and approves yours. We keep a record of who gave consent and when.

What we collect from juniors. The same information described in Sections 1–4, and nothing more. We only collect what's needed for the parts of Doru a junior actually uses.

Extra protections for junior accounts.

• Follow approval is turned on by default, so no one can follow a junior without their approval. A parent or guardian can turn this off if they choose.
• Doru has no private messaging. A parent or guardian can see comments on their junior's own rides, and comments their junior writes on other people's rides.
• Rides default to Private for juniors.

What parents can do. From Settings, a parent or guardian can see their junior's rides (including Private ones), the comments their junior has written, and who follows and is followed by their junior. They can change whether follow approval is required, pause the account so it can't post or appear in search, restore it, or delete it and its data at any time. Soundness notes aren't visible to a parent or guardian. Pausing an account doesn't delete anything on its own — it stays paused until a parent or guardian restores or deletes it.

Accounts created without consent. If we learn that someone under 18 is using Doru without a parent's consent, we'll limit the account until consent is given, and delete it if you ask us to. If you think this has happened, contact us.

11  Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to certain uses. You can do most of this directly in Doru, or email us at hollykoksel.dorutest@gmail.com. We won't treat you differently for exercising these rights.

12  Changes to this policy

If we make meaningful changes, we'll update the date at the top and let you know in the app before the changes take effect.

13  Contact

Holly Koksel
hollykoksel.dorutest@gmail.com