/privacy

Information we collect

• Account and identity data: phone number (primary), Google or Apple provider identifier if used, display name, UUID account identifier.
• Authentication and session data: session tokens, sign-in timestamps, device and browser context, auth method history.
• Legal acceptance records: an immutable record of which version of which terms you accepted and when. These are compliance records retained regardless of account deletion.
• Mission Portal participation data: if you submit a backing action, we record the mission ID, a timestamp, and the proof artifact hash. We do not record your choice or preference — the private input is processed by the ZK circuit and is not accessible to us after submission.
• DigiTag SMS data: message content, timestamps, delivery records, and opt-in and opt-out events.
• Business contact line data: name, organization, inquiry reason, and preferred reply method provided voluntarily when texting 470-AIDUNGO (+14702438646). Sender phone number and message content from inbound texts to the business contact line.
• Site and analytics data: device type, browser, pages visited, referrer. No persistent cross-site tracking.

Business contact line — SMS disclosures

Dungo Digital operates a public business contact line at +14702438646 (470-AIDUNGO). When you text this number, you consent to receive automated intake responses and business correspondence from Dungo LLC.

Message frequency is low — messages are sent only in response to contact you initiate. Message and data rates may apply.

Reply STOP at any time to opt out of further automated responses. Reply HELP for support at dungo@dungodigital.io. Additional SMS program details are available on the SMS messaging page.

Your mobile phone number will not be shared with third parties for marketing purposes and will not be sold to any party.

What Midnight ZK processing means for your data

The Mission Portal uses zero-knowledge cryptography on the Midnight network to keep your backing action private.

• Your input goes into a cryptographic circuit that produces a commitment — a proof that a valid action occurred — without recording what you chose.
• The commitment is stored on the Midnight network, a public blockchain. It is not stored in Dungo Digital's database.
• We receive and store only the proof artifact (a hash) and the timestamp. We do not have access to the underlying input.
• We cannot modify or delete a commitment from the Midnight network. No one can. This is by design and is what makes the system trustworthy.
• The published unlock proof confirms a threshold was met. It does not identify you.

How we use information

• Authenticate accounts and maintain sessions
• Deliver DigiTag SMS gameplay and support messages
• Respond to inbound business inquiries on the Dungo Digital contact line, classify inquiry type, and route to the appropriate person
• Operate mission catalogs, operator dashboards, and participation flows
• Generate aggregate mission pressure views for operators — counts only, no individual data
• Maintain compliance records for legal acceptance and SMS consent
• Detect and prevent abuse, fraud, and policy violations
• Understand product performance at an operational level — not sold or used for advertising

Sharing and service providers

We share data only with the service providers needed to operate the platform:

• Supabase — database infrastructure and authentication
• Twilio — SMS delivery and verification
• Vercel — site and application hosting
• Midnight network — ZK circuit execution for Mission Portal actions (a decentralized blockchain; commitments are publicly recorded on-chain)
• Google / Apple — authentication only, when you use those sign-in methods

Children and minors

The platform is not directed to children under 13. DigiTag events may include younger participants when an organizer has secured required parental, institutional, or guardian permissions. If Dungo Digital learns that personal information was collected from a child under 13 without required permissions, we will restrict, anonymize, or delete the affected data.