Privacy
Your data is yours.
Full stop.
DPM is a tool, not a data business. We collect what we need to make the product work — nothing more.
Last updated May 5, 2026
Privacy by default
Your projects, tasks, comments, and team data are only accessible to people you invite. We do not mine your content, sell your data, or use it to train models. What you build in DPM stays in DPM.
What we collect
When you sign in with Google, we receive your name, email address, and profile photo from Google's OAuth service. This is stored in your DPM profile and used to identify you within the app.
When you use DPM, we store the content you create:
- Projects you create or are invited to
- Tasks, descriptions, priorities, and due dates
- Comments and @mentions within tasks
- Sprint plans, milestones, and roadmap entries
- Activity feed entries (who did what, when)
We also store your preferences locally in your browser — things like dark/light theme and whether you've dismissed certain UI elements. This data never leaves your device.
How we use your data
Your data is used for one purpose: to make DPM work for you and your team. Specifically:
- Authenticating you when you sign in
- Syncing your projects and tasks in real time across devices
- Displaying your name and photo to teammates in shared projects
- Sending you email notifications you explicitly trigger (e.g. submitting a feature request)
We do not use your data for advertising, analytics profiling, or any purpose outside of operating the product.
Where your data lives
DPM is built on Google Firebase. Your data is stored in Firestore, Google's cloud database, and protected by Firebase Authentication. Google's infrastructure is subject to their own privacy and security commitments.
Your data is stored in the United States. By using DPM, you consent to this storage location.
Platform admin access
DPM has one platform administrator who can access the admin portal for platform management. Access to any project you own or are a member of is governed by strict limits:
When a platform admin enters a project they were not invited to, all live data — tasks, comments, sprints, and activity — is completely hidden from their view. They see the UI shell only.
Every admin entry into a non-member project is:
- Announced to all project members with a visible banner in real time
- Logged to the project's activity feed with the admin's name and timestamp
- Automatically cleared when the admin leaves
You always know when an admin is present. There are no silent visits.
Invite codes and access
DPM is invite-only. Access is granted through one-time invite codes generated by project owners. Codes are single-use by default and rotated after use. Project owners control who joins their projects.
Feedback you submit
When you submit a feature request or bug report through the Feedback section, your name, email, and message are sent to the platform administrator via Web3Forms, a third-party email delivery service. This is the only third-party service DPM uses for data transmission.
What we never do
- Sell or share your data with third parties
- Use your project content for advertising
- Train AI or machine learning models on your data
- Track you across other websites or apps
- Store payment information (DPM has no payment system)
Your rights
You can request deletion of your account and all associated data at any time by contacting us. Project owners can delete their projects directly from the app. Members can leave projects or be removed by owners.
You can export your project data at any time from the Team view inside DPM. The export includes all tasks, assignees, priorities, statuses, and due dates as a CSV — no lock-in.
To request a full data deletion, email: studio@studiopractice.io
Changes to this policy
If we make material changes to how we handle your data, we will update the date at the top of this page. We will not reduce your privacy protections without notice.
Contact
Questions about this policy or how your data is handled: studio@studiopractice.io
DPM is a Studio Practice product, part of Forge Ventures, LLC.