Deck App Privacy

1. What we store about you

Because you have an account, we hold:

• Your email address, your name, your company name and the language you use the app in. If you tell us in Settings whether you present for a company, a university, a school or a government body, we keep that answer too. Until you do, we read the same thing off the part of your email address after the @, and nothing else: we do not use your location for it.
• The wording you set for the emails your audience receives.
• When you signed up, when you last signed in, and a session that keeps you signed in on your phone.
• The settings you choose for what the room may do while you present: how many questions one phone can ask, whether a question reaches the screen only after you tap it, whether the room can upvote, and how polls behave.
• If you are in a team, we also hold the team's name, the kind of organisation it says it is, your role in it and the date you joined. Everyone in the team can see your name, your email address and your role. The team's owner and its admins can also see how many presentations you gave with the team's decks and how many people left their details at them, as two numbers. They cannot see who those people are, and they cannot see your private decks.

2. What we store about your decks

The deck title, the file type, the number of slides and the size. The slide images and thumbnails made from your file. The speaker notes read out of a PowerPoint file. The words written on each slide, read off the same file, so that someone who cannot see the slides can follow them on their own phone during the presentation. The slides you drew on during a presentation, saved as images so they can be emailed afterwards.

The file you uploaded is scanned for viruses, converted to images, and then deleted. It is never served to anyone and never downloadable.

A video stored inside your file is scanned, converted, and played from daldom.com. A slide carrying an online video instead loads that video from YouTube when it plays, so YouTube sees the screen it is played on.

A deck you put in your team's library belongs to the team from then on. Every member can open and present it, and it shows who added it. It stays with the team if you leave the team, are removed from it, or delete your account. You, the team's owner or an admin can take it back out while you are still a member.

3. What we store about the people at your presentations

When someone enters their details they give a name and an email, and can add a job title, a company and a note. We also store the time, their IP address, and the city, region and country worked out from it.

Those details belong to you, the presenter, not to Dal Dom. We store them for you and send the emails for you. We do not sell them, we do not market anything to them, and we do not use them for anything of our own.

They outlive the deck. When a deck is deleted they stay, and they stay until you delete them or delete your account.

When you share a deck by email, we store the email address you sent it to, the note you wrote with it, and the link made for that person. The address is one you typed, so it is yours to be right about.

We record every time that person opens the deck: how many times, when they first opened it, when they last opened it, and the city and country worked out from their IP address. We do not keep the address itself. Opens inside half an hour of each other count as one, so a reload is not a second read.

Presenting a deck from a team's library changes none of this. The details people leave, the list of people you emailed the deck to and what they opened are yours alone. Other members presenting the same deck do not see them, and neither does the team's owner.

People watching on their own phones do not sign in, and are not asked for anything except a nickname while you run a competition, which is described below. If one of them asks a question we store what they typed, up to 280 characters, and the name they typed with it if they added one. The name box can be left empty, and nothing asks a second time.

Their phone keeps a random id for that room in its own storage. We store that id next to their question, their poll answer, their reaction, and their nickname and answers in a competition, so the phone can be shown what it already asked and what it already voted for. It is an id for a browser, not for a person. None of it holds an email address, an IP address or a login, and it is never joined to the contact details anyone leaves.

A question is read by you, and by everyone else in the room on their own phone. It reaches the screen at the front when you tap it, and if you have turned that off, as soon as it is asked. A question you hide goes no further than you. Poll answers and reactions are shown as a count and never as a list of who chose what.

When you run a competition, a phone that wants to answer is asked for a nickname, up to 20 characters. Following along asks for nothing else, and this is only a nickname: no email address and no account. The contact card is separate, and people fill it in only if they choose to. We store the nickname for that presentation, each answer typed into the competition, up to 280 characters, the time the answer reached us, which is how the fastest right answers are ranked, and the moment the question reached their phone, which is only used to show you that a phone got it late. You see every answer and every nickname on your phone. The room sees only the three fastest right answers, as a nickname and a time, and only once you choose to show them. An answer you hide is left out. The nickname and the answers are never joined to the contact details anyone leaves.

All of it belongs to the deck it was said on. It is deleted 30 days after the presentation started, or when the deck is deleted, whichever comes first. Deleting your account deletes it outright.

4. Who can see a deck

A deck link such as daldom.com/k7m is short and can be guessed, so on its own it shows no slides. It shows a QR code and waits. A deck opens for:

• Your phone, signed in to the account that owns the deck. When it scans the QR code on a screen, that screen shows the deck and stays unlocked in that browser for 12 hours.
• A deck in a team's library can be presented the same way by any member of that team, from their own phone, signed in to their own account.
• Anyone holding a share link or a recap email link. A recap link carries a key tied to your deck. A link you emailed from the share button carries a token of its own instead, one per person, which you can stop at any time without touching the others.
• Anyone who types the six digits shown under the QR code. The whole room can read them and they change every minute. They give a phone what somebody sitting in that room already has: the slides on their own phone, and a way to ask a question or vote. They do not give your account, and they do not let anyone drive the deck.
• Nobody else. Six digits is a short number, so a machine working through them will land on a live screen now and then. What it lands on is what the room can already see.

A share link can be passed on by whoever has it, so treat a deck as readable by anyone you send it to.

The screen showing a deck gets one cookie, dd_screen. It holds a random name for that browser and nothing else, lasts 12 hours, and makes sure only that screen can change the six digits a presenter types to pair a phone with it.

5. IP addresses

We store an IP address in two places. The first is a lead: their address is how we work out the city we show next to their name. The address itself is deleted 30 days after they fill in the card. The city, region and country stay with the lead.

The second is signing in and deleting an account. A sign-in code and an account deletion link each store the IP address they were asked for from, along with the email address they were sent to. Both are deleted a day after the code or link expires, and straight away if you delete your account.

The app also counts how often one address is asking, so one script cannot flood it. Those counts are held in memory, they are not written down, and they are gone when the server restarts.

6. Emails we send

Eleven kinds, and nothing else:

• A sign-in code when you sign in.
• A welcome note the first time an address signs in, with a link to this page.
• A single-use link to delete your account, when you ask for one.
• A recap to everyone who left their details, with the annotated slides and a PDF of the deck.
• A summary to you listing everyone who left their details at that presentation.
• A warning 3 days before a deck expires.
• A note to you when a deck has been deleted.
• A deck you shared by email, sent to the address you chose, with your note and the link.
• A note to you the first time each person you shared a deck with opens it. Once per person per deck, and never again.
• A copy of a bug report or an idea back to you, when you send one from Settings. The report reaches us too, with your name, your email, your company and which build of the app you are on.
• An invitation to join a team, sent to the address the team's owner or an admin typed, with the team's name and the name of whoever sent it.

Emails leave through our email provider, which handles them on our behalf. We do not send marketing to your audience.

7. How long we keep things

• Decks: you choose, from 7 days to 365 days from upload, and it is 30 days until you change it. Replacing the file starts that time again. Then the slides, thumbnails, speaker notes, the words read off each slide and the annotated images are deleted.
• Leads: until you delete them, or delete your account.
• A lead's IP address: 30 days, then the address is deleted and only the city, region and country stay.
• Sign-in codes and account deletion links, with the email address and IP address in them: 1 day after they expire.
• The working record of a presentation, the one the recap is sent from: 30 days after it ends.
• What the room left on a deck, the questions, the names on them, the poll answers, the reactions, and the nicknames and answers in competitions: 30 days after the presentation started, or until the deck goes, whichever comes first.
• The settings you choose for what the room may do: until you delete your account.
• Your account: until you delete it. After that we keep only your email address, marked as deleted, so the same address can sign up again. Your name, your company name, the kind of organisation you told us you present for and the wording you set for your emails are removed.
• A record of each presentation you give: 2 years, so we can charge for the service and see what to build next, and it holds nothing about the people you presented to. If you delete your account, that record stays as a count, with your name, your email and anything linking it to you removed from it.
• How long each slide was on screen in a presentation you gave: 2 years, the same as the record of that presentation and for the same reasons. Your phone measures it while you present, and not while you rehearse on your phone without inviting anyone. It is a number of seconds for each slide, and it holds nothing about the people you presented to. You see it on the deck's screen in the app. Nobody you presented to or sent the deck to can see it. Deleting a deck does not remove it. If you delete your account it stays as a count, with anything linking it to you removed from it.
• Who you shared a deck with, and every time they opened it: as long as the deck itself. Deleting the deck deletes them, and so does deleting your account, which leaves no recipient address behind.
• An invitation to a team: the invited email address is kept until the invitation is accepted, declined or taken back, or until it expires 14 days after it was sent. Then it is deleted.
• A log of what happens in the app, such as a deck uploaded or a presentation started, with the account, deck and room it belongs to: 12 months.

8. Where the data is

On one server in the United Kingdom, the same host that runs daldom.com. If you have a rule about which country your data may sit in, that is the answer to check it against.

9. Who else sees it

Our hosting provider and our email provider, only as far as running the service needs. ipinfo.io, which is sent the IP address of a lead and of each open of a shared deck, and sends back the city, region and country. YouTube, only when a slide plays an online video, as described above. Anyone we are legally required to disclose to. Nobody else, and we sell nothing to anyone.

10. Deleting things

You can delete a deck at any time from the app. You can delete leads one at a time or all at once.

You can delete your account from inside the app. That removes the account, its decks, the slides made from them, its leads, everyone you shared a deck with, and everything the people in your rooms asked, voted, reacted and answered, with the nicknames they chose. It cannot be undone.

Deleting your account takes you out of your team. If you own the team, it passes to the admin who has been in it longest, or to the longest standing member if there is no admin. If nobody else is in it, the team and the decks in its library are deleted with your account. The owner can also delete a team from the app: that deletes every deck in its library and every open invitation, and leaves each member with their own account, their private decks and their own contacts.

You can do the same without the app, from the deletion page on daldom.com. It asks for your email address and emails you a single-use link that finishes it.

11. If someone asks you to remove their details

The person who asks should ask the presenter, because the details are the presenter's. If you cannot reach the presenter, write to us and we will pass the request on, or act on it ourselves where we have to.

12. Contact

Questions about any of this, or a request about your own data: