Privacy Policy

Effective date: October 30, 2026

At Dapple Security, Inc. (“Dapple”) we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data.

By using or accessing any part of our services, including our website(s), mobile applications (including the Authenticator App), and other online platforms (the “Services”), you accept the practices and policies described below and consent to our collection, use, and sharing of your information as outlined in this Privacy Policy.

What this Privacy Policy Covers

This Privacy Policy covers how we treat Personal Data collected when you access or use our Services. “Personal Data” means information that identifies or relates to an individual, including information defined as “personal information” under applicable laws. This Policy does not cover practices of companies we do not own or control.

Personal Data

Categories of Personal Data We Collect

We have collected the following categories of Personal Data over the past 12 months:

  • Profile or Contact Data

    • First and last name
    • Email address
    • Company affiliation, username
    • Username + relying party ID pairs registered for authentication
  • Web Analytics

    • IP address, browser type, device type, operating system
    • Referring webpage/source
  • Device and Diagnostic Data

    • Log files, crash logs, OS version, diagnostic information
  • Biometric Information

    • Fingerprint and face images used only for on-device processing; never transmitted or stored
  • Other Identifying Information You Voluntarily Provide

    • Information submitted via web forms, email, or mobile apps

We do not collect the following information:

  • Location Information

    • We do not collect precise location data.
  • Payment Information

    • We do not collect payment information via our Services.
  • Advertising/Tracking Identifiers

    • Our mobile apps do not access IDFA or Google Advertising ID.

Biometric Information Notice and Consent

Biometric information (such as fingerprint and face images) is collected solely for secure local processing on your device. It is not stored, transmitted, sold, leased, or disclosed to third parties. Data is deleted immediately after successful on-device authentication or enrollment.

Where required by law, we will provide notice and obtain consent within the mobile app before collecting biometric data.

Categories of Sources of Personal Data

We collect Personal Data from the following sources:

  • You

    • When you provide information to us directly

      • Submitting text through forms or correspondence
      • Emailing or contacting us
    • Automatically when you use the Services

      • Cookies (see “Tracking Tools”)
      • Device-level interactions with our apps
  • Third Parties

    • Analytics Providers

      • Analyze usage and engagement
    • Platform Providers

      • Information related to installation or in-app events
    • Authorized Entities

      • Employers or organizations enabling your access

Our Business Purposes for Collecting Personal Data

  • Providing, Customizing and Improving the Services

    • Providing requested information
    • Fulfilling your requests
    • Providing support
    • Testing and improving the Services
    • Fraud protection and debugging
    • Supporting on-device security features
  • Marketing the Services
    • Marketing and selling our services
  • Corresponding With You
    • Responding to communications and sending information
  • Supporting Enterprise Deployments

    • Facilitating organizational access
    • Coordinating with enterprise administrators
  • Meeting Legal Requirements and Enforcing Terms

    • Complying with legal obligations
    • Protecting rights and safety
    • Enforcing agreements
    • Responding to legal claims
    • Resolving disputes

We will not use your Personal Data for materially different or incompatible purposes without notice.

How We Share Your Personal Data

We may disclose Personal Data to:

  • Service Providers

    • Hosting, technology, and communication providers
    • Security and fraud consultants
  • Platform Providers

    • Mobile platform vendors (Apple, Google)
  • Authorized Enterprise Entities

    • Employers or organizations that provision your access
  • Analytics Partners

    • Traffic and usage analytics companies
    • Referral tracking providers
  • Parties You Authorize

    • Services you connect to
    • Other users

Legal Obligations

We may share Personal Data to comply with law, regulation, or legal process.

Business Transfers

Personal Data may be transferred if we undergo a merger, acquisition, or similar transaction.

Data that Is Not Personal Data

We may create aggregated or de-identified data for business and analytics purposes.

No Sale or Sharing of Personal Data

We do not sell or share Personal Data as defined by the CCPA/CPRA. If this changes, we will update this Policy.

Tracking Tools and Opt-Out

We use cookies and similar technologies to operate, analyze, and improve our Services. The Services do not support “Do Not Track” browser signals.

Types of Cookies

  • Essential Cookies — Required for core functionality such as secure login.

You may control or delete cookies through your browser settings. Learn more at:

https://www.allaboutcookies.org/

Data Security and Retention

We use appropriate security measures to protect your Personal Data. No method of transmission or storage is completely secure.

We retain Personal Data as long as necessary to provide the Services, comply with law, resolve disputes, or enforce agreements. Aggregated data may be retained indefinitely.

Personal Data of Children

We do not knowingly collect Personal Data from children under age 13. Contact us at privacy@dapplesecurity.com if you believe a child has provided data.

Your State Privacy Rights

Depending on your state, you may have rights including:

  • Access and Portability
  • Correction
  • Deletion
  • Opt-Out of Targeted Advertising, Profiling, or Sales (we do not use data for these purposes)

To exercise rights, contact us at privacy@dapplesecurity.com.

Notice to EU and UK Residents

Our Services are intended only for U.S. users. If you access Services from the EU or UK, you do so voluntarily and acknowledge your data will be processed under U.S. law.

Changes to this Privacy Policy

We may update this Privacy Policy and will notify you via the Services or email. Continued use constitutes acceptance of the updated Policy.

Contact Information

If you have questions or concerns about this Privacy Policy, contact us at:
privacy@dapplesecurity.com

Scroll to Top