youdou is local-first. Your CRM is a database file on your own disk, not a row in ours. This page says exactly what that means, what leaves your machine, and who receives it.
Last updated 24 July 2026 · youdou — Work For You., LLC
Your companies, contacts, deals, notes, synced email and search index live in a SQLite file in your own Library folder. We do not have a copy and cannot retrieve one. What leaves your machine is listed below, and the app logs every outbound request as it happens — Settings › Where your data goes.
Delete the app and the file is still yours. Delete the file and it is gone. There is no copy anywhere else, which also means we cannot restore it for you.
Your install ID, and if you verified an email a one-way hash of it, sent to our Firebase project to resolve which plan you are on. No CRM content, ever.
IMAP, Microsoft Graph or the Gmail API, using credentials you supply, to fetch and send your mail. That traffic is between your machine and your mail provider.
Only the text of the record you asked about, and only on the route you choose: entirely on your Mac, your own server, or a vendor cloud. With a youdou-managed key the request passes through our proxy to the vendor; we do not retain the content.
Only the accounts or rooms you explicitly publish. Shares between instances are end-to-end encrypted. A published room is hosted by us until you unpublish it.
Handled by PayPal. We never see or store card details. We receive a subscription identifier, the plan purchased, and the payer email to confirm the subscription belongs to your install.
Support requests and error reports include only what is shown to you before sending. Nothing is transmitted in the background.
With tracking on, outbound messages carry an invisible image and rewritten links. When a recipient opens the message or clicks a link, our servers record that it happened, when, how many times, and the requesting browser user agent, stored against your install so the app can show it back to you.
Those recipients are not youdou users and have not agreed to anything with us. You are the controller of that data; we process it on your behalf. Whether you may lawfully track a given recipient depends on where they are and your relationship with them.
Tracking is a setting, not a requirement. Turn it off in Settings and no pixel or rewritten link is added. Unsubscribe requests recorded through the footer link are stored the same way and used to suppress that contact.
If you submit the contact form we receive what you typed and reply to it. We do not sell it or add you to a sequence you did not ask for.
We record basic visit information. We do not use advertising cookies or third-party ad trackers.
Local data lives on your machine until you delete it. We have no retention period for it because we have no copy.
Server-side we keep your licence record for as long as your install exists, open and click events for up to 24 months, published rooms until you unpublish, and billing records for as long as tax rules require.
Depending on where you live you may have the right to access, correct, export or delete the personal data we hold about you, to object to processing, and to complain to a supervisory authority. Because most of your data never reaches us, an access request will usually return your licence record, billing history, and tracking events tied to your install.
Email workforyou@youdou-workforyou.com. We respond within 30 days.
Google Cloud and Firebase, PayPal, and OpenAI, Anthropic or Google AI only on the route you select. We do not sell personal data or share it for cross-context behavioural advertising.
youdou is a business tool and is not directed at anyone under 16. Material changes will be dated here and surfaced in the app.
youdou — Work For You., LLC · workforyou@youdou-workforyou.com