Accounts & sign-in¶
Signing up¶
Create an account with your email, a name, and a password (at least 8 characters), then verify your email — either by entering a short code or clicking a link in the email. (If you click the link in another tab, the sign-up screen advances on its own.) Donkit detects bounced or spam-filed verification emails and lets you correct the address and resend, and it flags likely typos in common email domains.
Sign in with Google is available by default. Other providers (Apple, Microsoft, GitHub, and more) exist but are enabled per deployment, so what you see depends on your workspace. Standard email/password login and forgot-password recovery are both available, and OAuth-only accounts can add a password later.
Sign in with Apple, where it is enabled, sits next to the other sign-in buttons on the sign-in and sign-up screens. On the web, its button is black with a white logo and label in both light and dark themes. The first time you use it Apple asks which name to share and whether to share your real email address or hide it. If you hide it, your Donkit account is registered under the private relay address Apple creates for you. An Apple sign-in whose email matches an account you already have signs you into that account rather than creating a second one — so if you hide your email the first time, you get a new, separate account.
If you open a link to a page of the web app while signed out — a chat, an agent, a conversation on a published agent or team page, the link that confirms a new email address — you are asked to sign in and then land on that page. The page is kept when you go to Sign up from the sign-in page, and when a sign-in with Google or another provider doesn't go through and you try again. If your session ends while you are working, signing in again brings you back to the page you were on. Confirming a new email address keeps you in the workspace you were in, on the web and in the apps.
Onboarding¶
After sign-up you land in the app with a ready-made universal starter assistant — pre-equipped with web search, memory, and file reading — so you can do something useful immediately without building an agent first. It remembers what you tell it about yourself — see Profile & memory. Onboarding is lightweight, can be skipped, and is marked complete after your first agent run.
Organizations, members, and roles¶
Your account is also your workspace and wallet — the plan, billing, and credit balance belong to the account, and everyone in an organization shares that budget. Any user can create an organization account and invite others.
| Role | What they can do |
|---|---|
| Owner (one per org) | Rename or delete the org, change members' roles, manage billing, set spending limits, manage notifications. Can't be removed or capped. |
| Admin | Manage members and invitations, view usage, set per-member spend limits and model access. |
| Member | Participate and draw on the shared wallet. |
Those spending limits apply to the organization's shared wallet. They are separate from the monthly allowance on a shared agent, which that agent's owner sets per person and which only limits use the owner pays for (see Choose who pays).
Invites go out by email as a personal link (resendable, revocable); the invitee signs up or, if already signed in, confirms joining. Seat limits are enforced — members plus pending invites can't exceed the seats the organization holds (the plan's included seats plus any extra seats bought; see Plans & billing).
You can belong to multiple organizations and switch between them with an account switcher; your active role updates when you switch. Deleting an organization is owner-only, behind a type-the-name confirmation, and revokes members' access and unpublishes the org's agents.
In the Android app the active workspace is always in view once you belong to more than one: its name takes the title's place at the top of every tab, next to the app mark, and on a tablet or an unfolded phone the sidebar's user row names it under your name. Tap the name at the top to switch. Switching reloads the app for the new workspace — its own agents, chats, and models — and the app reopens in the workspace you used last. The switcher is hidden while your only workspace is your personal account.
Closed / on-prem deployments
Where email is turned off, admins can add members directly and hand over a temporary password instead of sending invites.
On iPhone and iPad, tap the workspace name in the header to switch from a menu; the active workspace is marked. Short setting lists also open beside their field. Longer lists keep a searchable panel. Forms and detail panels share a title and close button; drag the handle up to expand a panel or down to dismiss it.
Product email & unsubscribing¶
Donkit sends two kinds of email. Service email — sign-in codes and email verification, password reset, billing, the notice that you've hit your credit limit, workflow-failure alerts, and invites — isn't affected by unsubscribing and keeps arriving.
Product email is three messages tied to specific moments: a personal welcome note from the founder, a heads-up when an agent you're building is ready, and a reminder if your account is still out of credits. Every one of these carries an Unsubscribe link in its footer, which opens a short confirmation page — no sign-in needed, and the link doesn't expire. Gmail and other providers that support one-click unsubscribe also offer their own control right next to the sender's name, which does the same thing.
If you're the account owner, there's also a toggle for this in Account → General → Notifications ("Send me product emails"). It covers your own address only — other members of your organization use the link in their own messages.
Signing in from the mobile app¶
The Donkit Android app, and the iPhone, iPad, and Mac apps, sign in with the same email/password, Google or Apple account as the web app. On iPhone, iPad and Mac, Sign in with Apple uses the system's own sign-in sheet, so you never leave the app; on Android it opens Apple's sign-in page in the browser and returns to the app when you are done. Sign-up on mobile shows the same terms-of-service and privacy-policy links you see on the web, and accepting them is required to create an account.
On iPhone and iPad, password fields keep the letters you type without automatic capitalization or spelling corrections, including when you show the password. After you enter all six digits of an email verification code, the keyboard closes so you can tap Confirm. Google sign-in opens the system authentication browser and returns you to the app after you finish signing in.
On iPhone and iPad, the keyboard icon with a down arrow above the keyboard hides it without clearing your text. Scrolling a form or conversation also dismisses it. Confirming a single-line field or sending a chat message hides the keyboard automatically; the on-screen Return key in a multi-line editor still inserts a new line.
In the iPhone, iPad, Mac and Android apps, a link to a chat, an agent, a builder panel, the Analyst, the Designer or your account settings opens the matching screen in the app. If you are signed out, the app opens that screen right after you sign in, as long as you sign in within an hour of opening the link. A link you open before you have an account is kept the same way while you sign up: once your email is verified, with the code or with the link from the verification email, you land on the page the link points to. The first time you open a link to a published agent that is open to everyone or shared with your organization, the app gives you access to it and opens its chat; when the agent has a password, the app asks for it first. An invitation link to an agent also opens in the app: it accepts the invitation and opens the agent's chat. If the agent is invite-only and you have not been invited, or it is limited to an organization you are not a member of, the app tells you that you don't have access — see who can open a published agent. The link that confirms a new email address opens in the app as well and shows the result there. If you are signed out, the confirmation opens after you sign in; if the link belongs to a different account than the one signed in, the app says so and no address changes. In a chat with an agent, a link to any of these pages in a reply opens the same screen as the link opened from outside the app. Pages that exist only on the website, such as billing, open in the browser.
Opening the web app on an Android phone shows a strip at the top offering to continue in the Android app. When the app is installed, Open in app takes you to the same page in the app if the app has that page. On the sign-in and sign-up pages it takes you to the page you were heading to, if the app has it. In every other case it opens the app's start screen (a new chat). When the app is not installed it takes you to its Google Play listing. Closing the strip hides it for thirty days.
Changing your password (web or mobile) signs you out of every session, including every phone — the same behavior a password change already has on web. Those other sessions are simply asked to sign in again; your account itself is untouched. Your phone, iPad or Mac running the app shows up as its own entry under Settings → Devices; removing a device from there ends its session immediately, the same as revoking a paired browser extension.
Your profile is under Settings → Personal profile, and the memory action in a chat's header shows what that agent remembers about you. On iPhone and iPad, find it under More — see Profile & memory.
Building and configuring an agent is available in the app, see The Builder.
Notifications. The app asks for permission the first time it would send you one. Three kinds are separately switchable in Settings → Notifications: a reply is ready, the agent is asking you something, and service messages (credits, workflow failures, a finished build). A reply for the conversation you are already looking at is not shown; a question for it still is.
Getting the app. The iPhone and iPad app is handed out through TestFlight and the Mac app as a notarized download; both check for a newer build on their own, and the Mac app offers to download it.
Opening an agent's own interface. In the chat with an agent you own that has a custom-built front end, a UI button in the header opens that interface full screen inside the app, with a small toolbar to reload it or open it in the browser. It's only shown for agents you own that aren't headless. Opening in the browser signs you in and takes you to the agent's page there. Files the interface offers are saved to your device; see The agent's interface in the apps.
On iPhone and iPad, find UI, Build and the agent's chat history in the header's More menu. Actions that the agent does not offer are hidden.
Add to Home Screen. The same header has a pin button for adding the agent to your Android home screen. It offers up to three shortcuts, each carrying the agent's monogram as its icon: a Chat shortcut that opens the app straight on the conversation with this agent, an Interface shortcut (owned, non-headless agents only) that opens its custom UI full screen, and, for agents you've published, a Web app shortcut that opens the published page in the browser so it can be installed from there — Android can't install a web app from inside another app. Pinning needs a launcher that supports pinned shortcuts (Android 8+).
Deleting your account¶
You can permanently delete your account yourself — on the web from Account → General, or in the mobile app from Profile → Delete account. The same steps, together with a full list of what is deleted and what is kept, are published at donkit.ai/delete-account.
Deleting your account:
- Removes every agent, team and organization membership you own or belong to.
- Unpublishes any agents you had published.
- Signs out every device and paired browser extension.
- Withdraws the access you gave Donkit through Sign in with Apple, if you used it.
- Anonymizes your account (email, name, password) so the address becomes available for a new sign-up.
Deleted agents and everything inside them are kept in a recoverable state for up to 30 days and are then purged permanently.
Your billing and usage history is kept for as long as accounting and tax law require — deleting your account does not erase it, including for a personal organization you owned alone (it is deactivated, not deleted, precisely so its billing history survives). Any remaining credit balance is forfeited.
Deletion is refused in two cases:
- You own an organization that has other members — transfer ownership or remove the other members first. (An organization where you are the only member is deactivated automatically as part of deletion, not a blocker.)
- Your personal account has an active subscription — cancel it from Account → Billing first.
If you can no longer sign in, email [email protected] from the address registered on the account and we will delete it for you.