dusk.

← All Policies

PRIVACY POLICY

Last updated: April 2, 2026

Dusk AI LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use duskai.io and related services, including mobile applications (the "Service"), how we use it, who we share it with, and your rights regarding your data.

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.


1. Information We Collect

Information You Provide

  • Account Information. When you create an account, we collect your username, email address, and a securely hashed password. We also collect your birth year to verify you meet our minimum age requirement. You may optionally provide additional contact information such as a Discord or Reddit username.
  • Google Account Data. If you sign in with Google, we receive your email address and display name via Google OAuth. We do not access your Google contacts, calendar, or any other Google services.
  • Payment Information. If you purchase a subscription, payment is processed by Stripe. We do not receive or store your full payment card number. Stripe provides us with a payment token, card type, expiration date, and the last four digits of your card number. See Stripe's Privacy Policy.
  • Conversation Data. When you use the Service, we store your chat messages and AI-generated responses to provide the Service.
  • Memory Data. Our system automatically extracts and stores key facts and details from your conversations ("Memories") to enable persistent character memory across sessions. Memories are derived from your conversations and stored separately from raw chat logs.
  • User-Created Characters. If you create characters, we store the character name, description, personality parameters, avatar images, and associated settings.
  • Communications. If you contact us for support, we collect the information you provide in your communication.

Information Collected Automatically

  • Technical Data. We collect server logs including IP addresses, timestamps, browser type, and device information for security, debugging, and abuse prevention.
  • Usage Data. We track anonymized usage events (such as registration, login, and session activity) to understand how the Service is used and to improve it. We do not use third-party analytics services such as Google Analytics.

Information We Do NOT Collect

  • We do not use tracking cookies. Authentication is handled via browser local storage.
  • We do not collect biometric data.
  • We do not collect precise geolocation data.
  • We do not conduct cross-site tracking or behavioral advertising.

2. How We Use Your Information

We use your information to:

  • Provide the Service — deliver AI-generated character responses, maintain persistent memory, and enable character creation and customization.
  • Process Payments — manage subscriptions, process transactions, and send billing-related communications.
  • Verify Eligibility — confirm that you meet our minimum age requirement.
  • Maintain Security — detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.
  • Improve the Service — analyze aggregated usage patterns to improve features, performance, and user experience.
  • Communicate with You — respond to support requests and send service-related notices (e.g., account verification, subscription status, policy changes).
  • Comply with Legal Obligations — respond to lawful requests from authorities, enforce our Terms of Service, and protect our legal rights.
  • Train and Improve AI Models — your Input and Output may be used to train, improve, and develop our AI models, as described in our Terms of Service.

We do not use your personal information for targeted advertising, and we do not sell your personal information to third parties.


3. AI Processing and Third-Party Services

AI Model Provider

Your chat messages (Input) are sent to DeepSeek (a third-party AI provider) to generate character responses (Output). DeepSeek processes your messages solely to generate responses. We do not share your account information (email, username, password) with DeepSeek. For DeepSeek's data practices, see DeepSeek's Privacy Policy.

Payment Processor

Payments are processed by Stripe. Stripe collects and processes payment information in accordance with PCI-DSS standards. See Stripe's Privacy Policy.

Authentication

If you use Google Sign-In, authentication is processed through Google's OAuth service. See Google's Privacy Policy.

Hosting

The Service is hosted on infrastructure located in the United States (DigitalOcean). Your data is stored on servers in the United States.

We do not share your personal data with any other third parties except as described in this Privacy Policy, or as required by law.


4. Sensitive Data

When using the Service, you may choose to share highly personal relationship, identity, or other sensitive details through your conversations. We do not intentionally solicit this type of information.

If you disclose sensitive information through the Service, we process it only as necessary to provide the Service (including generating AI responses and maintaining Memories), ensure safety and content moderation, and comply with applicable law.

Where required under applicable law, we process sensitive personal data only with your affirmative consent, which you provide by voluntarily entering such information into the Service.


5. Data Storage and Security

Your data is stored on servers located in the United States. We implement industry-standard security measures including:

  • password hashing (bcrypt);
  • encrypted connections (HTTPS/TLS);
  • access controls and authentication;
  • regular security reviews.

However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.


6. Data Retention

We retain your personal data for as long as your account is active and as necessary to provide the Service. Specifically:

  • Account Information — retained while your account is active, deleted within 30 days of a valid deletion request.
  • Conversation Data and Memories — retained while your account is active. You may request deletion of specific conversations or Memories at any time.
  • Technical Logs — retained for up to 90 days for security and debugging purposes, then automatically purged.
  • Payment Records — retained as required by applicable tax and financial regulations.

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.


7. Children's Privacy

The Service is not intended for anyone under 18 years of age. We require birth year verification at registration and do not knowingly collect personal information from minors. If we discover that a user is under 18, we will promptly terminate their account and delete all associated data. If you believe a minor has created an account on the Service, please contact us immediately at [email protected].


8. Your Rights

Depending on your location, you may have some or all of the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate or incomplete data.
  • Deletion — request deletion of your personal data.
  • Restriction — request that we restrict processing of your data in certain circumstances.
  • Portability — request your data in a structured, commonly used, machine-readable format.
  • Objection — object to certain types of processing, including processing based on legitimate interests.
  • Withdrawal of Consent — where processing is based on consent, withdraw that consent at any time (without affecting the lawfulness of prior processing).

To exercise any of these rights, contact us at [email protected]. We will respond to valid requests within 30 days (or the timeframe required by applicable law). We may ask you to verify your identity before processing your request.


9. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know — you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
  • Right to Delete — you may request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale/Sharing — we do not sell your personal information and do not share it for cross-context behavioral advertising.
  • Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise these rights, contact us at [email protected] or submit a request through the Service. We will verify your identity before processing requests.

Categories of Personal Information Collected: Identifiers (name, email, IP address), commercial information (purchase history), internet activity (usage data), and inferences drawn from conversations (Memories).

We Do Not Sell Personal Information. We have not sold personal information in the preceding 12 months and do not intend to do so.


10. European Economic Area, UK, and Swiss Residents

If you are located in the EEA, UK, or Switzerland, the following applies:

Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract Performance — processing necessary to provide the Service you have requested (Article 6(1)(b) GDPR).
  • Legitimate Interests — processing necessary for our legitimate business interests, such as security, fraud prevention, and service improvement, where those interests are not overridden by your rights (Article 6(1)(f) GDPR).
  • Consent — where you have given affirmative consent, such as for processing sensitive data revealed in conversations (Article 6(1)(a) GDPR).
  • Legal Obligation — processing necessary to comply with applicable law (Article 6(1)(c) GDPR).

International Transfers

Your data is transferred to and stored in the United States. We rely on appropriate safeguards for international transfers as required by the GDPR.

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority.

Data Protection Contact

For data protection inquiries: [email protected]


11. Restricted Content

The Service may generate age-restricted or otherwise sensitive AI content. This content is generated by AI models and is entirely fictional — no real persons are depicted. By using the Service, you acknowledge that you meet the minimum required age and understand that some experiences may be limited by age, region, or platform rules.

We implement content moderation measures to prevent the generation of prohibited content as defined in our Acceptable Use Policy, including but not limited to content involving minors.


12. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access.


13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a prominent notice on the Service or by sending you an email. The "Last updated" date at the top indicates the latest revision. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.


14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Dusk AI LLC Email: [email protected]


Terms of Service · Acceptable Use Policy · Cancellation Policy

All Policies·Terms·Privacy