Privacy

Who runs this?

Dapple is run by its operator, who is responsible for your data (the "data controller"). How to reach us is at the bottom.

How old do I need to be?

You need to be 13 or over. If you are under 13, you can't use Dapple, and we don't keep anything you type when we ask your age. If you are 13 to 17, a few things change to protect you:

• Memory is off until you turn it on yourself in the Memory menu.
• Web searches use safe search, which filters out adult results.
• We keep a note that you are under 18, not your date of birth.

What do we collect?

• Your account: your email address and a scrambled (hashed) copy of your password. Guests get a made-up address instead.
• Your chats: what you send, the replies, and any web searches and sources used, so your chats are there when you come back. When a chat gets very long, the assistant keeps a short summary of the earlier part with it.
• Memory: a short list of facts from your chats, like your name or that you like metric units, used in new chats. Each plan has a size limit (Premium and Plus keep more); when it is full, nothing new is saved until you delete something. Sensitive things (faith, health, politics, sexuality, home address) are only remembered if you say "Allow". Card, account and ID numbers and passwords are never remembered. A project can have its own memory that stays inside it. The Memory menu shows every item and lets you delete them or turn memory off.
• Files: files you add to a project stay until you delete them. Files you attach in a chat are kept for 24 hours, and the text taken from them stays with the chat. The assistant can run Python to work with your files; each run happens in a sealed, temporary space with no internet, deleted when the run ends. What it printed and the files it made are kept with the chat or project. Guests can't create projects or run code.
• Usage: how many messages and tokens you use, and when. These enforce daily allowances. The impact ledger is built from paid invoices, not from your messages, and never holds message content.
• Payments: your plan and the country of your billing address, for tax. Stripe takes your card on its own pages; your card details never reach us.
• Your IP address, kept briefly to stop abuse. The country your connection comes from is sent with web searches so results are local; it isn't saved to your account.
• Suggestions you send us. If you delete your account we keep the suggestion but not who sent it.
• Cookies that keep you signed in and remember settings like the sidebar. No advertising or tracking cookies.

What happens when I connect Google?

• Connecting is optional and separate from signing in. You pick each service in Settings, Connections, and Google shows you exactly what you are allowing before anything is connected. Guests can't connect Google.
• We only look when a chat asks. For Google Calendar that means the title, time and place of events in the range the chat needs; for Google Drive, the files you pick with Google's file picker. What we fetch is sent to the AI provider, like your own messages, to write that reply, and isn't kept in the chat afterwards (a file you pick is kept with the chat like any attachment).
• We never change anything on our own. Adding an event or sending an email happens only after you press Approve on a card showing exactly what will be added or sent.
• We never read your inbox or the rest of your Drive unless you choose "search and read" (Premium and Plus), which Google asks you to allow separately; then a chat can search and open emails and files when you ask it to. Sending email alone uses Google's send-only permission, which can't read anything. We never use your Google data for advertising or to train AI models. Our use of data from Google follows Google's API Services User Data Policy, including its Limited Use rules.
• The keys Google gives us are stored encrypted, never shown to anyone and never written to our logs.
• To disconnect, press Disconnect in Settings, Connections: we delete the keys and ask Google to withdraw our access at once. You can also remove it in your Google Account's security settings. Deleting your account does both.

Why do we use it?

To run the service: store your chats, answer you, and bill you if you pay. We also use some of it to keep things fair and safe, like daily limits and stopping abuse. We never use your chats for advertising, never sell them, and don't use them to keep you chatting longer. Sensitive memories are kept only with your clear permission, which you can take back any time in the Memory menu.

Who sees it?

The people who run Dapple may read chats to fix problems, improve answers, stop abuse or keep someone safe, and for nothing else. To work, we use other companies ("processors") who only act on our instructions: the hosts for the app and database, Stripe for payments, and the AI provider that writes the replies, named on the impact page. Your messages, and text from files the assistant reads, are sent to that provider to get a reply. Some of these companies are outside the UK; before public launch each has written terms, with transfer safeguards where needed.

How long do we keep it?

Chats, memories and project files stay until you delete them or your account. Files attached in a chat are gone after 24 hours. Guest accounts and their chats are deleted after about a month without use. Usage and billing records are kept as long as the law and our accounts need them. Each paid invoice's amount stays in the giving pool so the monthly donation adds up; deleting your account unlinks it from you.

How do I delete everything?

"Delete all" in the sidebar deletes all your chats. "Delete account" in the account menu deletes your account and everything in it: chats, memories, projects and files. If you pay, cancel your subscription first. Deleting a chat doesn't delete memories taken from it; delete those in the Memory menu.

Who do I talk to?

Email dapplesupport@gmail.com. Under UK GDPR you can ask to see, correct, copy or delete your data, or object to how we use it. If you're under 18 and worried about anything, talking to a parent or another adult you trust is a good first step. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

What if this changes?

The date at the top changes, and we tell you in the app about any big change.