Privacy Policy

1. Introduction

This Privacy Policy describes how Dusky ("we," "our," or "the service") handles information when you use our application. By using Dusky, you consent to the practices described in this policy.

Key Point: Dusky is designed with privacy in mind. We do not store your personal data, transcripts, screenshots, or conversation content. Your data flows through third-party AI providers for processing and is not retained by Dusky.

2. Our Privacy Approach

What Makes Dusky Different

Dusky operates on a pass-through model:

• We do not store your transcripts. Audio is streamed directly to the transcription provider (AssemblyAI), processed in real-time, and the transcript is returned to your device. We never see or store it.
• We do not store your screenshots. Screen captures are sent directly to AI providers for analysis and then discarded. We never see or store them.
• We do not store your conversations. AI interactions flow directly between your device and AI providers. We are not in the data path.
• We do not store personal data beyond authentication. We only retain the minimum information needed to authenticate you (email address).

Your content stays between you, your device, and the AI providers you choose to use.

3. Information We Collect

3.1 Account Information

That's it. We do not collect names, addresses, phone numbers, or other personal identifiers.

3.2 Information We Do NOT Collect or Store

To be explicit about what we do not retain:

• Audio recordings - Streamed to AssemblyAI, never stored by Dusky
• Transcripts - Processed by AssemblyAI, returned to your device, never stored by Dusky
• Screenshots - Sent to AI providers, never stored by Dusky
• AI conversations - Between your device and AI providers, never stored by Dusky
• Interview content - Never stored by Dusky
• Personal details beyond email - Never collected

3.3 Technical Data

We may collect minimal technical data for service operation:

4. How Your Data Flows

Understanding the data flow is important:

Audio Processing

1. You speak
2. Audio streams from your device directly to AssemblyAI
3. AssemblyAI returns transcript to your device
4. Transcript exists only on your device

Screen Processing

1. You capture a screenshot
2. Screenshot sends from your device directly to your chosen AI provider
3. AI provider returns analysis to your device
4. Screenshot is discarded after processing

AI Interactions

1. You request AI assistance
2. Request goes from your device directly to AI provider
3. AI provider returns response to your device
4. Dusky does not store or have access to this exchange

5. Third-Party Services

Your data is processed by these third-party services. You are responsible for reviewing their privacy policies:

Important: Each AI provider has its own data handling, retention, and training policies. When you use Dusky with a particular AI provider, your data is subject to that provider's policies. We encourage you to review them.

If you provide your own API keys (BYOK), your usage is governed entirely by your agreement with that provider.

6. Local Data on Your Device

Some data exists locally on your device:

You have full control over local data. You can delete it at any time through the app or by removing the application.

7. Data Security

• All data in transit is encrypted using TLS
• Authentication uses industry-standard protocols via Supabase
• We do not store sensitive content, so there is minimal attack surface
• Local data remains on your device under your control

8. Your Rights

You have the right to:

• Access: Request confirmation of what data we hold (email address only)
• Deletion: Delete your account and all associated data
• Portability: Your content is already on your device
• Correction: Update your email address

To exercise these rights: privacy@getdusky.app

For EU Residents (GDPR)

You have additional rights under GDPR including the right to lodge a complaint with a supervisory authority. Our legal basis for processing is legitimate interest (providing the service you requested) and consent.

For California Residents (CCPA)

You have the right to know what personal information we collect and to request deletion. We do not sell personal information.

9. Your Responsibilities

You are responsible for:

• Understanding that your audio and screen content is processed by third-party AI providers
• Reviewing the privacy policies of AI providers you use
• Ensuring you have appropriate consent or rights to capture audio and screens in your environment
• Managing and deleting local data on your device
• Complying with any applicable recording or privacy laws in your jurisdiction

10. Data Sharing

We do not sell your personal information.

We share data only:

• With third-party services as described above (to provide the service)
• If required by law, court order, or governmental request
• To protect our rights, property, or safety
• In connection with a merger or acquisition (with notice to you)

11. Children's Privacy

Dusky is not intended for users under 18 years of age. We do not knowingly collect information from minors. If we learn we have collected data from a minor, we will delete it promptly.

12. International Data Transfers

Data may be processed in countries other than your own, including the United States. By using Dusky, you consent to this transfer. We rely on standard contractual clauses and other lawful mechanisms for international transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the application or by email. Your continued use of Dusky after such notice constitutes acceptance of the updated policy.

14. Contact Us

For privacy questions or concerns: privacy@getdusky.app

Summary