Privacy Policy

Data we process

• Account data: name, email address, sign-in identifier. You sign in with your Dialekt account (api.dialektai.org); passwords are stored only as hashes.
• Content you create: tasks, chat messages, attachments, agent settings, their results, team tasks and members.
• Connection data: access tokens for services you connect yourself (for example WhatsApp Business or Telegram). They are encrypted (AES-256-GCM) and never shown to anyone, including workspace admins.
• Technical data: device token for push notifications, an activity log without task content, compute usage events (model, token count, time).
• Subscription data: subscription status and term. Payments go through Google Play or the App Store; we never receive card details.

Why

To run your tasks and agents, show their status, send the notifications you chose, account for subscription usage, keep the service secure and prevent abuse.

Artificial intelligence

Tasks are performed by the DeepSeek language model. It receives only what a given step needs: the task text, relevant attachments and run data. We do not use your data to train models. Every external action by an agent (sending a message, changing a record in a service) requires your approval unless you allowed it in advance with limits and an expiry.

International transfers

DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) processes data in the People's Republic of China. This transfer happens only after your explicit consent, which the app asks for before the first such processing. Without consent, tasks that need the model are not run; everything else keeps working. You can withdraw consent in Settings at any time.

Where data is stored

ARE data is stored on a DigitalOcean server in Singapore in a dedicated PostgreSQL database. Dialekt account data is stored in Dialekt infrastructure. Access is restricted and connections use TLS.

Who receives data

• DeepSeek: running tasks with the language model, after your consent.
• Apple (APNs) and Google (Firebase Cloud Messaging): delivering push notifications. Only the device token, event type and an identifier are sent, never task content.
• Google Play and the App Store: purchasing and verifying subscriptions.
• Services you connect yourself (WhatsApp Business, Telegram and others): only what an agent sends on your instruction.
• DigitalOcean: server hosting.

We do not sell personal data or share it for advertising, except where the law directly requires it.

Retention

• Agent run details: 30 days after completion.
• Event log: 90 days; security audit log: 365 days.
• Everything else: while the account or workspace exists.

Account deletion and your rights

You can get a copy of your data, correct it, restrict processing, withdraw consent or delete your account. Delete it right in the app: "Settings → Delete account". Deletion erases your name and email, removes tokens of connected services and revokes the connections, removes notification addresses and archives your personal workspace. Tasks in teams stay with the team without your name. Deletion takes effect within a minute. If you cannot access the app, email [email protected] from your account address; requests are completed within 30 days. See also the account deletion page.

Children

ARE is not intended for people under 16.

Cookies and analytics

The ARE app does not use advertising trackers or third-party analytics.

Changes

We announce material changes in the app in advance. The current version is always at dialektai.org/en/are/privacy/.

Contact