cc4ef2b · 25/10 00:26
← Dadbot Studio

Privacy Policy

Last updated: September 27, 2026

What we collect

  • Account — your email address or mobile phone number (used to sign you in), and a display name you choose.
  • Your content — the songs, lyrics, images, books, oral histories, and other works you create, upload, or generate inside the studio.
  • Usage & technical — basic logs needed to operate and secure the service (e.g. request timing, error diagnostics, session state).
  • Payment — if you subscribe, billing is processed by Stripe; we do not store your card number.
  • Device & app — if you use the iOS app, we collect a device identifier and, if you enable them, push notification tokens. We do not collect advertising identifiers.

Text messages and voice calls

SMS — if you sign in with your phone number, we send a one-time verification code by SMS through Twilio. This is transactional — we do not send marketing texts. Message and data rates may apply. Reply STOP to opt out; message frequency varies with your sign-in activity.

Voice — if you use voice features (such as speaking with an avatar), your call is routed through Telnyx on our behalf. Your phone number and the audio of your session are processed by Telnyx solely to connect and transcribe the call. We do not retain recordings beyond what is needed to complete the session.

AI personas and reconstructions

Some features let you converse with an AI reconstruction of a real person — built from that person's own documented words, oral histories, and writings. Every response from such a persona is labeled as AI-generated and does not represent that person's actual words. Consent for each persona is documented and held by Dadbot Studio. Responses are grounded in the source material; we do not fabricate statements.

How we use your information

To create and secure your account, deliver the features you use, process payments, communicate service-related notices, and generate the content you request. We do not sell your personal information. We do not use your content to train AI models, and our provider agreements prohibit this.

Service providers

We share the minimum necessary with vendors that run the service on our behalf:
  • Supabase — authentication & database
  • Twilio — SMS verification codes
  • Telnyx — voice call routing
  • Stripe — subscription payments
  • Cloudflare R2 — media & asset storage
  • Vercel — application hosting
  • Anthropic, Replicate, and image/audio model APIs — to produce AI-generated content you request
  • Voyage AI — to index your text content as searchable vectors for AI-powered features within your account

Each provider is contractually bound to use your data only to perform the service we have engaged them for.

How your content is processed

Images and mosaics — photos you upload may be analyzed by AI to generate descriptions, and used as source material for chromatic mosaics. If a photo contains a person, that analysis is used only within your studio to place and describe the image — it is never shared publicly without your explicit action.

Text and documents— books, lyrics, oral histories, and other text you upload may be indexed as searchable vectors (embeddings) to power search and AI-assisted features within your account. This indexing stays within your account's data boundary.

Asset storage & security

Assets you upload are stored under unique, randomly-generated identifiers (UUIDs). The storage cannot be browsed or listed — an asset is reachable only by someone who has its exact link. We do not apply per-file login protection to stored assets, and a link you share acts like a key: anyone who holds it can view that one asset. Do not upload material that must remain confidential.

Cookies and session data

We set a single session cookie to keep you signed in. It is httpOnly, secure, expires after 90 days, and is not used for tracking or advertising.

Account deletion

You can delete your account at any time from the Accounts screen in the iOS app, or by contacting us at the address below. Deletion removes your login credentials and your stored content within 30 days. Some records — such as billing history required by law — are retained only for the legally required period and then deleted.

Data retention

We keep your account and content while your account is active. Inactive accounts are preserved — your work is a legacy, and we treat it that way.

Your rights and choices

  • Opt out of SMS by replying STOP to any message from us.
  • Access or delete your data by contacting us at the address below.
  • California residents may request disclosure of categories of personal information shared with third parties, and may request deletion, under the CCPA.
  • EEA/UK residents have rights under GDPR including access, rectification, portability, and erasure. Our legal basis for processing is performance of a contract and legitimate interest.

Children

This service is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Questions or requests?

admin@dadbotstudio.com

Dadbot Studio · 2234 NW 7th Road · Gainesville, Florida 32603