Privacy Policy
DumpIt

Information We Collect

We collect information you provide directly, information generated as you use the app, and technical information about your device.

1.1 Account Information

When you create a DumpIt account, we collect:

• Name — to personalise your experience
• Email address — for account authentication, security notifications, and support
• Password — stored as a cryptographic hash; we never store your password in plain text

1.2 Chat & Task Content

The core feature of DumpIt is converting your thoughts into tasks. To do this we collect:

• Chat messages — the text you type or dictate into the app
• AI-extracted tasks — action items, to-dos, and reminders identified from your messages
• Task metadata — creation timestamps, completion status, and any edits you make to extracted tasks

1.3 Device & Usage Information

We automatically collect certain technical information to operate and improve the app:

How We Use Your Information

We use the information we collect for the following purposes:

• Providing the service — creating and managing your account, storing your chats and tasks, and delivering AI-powered task extraction
• Improving the app — analysing usage patterns and crash reports to fix bugs and build new features
• Security — detecting fraudulent activity, protecting your account, and enforcing our terms
• Communication — sending account-related emails such as verification, password reset, and important service updates
• Legal compliance — meeting our obligations under applicable law, including the Information Technology Act, 2000 (India)

We do not use your personal data for targeted advertising, and we do not sell your information to third parties.

AI Processing & Third-Party Services

3.1 AI Language Model

DumpIt uses a large language model (LLM) API — provided by OpenAI or Anthropic — to read your chat messages and identify tasks within them. When you send a message in DumpIt:

• Your message text is transmitted to the AI provider's API over an encrypted connection
• The AI provider processes your text to generate a task extraction response
• We do not share your name, email, or account details with the AI provider — only the message content required for processing

These providers have their own privacy practices. You can review them here:

• OpenAI Privacy Policy
• Anthropic Privacy Policy

3.2 Infrastructure & Hosting

Our servers and application infrastructure are hosted in India. We may use cloud infrastructure providers (such as AWS, Google Cloud, or Azure) to operate our backend systems. These providers act as data processors under our instructions and are contractually prohibited from using your data for their own purposes.

3.3 No Advertising SDKs

DumpIt does not include any advertising SDKs, ad networks, or marketing analytics platforms. We do not share your data with advertisers.

Data Storage & Security

Your data is stored on servers located in India. We implement industry-standard security measures to protect your information, including:

• Encryption in transit — all data transferred between the app and our servers uses TLS (HTTPS)
• Encryption at rest — stored data is encrypted at the database and file-system level
• Password hashing — passwords are hashed using a strong one-way algorithm (e.g. bcrypt)
• Access controls — only authorised personnel with a legitimate need can access user data
• Regular security reviews — we periodically audit our systems for vulnerabilities

While we take these precautions, no system is completely secure. If you suspect your account has been compromised, please contact us immediately at [email protected].

Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• AI providers — message content is shared with our AI API provider solely to perform task extraction (see Section 3)
• Infrastructure providers — hosting and database services as described in Section 3.2, under strict data processing agreements
• Legal requirements — if required by law, court order, or government authority in India or another applicable jurisdiction
• Business transfer — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email and/or prominent in-app notice before your data becomes subject to a different privacy policy
• Protection of rights — to enforce our Terms of Service, prevent fraud, or protect the safety of our users

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the service.

• Account data — retained until you delete your account
• Chat & task data — retained until you delete individual items or your account
• Usage logs & analytics — retained for up to 12 months in identifiable form, then aggregated or deleted
• After account deletion — we delete or anonymise your personal data within 30 days, except where retention is required by law

You can request deletion of your account and all associated data at any time (see Section 7).

Your Rights & Choices

You have the following rights regarding your personal information:

Access & Portability

You can request a copy of the personal data we hold about you by emailing [email protected]. We will respond within 30 days.

Correction

You can update your name and email address directly in the app settings. For other corrections, contact us at [email protected].

Deletion (Right to be Forgotten)

You can delete your account and all associated data at any time:

• In-app: Go to Settings → Account → Delete Account
• By email: Send a deletion request to [email protected] from your registered email address

We will process your deletion request within 30 days and confirm once complete.

Opt-Out of Analytics

You can opt out of usage analytics collection in the app under Settings → Privacy → Analytics.

Withdraw Consent

Where we rely on your consent to process data, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. Withdrawing consent to core data processing (e.g. AI task extraction) will limit the app's core functionality.

Children's Privacy

DumpIt is a general-purpose productivity app available to users of all ages. We do not knowingly collect personal information from children under the age of 13 in a manner that violates applicable law, including the U.S. Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe your child under 13 has provided us with personal information without your consent, please contact us at [email protected] and we will take steps to delete such information promptly.

Users under 18 are encouraged to use the app with parental guidance.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to your registered email address
• Display a prominent in-app notice at next login

Your continued use of DumpIt after the effective date of an updated policy constitutes acceptance of the changes. If you do not agree to the revised policy, you should discontinue use and delete your account.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

For general support queries, please use [email protected].