Privacy Policy

Dede ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use the Dede AI character chat platform, how we use it, and the choices you have. By using the Service you agree to the practices described here.

We collect information you provide directly and information generated automatically when you use the Service:

• Email address — used to create and authenticate your account via one-time passcode (OTP)
• Profile information — display name, gender, and age range you optionally provide during onboarding
• Conversation content — messages you send to AI characters and the AI-generated responses
• Payment information — billing details processed securely by Stripe; we never store raw card numbers
• Usage data — pages visited, characters interacted with, feature usage, and session duration
• Technical data — IP address, browser type, device identifiers, and locale/language settings

We use the information we collect to:

• Provide, operate, and maintain the Dede platform and AI chat features
• Authenticate your identity and keep your account secure
• Personalise your experience — recommending characters suited to your preferences
• Process subscription payments and manage billing via Stripe
• Send transactional emails (welcome, subscription confirmation) via Resend
• Improve AI response quality, safety, and overall platform performance
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Comply with legal obligations

Conversations on Dede are powered by third-party AI language models (xAI / Grok). When you send a message, your input is transmitted to the AI provider to generate a response. Please be aware that:

• Conversation messages are stored in our database to support conversation history and continuity
• We may review conversation samples to improve safety filtering and response quality
• Do not share sensitive personal information (passwords, financial details, medical records) in chats
• AI responses are generated automatically and do not represent the views of Dede or any real person

We rely on the following third-party providers that process data on our behalf:

• Supabase — database hosting, authentication, and file storage (EU / US regions)
• Stripe — payment processing and subscription management (PCI DSS compliant)
• xAI (Grok) — large language model powering AI character conversations
• Resend — transactional email delivery
• Vercel — application hosting and edge infrastructure
• PostHog — anonymised product analytics

Each provider operates under its own privacy policy and data processing terms. We select providers that maintain appropriate security standards.

We retain your account information and conversation history for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or necessary to resolve disputes.

Anonymised, aggregated usage data may be retained indefinitely for product analytics and platform improvement.

We use cookies and similar technologies to maintain authenticated sessions, remember your preferences (such as language), and collect anonymised analytics. You can configure your browser to reject cookies, though some features may not function correctly without them.

Depending on your location you may have rights regarding your personal data, including:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — request that we delete your account and associated data
• Portability — receive your data in a structured, machine-readable format
• Restriction — ask us to limit how we process your data in certain circumstances
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at support@dede.ai. We will respond within 30 days.

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated with reasonable notice before they take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.