Privacy Policy

Last updated: June 18, 2026

Dumpling is operated by By Azur LLC ("we", "us"). This policy explains what we collect, how we use it, and who we share it with.

What we collect

• Account info — your email and a hashed password
• Your content — tasks, notes, contacts, calendar events, goals, habits, and the connections between them
• AI chat conversations
• Technical data — IP address, approximate location, and basic device and OS info, collected automatically to keep the service secure and working
• Basic, cookieless usage analytics via Umami, which we host ourselves — aggregate use only, no third-party ad trackers, no selling
• Waitlist — if you join the waitlist before signing up, the email you give us and which page you submitted it from, so we can let you know at launch

How we use it

To run the app — storing and syncing your content, and powering features like AI and auto-connections. That's it.

Legal basis

If you're in the EEA or UK: we process your data to provide the service (our contract with you), to keep it secure (our legitimate interest), and — for optional features like AI, notifications, or calendar — with your consent, which you can withdraw anytime.

AI features

When you use the AI assistant, the parts of your data you allow are sent to our AI provider, OpenRouter, which routes them to a large-language model (by default, Google Gemini). You choose which categories (tasks, notes, people, calendar, knowledge) the AI can access in Settings. Your data is never used to train AI models.

Service providers

We share data with a small set of providers only to operate the service. We don't sell your data or use it for advertising.

• OpenRouter — AI processing of the context you allow, routed to models such as Google Gemini
• Stripe — payments (your email and account ID when you subscribe); card details go directly to Stripe, never to us
• Sentry — crash and error diagnostics, with personal data scrubbed
• Purelymail — sending account emails (verification, password reset, notifications)
• Apple and Google — push notifications, if you enable them (device token and notification text)
• Google — your calendar events, only if you connect Google Calendar
• Cloudflare — encrypted backups of our database (encrypted before they leave our server)
• Open-Meteo — approximate coordinates for the weather widget, with no identifying information

Where your data is stored

Your data is stored on servers we operate at OVHcloud in the United States (Virginia). It is not end-to-end encrypted — it is stored in a standard database format so the app can function. Backups are encrypted.

If you're outside the United States (for example in the EEA or UK), using Dumpling means your data is transferred to and stored in the US. Where the law requires it, we rely on appropriate safeguards such as Standard Contractual Clauses.

Security

Passwords are hashed, backups are encrypted, and we use reasonable technical and organizational measures to protect your data. No system is perfectly secure, but if a breach ever affects you, we'll notify you and the relevant regulators as required by law.

How long we keep it

We keep your content for as long as your account is active. When you delete your account, your content is removed — immediately if you do it in-app, or within 30 days if you ask us by email — and it rolls off our encrypted backups within about 30 days after that. Waitlist emails are kept until launch, or until you ask us to remove them.

Your rights

You can access, export, correct, or delete your data at any time:

• Export — download all your data from Settings → Data & Privacy
• Delete — permanently delete your account and all data from Settings → Data & Privacy
• Or email us and we'll help

In-app deletion is immediate and irreversible; if you email us instead, we'll complete it within 30 days.

You can also object to or restrict some processing and withdraw consent. EEA/UK users can complain to their local data-protection authority; California users can know, access, correct, and delete their data — and as below, we never sell or share it.

What we don't do

• We don't sell or share your data for advertising
• We don't show ads
• We don't share your data beyond the providers listed above

Children

Dumpling isn't intended for children. You must be at least 13 to use it, and if you're under the digital age of consent where you live, a parent or guardian needs to agree on your behalf. We don't knowingly collect data from children under 13 — if we learn we have, we'll delete it.

Changes

If we change this policy, we'll update the date above and, for significant changes, notify you in the app.

Contact

Questions? Email support@getdumpling.app.