Privacy
Plainly: what we process, where it is kept and how to remove it. We do not claim Dossierly is “fully private”; the app shows you a ledger instead.
Controller
Gokul Nath (individual), darthstormer.ai@gmail.com. You are using an AI system.
What is stored where
| Data | Where | How |
|---|---|---|
| Your case (profile, events, documents, deadlines, wrap-ups, letter explanations) | Your device only (IndexedDB) | Encrypted with AES-GCM; new cases use a non-exportable device key. Earlier encryption records are preserved. |
| Your account id, sign-in email, and plan; earlier account credentials are preserved | Cloudflare D1, EU | Your email is used to send sign-in codes. Email sign-in does not recover local case data. |
| Sign-in challenges | Cloudflare D1, EU | Codes are stored as a keyed hash and expire after 10 minutes. Expired challenges are removed on later code requests. |
| Ledger and run logs (model, time, bytes, masked count, cost) | Cloudflare D1, EU | Hash-chained; no conversation text |
| Deadline reminders | Cloudflare, EU | Only a date and a short label |
| Letter images | Sent to the model to be read; not kept by us | If saving is offered later, encrypted on your device before upload |
| Audio | Never received by Dossierly | Your browser's speech service turns speech into text |
Before any model call
Your name, case number, PESEL, phone numbers, IBANs, passport numbers and the addresses in your profile are replaced with placeholders. Your personal agent then works on the masked case as plain text.
Processors
| Who | For what | Notes |
|---|---|---|
| Cloudflare | Hosting, the app's server code, the ledger and run logs (D1, EU jurisdiction) | EU storage; global network |
| Meta (Muse models) | Runs the Muse models (Muse Spark, SAM 3.1, Muse Voice Transcribe) on masked text | Storage off per call; Meta's own terms apply |
| Resend | Delivers sign-in codes to your email address | Receives the address and the code; its own privacy policy applies |
Health data
Some cases involve health insurance or medical appointments. We process health information only when you choose to enter it, as your explicit consent, and you can delete it at any time with “Delete everything” in the app.
Legal basis and retention
- Providing the service you asked for (contract): case processing, interpreting, letters.
- Explicit consent: health information you choose to add.
Ledger, run logs and the account record are kept while you use Dossierly and deleted on request. Data on your device stays until you delete it.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, by writing to darthstormer.ai@gmail.com. “Delete everything” in the app destroys the key and wipes the case on your device immediately. You can complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), uodo.gov.pl, or to the authority in your EU country.
See also: Terms · Published limitations