Privacy Policy

• Your account. Your name and email address, and your password, which we store only as a one-way hash. If you sign in with Google, we receive your name and email address from Google.
• What you give your assistant. Your messages, the files you upload, notes and memories your assistant saves for you, tasks, schedules, and, if you use Job Search, your resume and job preferences.
• Connected accounts. When you connect an account such as Google or GitHub, we store the access tokens that let your assistant act for you. They are encrypted at rest.
• Billing. Payments are handled by our billing provider, Kelviq. We receive your plan and subscription status, never your card details.
• Technical data. Your IP address and request logs, used to keep the service secure and stop abuse.

We use your information only to run Dozen for you:

• to carry out what you ask your assistant to do, and to remember what you told it so you do not have to repeat yourself;
• to keep your account and the service secure, and to prevent abuse;
• to manage your plan and billing;
• to answer your support requests and send you service messages about your account.

We do not sell your information, and we do not use it for advertising.

To answer a request, Dozen sends the request and the context it needs (for example the conversation so far, or a file you shared) to the AI model provider that runs your assistant: a third-party company that provides large language models through an API. It processes the request to produce the reply.

We do not use your content to train or improve AI models. When your assistant writes or runs code for you, it does so in an isolated sandbox on our servers or, when ours are busy, on E2B.

If you sign in with Google or connect your Google account, Dozen asks only for what these features need:

• Your name and email address, to sign you in and show which account is connected.
• Sending email (gmail.send), so your assistant can send emails you ask for, such as replies or booking confirmations, from your own Gmail address. Dozen cannot read your inbox.
• Calendar events (calendar.events), so your assistant can add the meetings and reminders you ask for and read your upcoming events when you ask about your schedule.
• Free and busy times (calendar.freebusy), so your assistant can find a time when you are free before it books something.

How it is stored and kept. Your Google access tokens are encrypted at rest and kept until you disconnect Google or delete your account, when they are deleted. Calendar details and emails your assistant handled are kept only as part of the conversation in which you asked for them, and are deleted with that conversation or with your account.

How it is used. Dozen uses Google user data only to provide the user-facing features listed above, which you can see and control in the app. To carry out a request, the relevant data (for example the event you asked about) is sent to the AI model provider running your assistant, which processes it only to produce the reply.

How it is shared. We do not transfer Google user data to anyone else, except to provide these features at your request, to comply with the law, to protect against fraud, abuse or security risks, or as part of a merger, acquisition or sale of assets, and then only after giving you notice and receiving your explicit consent.

Who can see it. People at Dozen do not read your Google user data, unless you agree to it for specific messages or events (for example when you ask us for support), it is needed for security purposes such as investigating abuse, or the law requires it. Everyone who works on Dozen, including contractors, must follow this policy.

What we never do. Dozen does not sell Google user data, does not use or transfer it for advertising, does not use it to determine credit-worthiness or for lending, and does not use it to develop, improve or train generalized AI or machine learning models.

Dozen's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time on the Connections page in Dozen, or at myaccount.google.com/permissions.

We share information only with the providers that help us run Dozen, and only for that purpose:

• servers we rent in the European Union, where Dozen and its database run;
• third-party AI model providers, which process requests to produce your assistant's replies;
• E2B, which runs code sandboxes when our own are busy;
• Kelviq, which handles subscriptions and payments;
• services you choose to connect, such as Google or GitHub, when your assistant acts in them for you.

Some of these providers process data outside your country. We may also disclose information when the law requires it.

Dozen is served only over HTTPS. Saved passwords for other sites and connected-account tokens are encrypted at rest. Code your assistant runs is kept in isolated sandboxes, away from other users and from our own systems, and actions such as sending an email wait for your approval unless you turn that off. No system is perfectly secure, so tell us at once if you think your account has been misused.

We keep your information while your account is open. Code sandboxes are deleted after two days without use. To delete your account and its data, email us from the address on your account at kerschelsz@gmail.com; we delete it within 30 days. Copies in our backups are overwritten as the backups rotate.

You can delete individual chats and memories inside the app at any time.

You can ask us for a copy of your information, ask us to correct or delete it, or object to how we use it, by emailing kerschelsz@gmail.com. You can disconnect any connected account at any time. Depending on where you live, you may also have the right to complain to your local data protection authority.

Dozen uses only the cookies it needs to work: one that keeps you signed in, one that protects your account from forged requests, and one that remembers your light or dark theme. We do not use advertising or analytics cookies.

Dozen is not for anyone under 16, and we do not knowingly collect information from them.

When we change this policy we update the date at the top. If a change is significant, we tell you in the app or by email before it applies.