Security
What happens to your words.
What I store, where it lives, who gets to see it, and how you take everything with you or delete it.
At a glance
-
Stored in Frankfurt.
Your messages, recordings, photos and files are kept in a data center in Frankfurt, Germany.
-
For answers: worldwide.
To understand you, I send the content needed to a specialized service. That can happen outside the EU, mainly in the US.
-
No training by default.
By default, the service I use for answers doesn’t use your content to train its AI.
-
Ask first, then send.
Before your first conversation, I tell you where your content goes. Without your yes, nothing leaves.
-
Take everything with you.
One archive with everything, including your photos, recordings and files.
-
Delete everything.
Your account and everything in it. How long traces can remain is explained below.
Who gets to see what
You and me. Plus three services that work with your content for dunel, each with its own job. No one else.
-
To store it
Frankfurt, Germany
- What
- Everything you give me, and everything I make from it.
- What for
- So it’s there when you need it, even years from now and on a new iPhone.
- Good to know
- This is where your account lives. Delete it, and it’s gone here. Backups expire after 8 days at the latest.
-
To answer you
Worldwide, including the US
- What
- What you send and ask me, the conversation, and what I pull from your notes for an answer.
- What for
- Answering, spotting events and tasks, writing notes, reading photos and PDFs, going through the chats you bring.
- Good to know
- No training by default. Kept for up to 30 days to prevent abuse.
-
To find it again
Set to the EU region, location not guaranteed
- What
- Text from your messages and questions.
- What for
- So I can find your words even when you ask differently than you said them.
- Good to know
- Only for searching your own words, never for answers.
The privacy policy names these three services. If you sign in with Apple or Google, they learn that you’re signing in to dunel.
In detail
Before we start, I ask.
After you sign in, I show you what goes where and why. Only once you say yes do I send anything to the services that work for me. Without your yes, we can’t go on.
You can take your yes back in your profile at any time. From then on, nothing goes on without it. What’s already there stays for 30 more days, so you can take it with you or agree again; after that, I delete your account with everything in it.
If a new purpose comes along, like looking things up on the web, I ask you again. I never quietly stretch what you once agreed to.
What I store.
Everything you give me: what you type, what you say, as text and as a recording, your photos, PDFs and files, and the chats you bring along. Plus what I make from them: my answers, notes, events, tasks, lists and your rules.
I store your words exactly as you said them. Nothing gets overwritten. When something changes, a new version is added, and the old one stays. That’s how I can show you, months later, what you really said.
I only show a quote if it matches your original, character for character. The app checks every quote before you see it.
Where it lives.
Everything is stored in a data center in Frankfurt, Germany. Your photos, recordings and files live on your iPhone or in your browser first, then there.
For answers, the content needed goes to a specialized service, and that can happen outside the EU. That’s why I won’t tell you everything stays in the EU.
What goes out for answers, and why.
To understand you and answer, I process your content with a specialized service that works worldwide. What goes there: what you send me, your questions and the conversation, plus whatever I pull from your notes and messages to answer.
What it’s for: spotting events, tasks and names, answering you, remembering how you like things, writing notes on the people, companies and topics in your life, and going through the chats you bring along.
By default, this service doesn’t use your content for training. To prevent abuse, it may keep content for up to 30 days. Processing can happen outside the EU, in particular in the US. The privacy policy names the service.
If you ask me something general, I also answer from general knowledge, not just from your notes.
Looking things up on the web.
If you ask me about the world, like opening hours, prices, news or the weather, I look it up on the web. Only a short search query goes to the web search of the service I use for answers, never your notes or your chat history. I don’t let email addresses, phone or account numbers through. I list the sources under my answer.
Searching your own words.
So I can find a sentence even when you phrase it differently, a second service processes text from your messages and questions. It’s set to the EU region, but its provider doesn’t guarantee the location for this service. This creates a kind of fingerprint of the meaning, which helps me find similar sentences. I don’t use this service for answers.
Voice messages, photos and files.
Your iPhone turns voice messages into text on its own. Only that text goes out for answers, never the recording. I keep the recording for you, so you can listen to it again and take it with you.
I read photos and PDFs with the service I use for answers so I understand what’s on them. I point that out when you send them.
Your calendar.
I only open your calendar if you want me to. There are three switches for it in your profile, and all of them start off:
- Add: I add new events to Apple Calendar right away, deadlines to Reminders.
- Show: I show your iPhone events in your plans. They stay on your iPhone, don’t go to the service I use for answers and aren’t stored.
- Use in chat: then titles, times, places and calendar names from the last 7 and the next 60 days go to the service I use for answers, so I know your other plans when we plan together.
I don’t read your email, your contacts or your photo library. I only see what you send me.
Notifications.
Your iPhone schedules reminders itself. A notification only shows the title I gave the thing and a fixed sentence, never your words. The title can still reveal what it’s about. If you want nothing of it readable on a locked iPhone, set Settings, then Notifications, then Show Previews to When Unlocked in iOS.
App lock with Face ID.
If you like, dunel only opens with Face ID or Touch ID. You choose whether it locks right away or after 1, 5 or 15 minutes in the background. If that doesn’t work, your iPhone passcode does. You’ll find it under Profile, then App lock.
In the browser.
When you use me in the browser, what I need to work is kept there: your sign-in, messages still on their way, and the originals of your photos and files. When you sign out, I clear all of that from this browser. On a shared or someone else’s computer, it’s best to sign out when you’re done.
Face ID, reminders and voice messages are only in the iPhone app.
Take everything with you.
Under Profile, then Take everything with you, you get an archive with everything in your account, including all originals: photos, recordings and files. It’s yours. Keep it, or take it somewhere else.
Deleting.
Delete a chat, and the tasks and events that came from it go too. Lists work the same way.
Under Profile, then Account, you delete everything: your messages, recordings, photos, files, notes, events and my answers. This can’t be undone. If you want to keep something, take it with you first.
To be honest: it isn’t gone everywhere in the same second. Backups expire after 8 days at the latest. Whatever went out for an answer can stay with that service for up to 30 days. If you opened a file just before, its link may keep working for about a minute.
No ads, no trackers.
dunel has no ads and no outside service that analyzes you. If something goes wrong, the error log stays on your iPhone or in your browser. It contains no messages from you and only goes anywhere if you email it to hello@dunel.ai yourself. You see the whole text before you send it.
This website doesn’t set cookies either, loads nothing from other providers and does without trackers.
Where my limits are.
Quoting you is the part that’s guaranteed: every quote is checked against your original. What I add on my own can be off now and then, as with any AI. That’s why I show you your own words, so you can check for yourself.
I don’t reach out on my own. I remind you of what I added with a time, once you’ve switched reminders on.
Found a vulnerability?
If you find a security issue in dunel, please write to hello@dunel.ai with the subject “Security”. Describe what you found and how to reproduce it. Please only use your own account for this.