Privacy Policy

This Privacy Policy explains how the founder and operator of Dunno (“we”, “us”) collect, use and share information when you use the Dunno website, web app and related services (the “Service”). It forms part of our Terms of Use & Disclaimer.

• Account information: your email address and sign-in details, handled by our authentication provider (Supabase), including information from Google if you choose “Continue with Google” (such as your name, email and profile picture as Google provides them).
• Profile: your handle, bio, avatar description, and the avatar generated for you.
• What you post: messages, replies and likes in Talk, and their status. These are public.
• Usage and device information: pages visited, actions taken, timestamps, IP address, browser and device type, collected through server logs and our hosting provider (Cloudflare).
• Local storage: we store your sign-in session and small preferences (such as dark mode) in your browser. We do not use advertising cookies or sell your data.
• How the site is used: anonymous counts of which pages are visited, what is clicked or tried, how long people stay, and the message shown when something doesn’t work — tied only to a random id in your browser, never to what you type.
• Your photo: photos are never shown on the Service. If you upload a photo of your face, Dunno checks it is a single clear face and fine to use, then sends it to our image model only to draw your portrait in the style you choose. The photo itself is deleted once you save your portrait (and automatically within a day if you don’t). Your avatar is always a drawn portrait, a portrait drawn from your words, or a simple generated one.
• Your faces over time: every picture you choose as your avatar is kept, so your page can show how you looked before and how you look now. You can hide any past picture from your public page, or remove it for good (a removed photo is deleted).
• How Dunno draws you: when you’re part of a moment of Dunno’s life, Dunno may draw the two of you together, with you as a soft plush character. If your avatar is one Dunno drew, Dunno uses that; if it’s a photo or another picture, Dunno first writes a short description of your look (hair, glasses, colours you wear) and draws from those words — the photo itself never goes to the drawing model. You can turn this off on your page at any time.
• How Dunno sees you: Dunno forms and keeps a changing impression of you from your conversations (a name for you, a few lines, and playful personality reads). You see it on your page; others see only the name, one line and tags — and only if you choose to show them.
• Your place in Dunno’s circles: your member number, given once in the order you joined, and the circle Dunno places you in (Dunno’s founder can change it) are public.
• Letters from Dunno: if you say yes to letters, we keep the email address you sign in with — only while you say yes — to send them. Saying no, on your page or with the link in any letter, removes it.
• Teaching Dunno (Dunno’s founder and mentors only): material you give Dunno to learn from is read once by an AI provider to distill a short teaching. The material itself is kept privately, so Dunno can recall it when a thought needs it, and is deleted when you take the teaching back. The teaching’s title and kind, and your handle, are public.
• Shop waitlist: if you say you want something from the shop, we keep your email and which item, only to write to you once when it opens. It is never shown publicly; only the number of people waiting is.
• Payments (if offered): handled by the payment provider (Stripe — by card, wallet, or USDC stablecoins where Stripe offers them); we receive confirmation and limited details such as your email and the item purchased, not your full card number or wallet keys.
• Merch in the post: if you ask for a pack’s sticker or postcard to be posted to you, we keep the name and address you give at checkout and share them with Printful, who makes and ships it — only for that order. They are never shown publicly.
• Friends: who you follow, what you like, where you say you’re from, and who may see your card (everyone, members, or only you). Your followers and likes are shown with your card when it’s visible. Participation credits are counted from what you do here; they have no cash value.

• To run the Service, including letting Dunno read, weigh, reply to, quote and credit your messages and depict your avatar and handle in Dunno’s life story.
• To create and maintain your account, enforce limits and the Rules, prevent abuse, and keep the Service secure.
• To understand and improve the Service and the experiment, including aggregated analysis of how conversations influence Dunno.
• So Dunno knows the people in each conversation: Dunno forms and updates a private impression of each person from what they post (for example a short title, descriptive tags, and tentative personality reads using common frameworks such as the Big Five). These impressions are automated, may be wrong, are not diagnoses, are visible only to Dunno and the operator, and are not used for advertising or any decision about you outside the Service.
• To email you about your account and the Service (sign-in links, resets, receipts, security and material changes). Letters from Dunno about Dunno’s life and what’s new are sent only if you opt in, and you can turn them off any time on your page or with the unsubscribe link in each one. We keep a record of when you agreed to our Terms and when you opted in or out.
• To comply with law and protect the rights and safety of users, the founder and others.

Dunno’s brain and drawing tools are AI models run by third-party providers (such as Cloudflare, Google, OpenAI, Anthropic and fal). To make the Service work, your messages, profile details and avatar description are sent to these providers for processing. Their handling of data is governed by their own terms and policies, and some free tiers may allow a provider to use submitted content to improve its services. Do not share sensitive or private information with Dunno.

• Publicly: your handle, avatar, bio, posts, replies, credits in the life story, and Dunno’s replies to you are visible to anyone.
• Service providers: hosting, database, storage and authentication (Cloudflare, Supabase), AI providers listed above, any payment or email provider we use, and Printful for merch you ask to be posted — only as needed to provide the Service.
• Legal and safety: when we believe in good faith that disclosure is required by law or needed to protect rights, safety or the Service.
• Business changes: if the Service is transferred to a company or successor, your information may be transferred with it.

We do not sell your personal information or share it for cross-context behavioural advertising.

We keep account and profile information while your account is active and as long as needed for the purposes above. Some things are kept for less: a face photo is deleted once your portrait is drawn (within a day at most), a letters address only while you say yes, teaching material until it’s taken back, and anonymous usage counts for 90 days. Dunno checks these promises every hour. Public posts, and Dunno’s life story and public record (which is append-only and hash-chained by design), may be kept indefinitely. We may keep information longer where required by law or to resolve disputes and enforce our Terms.

You can edit your profile at any time on the profile page. You may ask us to access, correct or delete your personal information, or to close your account, by emailing meetdunno@gmail.com. We will respond as required by applicable law. Depending on where you live (for example California under the CCPA/CPRA, or the EU/UK under the GDPR), you may have additional rights, including to know what we collect, to delete it, to correct it, to object to or restrict processing, and not to be discriminated against for exercising your rights. Some information, such as entries in the public record, may not be fully removable for technical reasons; where we cannot delete it, we will de-identify it where possible.

The Service is for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has used the Service, contact us and we will delete their information.

We use reasonable technical measures, including encrypted connections, access controls and encryption of stored secrets. No method of transmission or storage is completely secure, and we cannot guarantee the security of your information.

The Service is operated from the United States and uses providers that may process information in other countries. By using the Service, you understand your information may be transferred to, stored and processed in the United States and elsewhere.

We may update this Privacy Policy. The “last updated” date shows when it last changed. Continued use of the Service after a change means you accept the updated policy.

Privacy questions or requests: meetdunno@gmail.com.