Privacy Policy

Effective Date: October 29, 2026

The Diplocat is a product of Entelechy Unbound, LLC ("we", "us", or "our"). We operate the Diplocat mobile application and website at diplocat.app (the "Service"). This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

We collect the following types of information:

2. How We Use Your Information

3. Third-Party Services

We use the following third-party services as data processors. For each, we describe what data is shared and why:

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies.

4. Data Retention & Anonymized Data

Conversation History

How long we keep a conversation depends on the subscription tier you were on when that conversation was created:

Because the retention period is set when a conversation is created, changing plans does not change it for conversations you already have. Conversations created on Free or Basic are still deleted on that plan's schedule after you upgrade, and upgrading does not recover conversations that have already been deleted. Conversations created while you were on Premium are kept even if you later cancel or move to a lower tier.

Deletion on these schedules is automatic and permanent. If there is anything you want to keep, you can download all of your data at any time using Export My Data in the app's settings.

When you delete a conversation or your account, the associated data is permanently removed from our servers within 30 days. Stored files, such as profile pictures, generated audio and data exports, may remain in our storage provider's recovery system for up to 7 days after they are deleted, as a safeguard against accidental loss, and are then permanently erased. These copies are not available on request.

Voice Recordings

Voice recordings you provide as input are processed in real time and are not stored on our servers after processing. Generated audio (text-to-speech playback of suggestions) is stored only so the app can play it, and is automatically deleted from our servers within 2 days. It is not kept with your conversation history. The same applies to the file created when you use Export My Data: it is automatically deleted within 2 days.

Anonymized Data for Service Improvement

We may derive pseudonymized, aggregated data from your usage to improve our de-escalation models and service quality. This includes text pairs (original and de-escalated versions), the de-escalation level selected, your feedback (e.g., thumbs up/down), and language metadata. This data is stripped of direct identifiers (name, email, user ID, device identifiers) and is designed to prevent re-identification, though as with any text data, unique or distinctive inputs may theoretically be matchable.

Because this data is pseudonymized and aggregated, it is not included when you request account deletion or data export. If you believe your data is identifiable within this dataset, you may contact us to request its removal.

Thumbs-Down Feedback

If you tap thumbs-down on a suggestion and choose to fill out the optional follow-up survey, we retain that submission until you delete the conversation it came from, or your account. Each submission stores the original text you submitted, the suggested output you reacted to, a snapshot of your active voice settings at the time, your diagnostic answer, and any free-text notes you chose to write.

This data is linked to your user identifier so we can:

Internally, we review aggregated summaries of this feedback to understand where suggestions miss. Excerpts of the free-text notes may be displayed to our team for qualitative review; those excerpts do not carry your user identifier. The original-message and suggested-output fields are not surfaced in aggregate tooling — they are only accessible through the same per-user access path as your conversation history.

We may also retain de-identified statistical summaries derived from this feedback indefinitely — for example, counts of how often a given diagnostic answer is chosen against a given voice profile, or aggregate thumbs-down rates broken out by de-escalation level. These summaries never contain your free-text notes, your original message, the suggested output, or any identifier that could be linked back to you, and we treat them the same as the "Anonymized Data for Service Improvement" category above. They are therefore not affected by account deletion.

Cancellation Feedback

If you fill out the optional survey when cancelling a subscription, we store the reasons you selected, any comment you wrote (up to 2,000 characters), and the subscription tier you were on. This record is linked to your user identifier so it can be included in your data export and permanently removed when you delete your account. Internally, we review this feedback to understand why users cancel and to improve the product. Free-text comments may be surfaced to our team for qualitative review without your user identifier; aggregate counts of selected reasons are reviewed at population level.

5. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (TLS), secure cloud infrastructure, and access controls. However, no method of electronic transmission or storage is 100% secure.

6. Your Rights

You have the right to:

To exercise these rights, use the in-app settings or contact us at delete@diplocat.app.

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdiction with similar data protection laws, you may also have the right to: lodge a complaint with your local data protection authority, object to processing based on legitimate interests, and request restriction of processing. Our legal basis for processing your data is contract performance (providing the Service) and legitimate interests (improving the Service).

7. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

At sign-up we ask whether the user is 13 or older. Users who indicate they are under 13 are not permitted to create an account on that device. This block is stored locally on the device and is not tied to an account. A user who was previously blocked and has since become eligible — for example, a child who has since turned 13 — may reinstall the app to re-attempt sign-up with accurate age information. Parents and guardians are encouraged to supervise this step.

8. International Data Transfers

We operate in the United States. Your account data, conversations, and uploaded files are stored on servers located in the United States (Google Cloud). By using the Service, you consent to the transfer of your data to the United States.

AI processing may take place outside the United States. Message text is sent to OpenAI, and message text and voice recordings to Google's Vertex AI (Section 3). Either provider may route that processing to data centers in other countries. Each handles the data under its data processing addendum wherever it is processed — Google's Cloud Data Processing Addendum and OpenAI's Data Processing Addendum — and neither uses your content to train its models.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:
support@diplocat.app