Privacy Policy
This policy describes the personal data processed in connection with Dusky and the assistant features referred to as hiDusky, the purposes of that processing, and the rights available to you.
1. Controller and contact
The controller is Dusky Technologies Inc., a corporation organised under the laws of the State of Delaware, United States. Enquiries relating to this policy, and requests under it, may be addressed to our privacy contact at privacy@hidusky.com. We have not designated a data protection officer under Article 37 of the General Data Protection Regulation; we keep the requirement under review as the service grows and will designate one, and publish the contact details here, should it become applicable.
2. Data we process
- Account data — username, display name, contact email address and authentication credentials. Passwords are stored only as cryptographic hashes.
- Communications data — the messages, emails, calendar entries, attachments and media you send, receive or connect through the service, together with associated metadata.
- Contact data — the contact records you connect or that are derived from your communications, including names, telephone numbers, email addresses and account identifiers, used to identify the people you interact with across the services you connect.
- Connection credentials — the tokens, cookies or session material required to maintain the third-party accounts you link. Held in encrypted form and used solely to operate the connection.
- Assistant data — the instructions you give hiDusky, the outputs it returns, and the derived material it maintains to provide continuity, including extracted references and numerical representations of content.
- Service data — application version, platform, diagnostic and crash information. We do not profile which conversations you open, whom you contact, or how frequently.
3. Persons other than our users
Because Dusky consolidates correspondence, we necessarily process personal data relating to individuals who are not themselves users of the service — principally the parties to your communications and the contacts recorded in your address book. In respect of such persons, the data originate from you and from the third-party services you elect to connect. We process them solely to render the service to the user concerned; we do not use them to market to those individuals, to build independent profiles of them, or to make them discoverable to other users. Individual notification of each such person would in most cases involve disproportionate effort within the meaning of Article 14(5)(b) of the General Data Protection Regulation, and this policy serves as the corresponding public notice. Any such person may exercise the rights described at section 9 by contacting us.
4. How the assistant operates
hiDusky operates both on your instruction and, where enabled, automatically in the ordinary course of providing the service — for example to maintain continuity between your conversations or to prepare summaries in advance. Automatic operation may be disabled in the application settings, in which case hiDusky acts only in response to an explicit instruction.
To generate a response, relevant content is transmitted to third-party providers of artificial intelligence and speech-processing services engaged as our processors. This may include message content, contact identifiers, attachments and related items. Content is transmitted for processing only; under the terms on which we contract it is not used by those providers to train their models, and is subject to limited retention for abuse-prevention purposes, ordinarily not exceeding thirty days.
hiDusky may propose or prepare actions, but no decision producing legal effects concerning you, or similarly significantly affecting you, is taken by automated means alone within the meaning of Article 22 of the General Data Protection Regulation.
Please note: content processed by assistant features leaves your device. You should use these features only with content you are content to have processed in this way.
5. Storage and security
Core service infrastructure is operated within the European Union. The controller is established in the United States, and processing by our providers of artificial intelligence, speech-processing and certain infrastructure services takes place in the United States and, where applicable, in other territories in which those providers operate. Section 6 describes the safeguards applicable to those transfers.
Connections are secured in transit using industry-standard transport encryption. Credentials and contact data are encrypted at rest. Direct Dusky-to-Dusky messages are end-to-end encrypted and are not readable by us.
Messages originating on third-party networks are necessarily decrypted by the connection software that communicates with those networks on your behalf, and a working copy may be retained by that software for the duration of the connection. Certain assistant-related content, including voice and conversation records, is retained in a form readable by the service in order to provide continuity of function; access to it is restricted to what is necessary to operate and support the service.
We apply organisational and technical measures appropriate to the risk and review our infrastructure periodically. No system can be guaranteed absolutely secure.
6. International transfers
Personal data are transferred outside the European Economic Area and the United Kingdom, principally to the United States. Such transfers are made on the basis of the European Commission's standard contractual clauses adopted under Article 46(2)(c) of the General Data Protection Regulation, together with the United Kingdom addendum where applicable, or, where the recipient is certified under it, the EU–US Data Privacy Framework and its United Kingdom extension. Where required we conduct transfer impact assessments and apply supplementary measures. A copy of the safeguards applicable to a given transfer may be obtained on request at privacy@hidusky.com.
7. Recipients
We disclose personal data to: providers of artificial intelligence, speech-processing, hosting, communications and infrastructure services engaged as processors; the third-party communication services you elect to connect, whose own terms govern data on their networks; professional advisers; and public authorities where required by law. A current list of our processors is available on request at privacy@hidusky.com.
We do not sell personal data. We do not disclose it to advertisers or data brokers. Dusky contains no advertising components, tracking pixels or third-party analytics, and this website loads no third-party resources.
8. Legal basis and retention
We process personal data as necessary for the performance of our contract with you (Article 6(1)(b)); where you have given consent, in particular for optional assistant features and diagnostics (Article 6(1)(a)); and for our legitimate interests in securing, maintaining and improving the service and in providing it to our users, including as regards the persons described at section 3 (Article 6(1)(f)).
Account and communications data are retained for the life of your account. On deletion of your account, associated data are removed from our systems within a reasonable period, subject to any legal retention obligation and to copies held by third-party services or by other participants in a conversation. Diagnostic data are retained for ninety days. Content transmitted to processors is subject to the limited retention described at section 4.
9. Your rights
Subject to applicable law, you may request access to your personal data, their rectification or erasure, restriction of or objection to processing, and portability. You may withdraw consent at any time without affecting processing carried out beforehand. Within the application you may delete your account, disconnect any connected service, and disable assistant features. To obtain a copy of your data, write to us and we will provide it. Requests may be addressed to privacy@hidusky.com or to our representative identified at section 1. You have the right to lodge a complaint with your supervisory authority.
10. United States residents
This section applies in addition to the foregoing where State law so provides, including in California, Colorado, Connecticut, Virginia and comparable jurisdictions. The categories of personal information we collect, the purposes for which they are used, the categories of recipients and the applicable retention periods are those described at sections 2, 4, 7 and 8; they are collected from you, from your device and from the third-party services you connect. We do not sell personal information and we do not share it for cross-context behavioural advertising, and we have not done so in the preceding twelve months. We do not knowingly collect the personal information of minors under 16. Subject to State law you may request access to, correction of, deletion of, and a copy of your personal information, and may limit the use of sensitive personal information; we do not discriminate against you for exercising these rights. Requests may be made at privacy@hidusky.com and may be submitted by an authorised agent; you may appeal a refusal by replying to our decision.
11. Children
Dusky is not directed to persons under 16 and we do not knowingly process their data. Where we become aware that we have done so, we delete them.
12. Changes
We may amend this policy. Where changes are material we will notify you in the application and update the date above.