Privacy Policy

Effective date: 23 July 2026 · Last updated: 23 July 2026

The short version. DUMB AI has no accounts. We never ask for your name, email, or phone number. We don’t run ads, we don’t use analytics or tracking SDKs, and we don’t sell your data to anyone. What we do hold is a random identifier for your device, the messages you send so the App can reply to them, and the (deliberately wrong) “memories” the App generates about you — which you can delete from inside the App at any time.

1. Who we are

This Privacy Policy explains how Daniel Onadipe (“we”, “us”, “our”) handles information in connection with the DUMB AI mobile application and the website at https://getdumb.app (together, the “App”). We are the data controller for that information.

DUMB AI is a comedy app that produces intentionally wrong answers. Our Terms of Use explain what that means for how you should treat its output.

Questions, requests, or complaints: dumbo@getdumb.app.

2. Information we collect

Device identifier. The first time you open the App, it generates a random identifier (a UUID) and stores it on your device. It is sent with each request to our servers so we can apply usage limits and return the right “memories” to your device. It is not your Apple ID, not your advertising identifier, and it is not linked to your name or any real-world identity. Deleting the App deletes it; reinstalling generates a fresh one, which also means any memories tied to the old identifier become unreachable.

Your messages and related content. When you send a message, the App transmits to our servers: the message text, earlier turns from that same conversation so the reply makes sense, which persona you selected, which “malfunctions” you enabled, your device identifier, and whether your subscription is active. Our servers pass this to our AI provider, which generates the response. The App also sends your first message in a conversation to generate a short title for it, and — if you use Fact Check — sends the answer being “checked”.

Memory. The App may derive short statements about you from your messages and store them on our servers against your device identifier, so it can refer back to them. These statements are generated for comedic effect and are frequently untrue. You can view them in the App, delete them one at a time, or delete all of them at once.

Conversation history. Your chats are stored locally on your device. We do not keep a copy of your conversation history on our servers beyond what is described above. Deleting the App deletes this local history.

Subscription status. Purchases are processed by Apple. We use RevenueCat to tell us whether a subscription is active for your installation. We never receive or store your card number, billing address, or Apple ID credentials. RevenueCat assigns its own anonymous identifier for this purpose.

Technical and log data. Like any internet service, our servers and hosting provider process standard request data — IP address, timestamp, and general device/browser information — to deliver responses, enforce usage limits, and protect against abuse.

Settings stored on your device. Preferences such as your haptics and notification toggles, and the counter that shows how many free messages you have left today, are stored only on your device and are not sent to us.

3. What we do not collect

We do not collect or ask for:

• your name, email address, phone number, postal address, or date of birth;

• an account or password — there is no sign-up and no login;

• your contacts, photos, calendar, microphone, camera, or precise or approximate location;

• your advertising identifier (IDFA). The App does not ask for tracking permission because it does not track you.

We do not show ads. We do not use third-party analytics, attribution, or crash-reporting SDKs. We do not track you across other apps or websites. We do not sell or share your personal information, and we never have.

4. How we use information

• To generate replies. Your message and its conversation context are processed so the App can produce an answer, a title, or a “fact check” verdict.

• To run the memory feature. To store and return the statements the App has generated about your device, and to delete them when you ask.

• To apply usage limits. To count daily usage against your device identifier so free and paid tiers work, and to return the correct limit status.

• To provide subscriptions. To confirm whether a paid subscription is active and unlock the corresponding features.

• To keep the service working and safe. To fix faults, prevent abuse, fraud, and automated attacks, and maintain security.

• To comply with law. Where we are legally required to retain or disclose information.

We do not use your messages to build a profile of you for advertising, and we do not use them to train our own models.

5. Legal bases (UK/EU users)

Where the UK GDPR or EU GDPR applies, we rely on:

• Performance of a contract — to deliver the App you asked for, including generating responses and providing subscription features;

• Legitimate interests — to keep the service secure, prevent abuse, enforce usage limits, and fix problems, balanced against your rights;

• Legal obligation — where retention or disclosure is required by law.

Much of what we handle is not readily identifiable to a person. Where information does not identify you and we cannot link it to you, some data-protection rights may not apply.

6. Who we share information with

We do not sell your information. We share it only with the service providers below, who process it on our behalf under their own terms and security obligations:

ProviderWhat they processWhyAnthropicYour message and its conversation contextGenerates the App’s responses. Under their commercial terms, inputs and outputs are not used to train their models.CloudflareRequest data, IP address, device identifier, memory recordsHosts and runs our backend, and protects it from abuse.RevenueCatAnonymous subscriber identifier and purchase statusTells the App whether a subscription is active.ApplePayment and purchase informationDistributes the App and processes all payments. We never see your payment details.

We may also disclose information if required by law, court order, or a valid legal request, or to protect the rights, safety, or property of users, the public, or us. If our business is transferred, information may pass to the acquirer, subject to this Policy.

7. International transfers

Our service providers operate globally, so information may be processed in countries outside the one you live in, including the United States. Where the law requires it, transfers are made under appropriate safeguards such as standard contractual clauses.

8. How long we keep information

• Memory records — kept until you delete them in the App, or until they are removed as part of routine maintenance.

• Usage counters — kept only as long as needed to enforce the daily limit; they reset on a rolling daily basis.

• Messages sent for a reply — processed to generate the response; we do not maintain a permanent archive of your conversations on our servers.

• Server and security logs — kept for a short period for security and troubleshooting, then deleted or aggregated.

• Conversation history on your device — kept until you delete the conversation or the App.

9. Your choices and rights

Inside the App you can, at any time and without contacting us:

• delete any individual memory, or wipe all of them at once;

• delete a conversation, or delete the App entirely, which removes your local history and your device identifier.

Depending on where you live, you may also have the right to access the information we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and complain to your local data-protection authority. If you are in California, you have the right to know, delete, and correct personal information, and to opt out of its sale or sharing — we do not sell or share it, so there is nothing to opt out of. We will not discriminate against you for exercising any right.

To make a request, email dumbo@getdumb.app. Because we hold no name or email address, we can normally only locate your data using your device identifier, so we may ask you to make the request from the device in question. If you have already deleted the App, we may be unable to link any data to you — which also means it is no longer identifiable to you.

10. Children

The App is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has used the App and provided information, contact dumbo@getdumb.app and we will delete it.

11. Security

All communication between the App and our servers uses encrypted HTTPS connections. Access to our backend is restricted, and the App itself contains no keys or credentials that could expose other users’ data. No system is perfectly secure, so we cannot guarantee absolute security — please do not send confidential information to the App. Because the App has no accounts, there is no password of yours for anyone to steal.

12. Changes to this Policy

We may update this Policy as the App changes. If a change is material, we will give reasonable notice in the App or on the website before it takes effect, and we will always update the “Last updated” date at the top. Continuing to use the App after a change takes effect means you accept the updated Policy.

13. Contact

Privacy questions, data requests, and complaints:

Daniel Onadipe
dumbo@getdumb.app