Privacy Policy — Dude AI

Last updated: April 14, 2026

CAIO Studio ("we", "us", "our") operates the Dude AI app. This policy explains what information we collect, how we use it, who we share it with, and your rights. It is designed to comply with the App Store Review Guidelines (including 5.1.1 and 5.1.2), the GDPR, and the CCPA.

1. Information We Collect

Account

• Apple user identifier (from Sign in with Apple)
• Name and email (may be a private relay address if you choose "Hide My Email")
• Preferred language, occupation, personality preferences

Conversations & Memory

• Messages you send to Dude and responses you receive
• AI memories automatically extracted from your conversations (facts, preferences, events)
• Mood logs and daily streaks

Device & Diagnostics

• APNs push notification token
• Device model, iOS version, app version
• Crash logs and basic diagnostics

Optional integrations (with your explicit permission)

• Calendar events (today's appointments summary)
• Contacts (upcoming birthdays only)
• Reminders (pending tasks summary)
• Location (city name only — used for weather context)

Dude AI does not collect raw HealthKit data, photos from your library, precise coordinates, or browsing history.

2. How We Use It

• To generate AI responses in character (see section 4 — Third-Party AI)
• To personalize conversations using memories and mood
• To authenticate you and secure your account
• To deliver push notifications you have enabled
• To process and validate App Store subscription receipts
• To fix bugs and improve reliability

3. Data Storage & Security

Your data is stored on our servers located in the European Union (Germany). All communication uses HTTPS (TLS) encryption. Messages, memories, and account data are stored in a PostgreSQL database with encryption at rest. Access to production systems is restricted and audited.

4. Third-Party AI — Anthropic Claude

Dude AI is powered by Claude, a large-language-model AI developed by Anthropic, PBC. Whenever you send a message to Dude, the following data is transmitted over an encrypted HTTPS connection to Anthropic's API so that Claude can generate a response:

• The message you are sending right now
• A short history of your recent conversation so responses stay in context
• A system prompt describing Dude's personality and your personalization settings
• Optional integration summaries you have chosen to enable (e.g. "Today's events: meeting at 2 pm") — never raw data
• Your first name, preferred language, and chosen personality style

The following are never sent to Anthropic: your email, Apple user identifier, payment or subscription information, device token, or raw location coordinates.

Anthropic is the recipient of this data. Under Anthropic's API terms, your messages are not used to train Anthropic's models. Anthropic may retain data for a short period for abuse monitoring and then deletes it. You can review Anthropic's privacy practices at anthropic.com/legal/privacy.

Consent. Before you use Dude AI for the first time, the app shows a screen describing this data sharing and asks for your explicit consent. If you do not consent, you cannot use the app. You can withdraw consent at any time by deleting your account in Settings → Delete Account.

5. Other Service Providers

• Apple — Sign in with Apple, App Store subscriptions, APNs push notifications
• Cartesia — Text-to-speech voice generation (English only). The text of the message is sent; voice audio is streamed back.
• Hetzner — EU-based hosting for our backend servers

We share the minimum data necessary with these providers. We do not share your data with anyone else except as required by law.

6. Data Retention & Deletion

Your conversations and memories are kept as long as your account is active. You can delete individual memories in the Memory view, or delete your entire account with all data in Settings → Delete Account. Deletion is permanent and cannot be undone.

7. Your Rights (GDPR & CCPA)

• Access the data we hold about you
• Correct or delete your data
• Export your conversations and memories
• Opt out of push notifications in iOS Settings
• Withdraw consent by deleting your account
• Lodge a complaint with your local data protection authority

To exercise any right, contact office@caiostudio.eu.

8. Children

Dude AI is rated 17+ and is not intended for children under 17. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. We will update the "Last updated" date above, and material changes will be announced in the app. Continued use after an update means you accept the revised policy.

10. Contact

Email: office@caiostudio.eu
Company: CAIO Studio
Website: dudeai.caiostudio.eu