Privacy Policy

Last updated: July 4, 2026

Dolphy ("we", "our", or "the Service"), operated at dolphy.chat, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you sign in with Google, we receive and store the following information from your Google account:

  • Display name
  • Email address
  • Profile photo URL

We do not have access to your Google password or other Google account data.

1.2 Payment Information

Credit purchases are processed by Stripe, our third-party payment processor. We do not store your credit card number, CVV, or full payment details on our servers. We retain a Stripe customer ID and transaction records (amount, date, credits purchased) for accounting purposes.

1.3 Chat Data

Your chat conversations are stored locally on your device. Chat messages, including text and attached images, are saved in your browser's localStorage and IndexedDB. We do not store, read, or have access to your chat history on our servers. If you clear your browser data or switch devices, your chat history will be lost.

1.4 Generated Content

Images and videos you generate through the Service are processed by third-party AI providers. Generated content may be temporarily stored on third-party servers during processing but is not retained long-term by us. We store metadata about generated content (prompts, timestamps, credits used) for account management purposes.

1.5 Likeness Information

Some features let you upload photos or videos that may depict real, identifiable people (for example, animating a photo or editing an image). We treat this media with special care:

  • Consent first. Each time you upload such media, you are shown a consent prompt where you confirm the likeness is your own or that you have explicit consent from every person depicted. Uploads are not processed without this confirmation.
  • Transient face processing. To perform the generation you request, the AI models may transiently detect and analyze faces and other likeness features in your upload (for example, to animate a photo or place a person in a new scene). This analysis exists only for the duration of your generation — neither we nor our providers retain face geometry, face templates, or any other biometric identifiers from it.
  • No likeness storage. We do not store your uploaded likeness images, videos, or any biometric feature data (such as face geometry or face templates) on our servers as part of these generation features. Processing and short-term storage during generation are carried out by specialized third-party AI processing providers acting on our instructions solely for the generation you requested. These providers are not permitted to use your likeness data for any unrelated purpose, and we do not use your likeness data for any of our own business purposes. A current list of these processing providers is available on request via support@dolphy.chat.
  • What we retain. For compliance and audit purposes we retain minimal consent metadata: your account identifier (or request IP for signed-out trials), a timestamp, the consent version you accepted, the feature used, and a one-way cryptographic hash of the uploaded media. This hash is not biometric data and cannot be used to reconstruct the media or anyone's likeness.
  • Your choices. You can withdraw your consent to likeness processing, and request access to or deletion of the consent metadata we hold, at any time by contacting support@dolphy.chat. We may retain records where required by law or to establish, exercise, or defend legal claims.

1.6 Usage Data

We automatically collect certain information when you use the Service:

  • IP address
  • Browser type and version
  • Pages visited and features used
  • Timestamps of activity
  • Credit usage and transaction history

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process credit purchases and manage your account balance
  • Authenticate your identity and secure your account
  • Communicate with you about your account, purchases, or Service updates
  • Detect and prevent fraud, abuse, and violations of our Terms
  • Comply with legal obligations

3. Third-Party Services

We use the following third-party services to operate the Service. Each has its own privacy policy governing how they handle your data:

3.1 Firebase (Google)

We use Firebase for user authentication and storing account data (profile information, credit balances, transaction history). Firebase is operated by Google and subject to Google's Privacy Policy.

3.2 Stripe

We use Stripe to process payments. When you purchase credits, your payment information is handled directly by Stripe. See Stripe's Privacy Policy.

3.3 AI Content Providers

We use third-party AI providers to generate chat responses, images, and videos. Your prompts and any attached images are sent to these providers for processing. We select providers that do not retain user data beyond the processing period, but we cannot guarantee their practices. Please avoid submitting sensitive personal information in prompts.

4. Cookies

We use a minimal number of cookies:

  • Session cookie (__session): Used to maintain your authentication state and protect routes. This is a first-party cookie set with SameSite=Strict for security.
  • Firebase cookies: Set by Firebase for authentication purposes.

We use advertising and analytics pixels (Google Ads, Meta, Reddit, and other ad platforms) to measure the effectiveness of our marketing and attribute conversions to ad campaigns. Through Google's Enhanced Conversions program and similar features on other ad platforms, we share hashed (one-way encrypted) user data such as email addresses with these advertising partners to improve attribution accuracy. The raw email is never shared — only an irreversible hash. We do not sell your personal information to advertisers or any other third party.

5. Data Retention

  • Account data: Retained as long as your account is active. You can request deletion at any time.
  • Chat data: Stored locally on your device. You can clear it at any time through the Settings page.
  • Transaction records: Retained for accounting and legal compliance for up to 7 years.
  • Generated content metadata: Retained as long as your account is active.

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

  • HTTPS encryption for all data in transit
  • Secure authentication via Google OAuth
  • SameSite=Strict cookies for CSRF protection
  • Server-side API key protection

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your account and associated data.
  • Export: Request your data in a portable format.
  • Withdraw consent: Stop using the Service at any time.

To exercise any of these rights, contact us at support@dolphy.chat. We will respond to requests within 30 days.

8. Children's Privacy

The Service is for adults only. In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact support@dolphy.chat and we will take immediate action.

9. International Users

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your data may be transferred to and processed in the United States and other countries where our service providers operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@dolphy.chat.

Privacy Policy | Dolphy AI