Privacy Notice

This Privacy Notice for AURYTE LIMITED (“Company,” “we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”). We are a company registered in England and Wales (Company No. 17288539) with our registered office at 66 Paul Street, London, EC2A 4NA, United Kingdom. This Privacy Notice applies to all information collected when you:

• Download, install, access, or use our mobile application, Dumpt (the “App”) — an 18+ entertainment application that returns an AI-generated “verdict” on a chat screenshot or text you choose to submit;
• Visit, browse, or interact with our website at https://dumpt.app (the “Site”), or any website of ours that links to this Privacy Notice;
• Create an account, make a purchase, contact our support team, or otherwise engage with us in any related way, including sales, marketing, or events.

We are committed to processing your personal information responsibly and to being transparent about what we do. Reading this Privacy Notice in full will help you understand your privacy rights and the choices available to you. If you do not agree with our policies and practices, please do not use the Services. If you have any questions or concerns after reading it, please contact us at support@dumpt.app.

Summary of key points

This summary highlights the most important points of our Privacy Notice. You can find full detail on each topic by selecting the relevant entry in the table of contents below.

What personal information do we process? When you use the Services, we may process the chat screenshots or text you voluntarily submit, your account details, your purchase and subscription information, technical and usage data, marketing-attribution data, and a hashed version of your IP address. The single most important point is this: we do not store the screenshots or chat content you submit. That content is transmitted, processed solely to generate your verdict, and then permanently discarded. By design, our databases contain no column capable of holding an image or message text — only derived, non-content values such as scores, flag counts, and timestamps are retained.

Do we process sensitive personal information? We do not intentionally collect or process special-category (sensitive) personal information. Dumpt is intended exclusively for adults aged 18 and over.

Do we use artificial intelligence? Yes. The chat you submit is processed by a third-party AI provider, Google (Gemini API), strictly to generate your verdict. It is not retained by us, and it is not used to train AI models. AI output is for entertainment only and may be inaccurate.

How do we keep your information secure? We apply appropriate technical and organisational safeguards, and we deliberately minimise what we store. No system can be guaranteed to be perfectly secure.

What are your rights? Depending on where you live, you may have rights to access, correct, delete, port, or object to the processing of your personal information. You can permanently delete your account and all associated data at any time, directly within the App, by selecting Settings → Delete Account.

1. What information do we collect?

Personal information you disclose to us

In Short: We collect the personal information that you voluntarily provide to us.

We collect personal information that you provide to us directly when you register for an account, express interest in our products or Services, participate in activities within the App, make a purchase, or contact us for support. The categories of personal information we may collect in this way include your email address; your username or display name; and the screenshots or text of conversations that you choose to submit in order to receive a verdict. The content you submit is treated with particular care: it is processed only for the purpose of generating your verdict and is then discarded, and is never written to long-term storage (see Section 8, “How long do we keep your information?”). We ask that all personal information you provide be true, complete, and accurate, and that you notify us of any changes.

You should be aware that the conversations you choose to submit may, by their nature, contain information about you or third parties that could be considered sensitive (for example, references to relationships or personal circumstances). Because this content is processed transiently and never stored by us, and is used solely to generate your verdict, we do not treat it as part of our retained records; however, you remain responsible for ensuring you have the right to submit any conversation, as described in our Terms of Service.

Sensitive information. We do not intentionally collect or process sensitive (special-category) personal information for our own purposes.

Payment and subscription data. All purchases are processed by Apple through the App Store and, where applicable, by our subscription-management provider, RevenueCat. We do not collect, see, or store your payment-card details. We receive and retain only your subscription status and the transaction identifiers necessary to provide, restore, and protect your access to paid features.

Social-media login data. We offer the ability to register and sign in using your Apple ID or Google account. If you choose this option, we receive limited profile information from that provider, typically your name and email address, as described in Section 7.

Application data. If you use the App, we may, with your permission, access certain features of your device. This may include your camera and photo library (so that you can capture or select a conversation to analyse) and your notification settings (so that we can send you reminders and account-related alerts). You can grant or withdraw these permissions at any time through your device’s settings; withdrawing a permission may limit related features.

Information collected automatically

In Short: Some information — such as device characteristics and usage data — is collected automatically when you use the Services.

When you access or use the Services, we and our service providers automatically collect certain information that does not, on its own, reveal your specific identity. This includes technical data such as your device type and operating-system version, application and device identifiers, an attribution identifier provided by AppsFlyer, and log and usage information describing how and when you interact with the Services. We also collect your Internet Protocol (IP) address, which we store only in a hashed (irreversible) form and use exclusively to operate the Services securely, to enforce usage limits, and to prevent fraud and abuse. This information is primarily needed to maintain the security and operation of the Services and for our internal analytics and reporting.

2. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, to communicate with you, for security and fraud prevention, and to comply with the law. We process your information only where we have a valid legal reason to do so.

We process the personal information we collect for a range of purposes, depending on how you interact with the Services. In particular, we process your information: to create and authenticate your account and to manage your profile; to deliver the Services you request, including transmitting your submission for AI processing and returning your verdict; to operate, maintain, and improve the Services and to develop new features; to process and manage your purchases, subscriptions, and any refunds; to respond to your enquiries and provide customer support; to send you administrative and service-related communications, such as changes to our terms or this notice; to protect the Services, including monitoring for, preventing, and addressing fraud, abuse, and security incidents and enforcing our usage limits; to understand how the Services are used through analytics so that we can improve them; and to comply with our legal obligations and to establish, exercise, or defend legal claims.

3. What legal bases do we rely on to process your information?

In Short: We only process your personal information where we believe it is necessary and we have a valid legal basis to do so under applicable law.

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) and the UK GDPR require us to identify the legal bases on which we rely. We may process your personal information on one or more of the following bases. We rely on your consent where you have given us clear permission to process your information for a specific purpose, such as analytics or marketing attribution; you may withdraw your consent at any time. We rely on the performance of a contract where processing is necessary to provide the Services you have requested or to take steps at your request before entering into a contract. We rely on our legitimate interests where processing is reasonably necessary to achieve a lawful business purpose — such as keeping the Services secure, preventing fraud, and improving our products — provided those interests are not overridden by your rights and freedoms. We rely on compliance with legal obligations where processing is necessary to meet our obligations under applicable law, regulation, or court order. Finally, we may rely on the protection of vital interests where processing is necessary to protect the vital interests of you or another natural person. If you are located in Canada, we process your information with your express or implied consent, except where collection and use without consent are permitted or required by law.

4. When and with whom do we share your personal information?

In Short: We may share information with the third-party service providers that help us run the Services, and in certain legal situations. We do not sell your personal information.

We share your personal information only where necessary and with appropriate safeguards. We engage trusted vendors, service providers, and contractors who process information on our behalf and only on our instructions. These include: Google (Gemini API), which processes the conversation you submit in order to generate your verdict (transiently, without retention); Cloudflare, which provides our cloud hosting, database, and storage for derived (non-content) data; Google / Firebase, which provides authentication and account management; AppsFlyer, which provides marketing and install attribution; PostHog, which provides product analytics; Apple, which processes App Store purchases and billing; and RevenueCat, which manages subscription entitlements. Each of these providers is permitted to use your information only to perform services for us. We may also disclose your information where we believe in good faith that disclosure is required to comply with applicable law, a legal process, or a governmental request; to enforce our Terms of Service; to detect, prevent, or otherwise address fraud, security, or technical issues; or to protect the rights, property, or safety of our company, our users, or the public. In the event of a merger, acquisition, financing, reorganisation, or sale of all or part of our assets, your information may be transferred as part of that transaction, subject to this Privacy Notice. We do not sell your personal information for money, and we do not share it for cross-context behavioural advertising except as described in Sections 5, 13, and 14.

5. Do we use cookies and other tracking technologies?

In Short: Our website uses cookies and similar technologies; our app uses analytics and attribution tools governed by your App Tracking Transparency choice.

Our website uses cookies and similar tracking technologies (such as pixels and web beacons) to operate and secure the Site, to remember your preferences, and to understand how the Site is used. Strictly necessary cookies are used to provide the Site; analytics and any advertising cookies are used only with your consent, which you can give, refuse, or change at any time through our cookie-consent banner. Our mobile application does not use cookies. Instead, it uses software development kits for analytics (PostHog) and attribution (AppsFlyer) and operates within Apple’s App Tracking Transparency framework, meaning we will only access your device’s advertising identifier for cross-app tracking if you grant permission when prompted. We also honour the Global Privacy Control signal on our website where required (see Section 13).

6. Do we offer artificial intelligence-based products?

In Short: Yes. We offer features powered by artificial intelligence, provided through a third-party AI provider.

A core part of the Services is the generation of an entertainment “verdict” using artificial intelligence (“AI Products”). We provide these AI Products through a third-party provider, Google (the “AI Service Provider”), via the Gemini API. When you submit a conversation, your input is transmitted to the AI Service Provider solely to generate your output (the verdict), after which it is discarded. We do not retain your input or output for our records, and we do not use your input or output to train, fine-tune, or develop AI models. You acknowledge and agree that AI-generated output is provided for entertainment purposes only; it may be inaccurate, incomplete, offensive, or otherwise unsuitable, and it must not be relied upon as professional, legal, medical, psychological, or relationship advice. Your use of the AI Products is also subject to any applicable terms of the AI Service Provider.

7. How do we handle your social logins?

In Short: If you register using a social account, we receive limited profile information from that provider.

If you choose to register or authenticate using your Apple ID or Google account, the relevant provider may share certain profile information with us — typically your name and email address, and any other information you have made available and authorised them to share. We use that information only to create and secure your account and as otherwise described in this Privacy Notice. We do not control, and are not responsible for, the privacy practices of these third-party providers; we encourage you to review their respective privacy policies.

8. How long do we keep your information?

In Short: We keep your information only as long as necessary, and we do not keep your submitted conversations at all.

The screenshots and chat text you submit are not retained: they are processed to generate your verdict and then permanently discarded, and are never written to persistent storage. For all other personal information, we retain it only for as long as necessary to fulfil the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (for example, to meet tax, accounting, or other legal requirements). The derived account information we hold — such as your scores, history, settings, and subscription status — is retained for as long as your account remains active. When you delete your account, we delete or anonymise that information from our active systems without undue delay; residual copies may persist briefly in routine backups before being overwritten. Hashed security identifiers and rate-limiting counters are retained only for short, rolling periods.

9. How do we keep your information safe?

In Short: We use appropriate technical and organisational measures, and we will notify you and the relevant authorities of a qualifying data breach as required by law.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the personal information we process. These include encryption of data in transit, access controls and least-privilege practices, the use of hashed identifiers, and an architecture that deliberately excludes your raw content from storage. Despite these safeguards, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security; you transmit information to and from the Services at your own risk and should access the Services within a secure environment. In the event of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, affected individuals, in accordance with applicable law (including Articles 33 and 34 of the UK and EU GDPR).

10. Do we make automated decisions about you?

In Short: The verdict is generated automatically, but it has no legal or similarly significant effect on you.

Your verdict is produced by an automated process (artificial intelligence) without human review of each individual result. However, the verdict is an item of entertainment content; it does not produce any legal effect concerning you and does not similarly significantly affect you within the meaning of Article 22 of the GDPR and UK GDPR. We do not use automated decision-making or profiling to make decisions that have legal or similarly significant effects about you. If this ever changes, we will update this Privacy Notice and, where required, obtain a valid legal basis and provide you with the rights afforded under applicable law.

11. Do we collect information from minors?

In Short: We do not knowingly collect data from, or market to, anyone under 18.

The Services are strictly intended for adults aged 18 and over. We do not knowingly collect, solicit, or market to children, and the App blocks users who indicate that they are under 18. We comply with applicable children’s privacy laws, including the United States Children’s Online Privacy Protection Act (COPPA) and the children’s-data provisions of the UK and EU GDPR. If we learn that we have collected personal information from a person under 18, we will take reasonable steps to delete that information promptly. If you believe that a minor may have provided us with personal information, please contact us at support@dumpt.app.

12. What are your privacy rights?

In Short: Depending on where you live, you have rights that give you greater access to and control over your personal information, and you can exercise them at any time.

Subject to applicable law, you may have the right to: request access to and obtain a copy of the personal information we hold about you; request that we correct any inaccurate or incomplete information; request that we delete your personal information; request that we restrict or object to certain processing; request the portability of information you have provided to us; and, where we rely on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may exercise any of these rights by emailing support@dumpt.app, or, for deletion, directly within the App by selecting Settings → Delete Account. We will respond to your request within the timeframe required by applicable law and may need to verify your identity before acting on it. We will not discriminate against you for exercising your rights. If you are in the EEA or UK and you believe we have processed your information unlawfully, you also have the right to lodge a complaint with your local data-protection supervisory authority — in the United Kingdom, the Information Commissioner’s Office (ico.org.uk).

13. Controls for Do-Not-Track features and Global Privacy Control

Most web browsers and some mobile operating systems and applications offer a “Do-Not-Track” (“DNT”) feature you can activate to signal that you do not want your online activities monitored. Because no uniform technology standard for recognising and honouring DNT signals has been finalised, we do not currently respond to DNT browser signals. However, some jurisdictions, including California, require us to treat the Global Privacy Control (“GPC”) signal as a valid request to opt out of the “sale” or “sharing” of personal information. Where required by law, our website honours GPC signals for this purpose. Within the App, the equivalent control is Apple’s App Tracking Transparency prompt, together with the analytics opt-out available in the App’s settings.

14. Do United States residents have specific privacy rights?

In Short: If you are a resident of certain US states, you have specific rights regarding access to, correction, and deletion of your personal information, and the right to opt out of certain processing.

If you are a resident of California (under the CCPA, as amended by the CPRA) or of another US state with a comprehensive consumer privacy law — including, among others, Virginia, Colorado, Connecticut, Utah, Texas, and Oregon — you have specific rights described in this section. The categories of personal information we collect are summarised below.

We collect this information from you directly and automatically as described in Section 1, and we disclose it to the service providers listed in Section 4 for the business purposes described in this notice. Subject to applicable law, you have the right to know what personal information we collect and how we use and disclose it; to access and obtain a copy of it; to request correction of inaccurate information; to request deletion of your personal information; and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We do not sell your personal information for money. Our use of attribution and analytics partners may constitute “sharing” or “targeted advertising” under some state laws; you may opt out at any time through Apple’s App Tracking Transparency prompt, the analytics opt-out in the App’s settings, and (on the Site) the Global Privacy Control signal and our cookie banner. We will not discriminate against you for exercising any of these rights. To submit a request, email support@dumpt.app; you may use an authorised agent to act on your behalf, and we may require verification of your identity and the agent’s authority before we act.

15. Do other regions have specific privacy rights?

European Economic Area, United Kingdom, and Switzerland. You have the rights set out in Section 12, including the right to lodge a complaint with your local supervisory authority. Because we are established in the United Kingdom and may offer the Services to individuals in the EEA, EEA users may contact us at support@dumpt.app regarding our representative arrangements under Article 27 of the EU GDPR. Canada. Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you may request access to and correction of your personal information and may, in certain circumstances, withdraw your consent; you may also make a complaint to the Office of the Privacy Commissioner of Canada. Australia and other regions. Where applicable local law grants you rights to access, correct, or complain about the handling of your personal information, we will honour those rights; please contact us at support@dumpt.app.

16. Do we use aggregated or de-identified data?

We may aggregate or de-identify personal information so that it can no longer reasonably be used to identify you — for example, to display the live count of verdicts generated, to understand usage trends, and to improve the Services. We treat such aggregated and de-identified information as non-personal information and may use and disclose it for any lawful purpose. Where we hold de-identified information, we will maintain and use it in de-identified form and will not attempt to re-identify it except as permitted by law.

17. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to remain compliant with relevant laws.

We may update this Privacy Notice from time to time, for example to reflect changes in our practices or in applicable law. The updated version will be indicated by a revised “Last updated” date and will take effect as soon as it is accessible. If we make material changes, we will take reasonable steps to notify you, such as by an in-App notice. We encourage you to review this Privacy Notice periodically to stay informed about how we protect your information.

18. How can you contact us, review, update, or delete your data?

If you have questions or comments about this Privacy Notice, or if you wish to review, update, or delete the personal information we hold about you, you may contact us by email at support@dumpt.app or by post at: AURYTE LIMITED, 66 Paul Street, London, EC2A 4NA, United Kingdom. You can delete your account and all associated data at any time within the App by selecting Settings → Delete Account, which removes your server-side records, your authentication credentials, and your locally stored data.