# Data and privacy

## What is processed

No account is required. Technical identifiers are pseudonymised, but the content of your messages may identify you. Avoid names, contact details or sensitive information that your request does not need. Your request, details and generated answers are processed on the server to clarify the dilemma, compare options and check safety. The microphone is optional: audio is sent for transcription, processed in memory and released, with no audio file kept by dilem. Sound level also drives the halo and stopping after a pause. Transcription preserves the languages spoken, including mixed languages, without a translation request. A signed visitor cookie needed for fair use is kept for 90 days and renewed. The security session lasts two hours. Technical dilemma links expire after 90 days of inactivity. To put dates and searches in context, AI preparation and ranking also receive the server time, browser time zone and country estimated from the IP address, when available. A different country specified in the dilemma takes priority; the IP address itself is not added to this context.

## Models and services

Soniox receives audio for real-time dictation with stt-rt-v5. On a technical failure, the same audio may be transcribed again by OpenAI with gpt-live-transcribe. OpenAI receives text for gpt-6-luna and incoming or generated text for omni-moderation-latest. As a fallback, if our main model is unavailable, the request may be processed by Umans using DeepSeek V4 Flash. Jev, typesafe/jev-1.14, receives the original request, details and the dilemma's options through OpenRouter to weigh them. Firecrawl receives a context-derived search only when external facts are needed; its instructions omit personal identifiers.

## Provider guarantees

Soniox processes dictation in the United States. Its real-time API does not retain audio or transcripts and does not use them to train its models. Technical and billing metadata are retained separately.

The OpenAI API project uses Zero Data Retention. Conversations are not used for model training. Moderation retains neither content nor application state.

Jev and its provider TypeSafe do not use your prompts to train their models and do not retain them.

[Resend ↗](https://resend.com/legal/privacy-policy)[Soniox ↗](https://soniox.com/docs/security-and-privacy)[OpenAI ↗](https://developers.openai.com/api/docs/guides/your-data)[OpenRouter ↗](https://openrouter.ai/privacy)[TypeSafe ↗](https://typesafe.ai/legal/privacy-policy)[Jev 1.14 ↗](https://openrouter.ai/typesafe/jev-1.14)[Firecrawl ↗](https://www.firecrawl.dev/privacy-policy)[Latitude ↗](https://latitude.so/privacy)[OVHcloud ↗](https://www.ovhcloud.com/en/personal-data-protection/)[Cloudflare ↗](https://www.cloudflare.com/privacypolicy/)

## Private diagnostics: 30 days

Latitude keeps text exchanges (requests, details, transcripts and answers) and metadata for stages, models, usage, duration, errors and pseudonymous identifiers in a private project accessible to the operator for 30 days. An encrypted copy of the same diagnostics is also kept for 30 days on the dilem server, accessible to the operator. This retention is part of the service, based on Etienne Debost’s legitimate interest in checking appropriate use, diagnosing and improving the service. No raw audio or secrets are exported. This processing is separate from Soniox, OpenAI and TypeSafe guarantees.

## On your device and on the server

History is limited to twenty dilemmas and saved in this browser with your preferences, without sync or application encryption. Anyone using this browser can read it. The technical session cookie expires after two hours. Voluntary feedback keeps only an opaque result ID, a session fingerprint, a helpful/not helpful choice and an optional predefined reason for 30 days after the result. Clearing history removes local data, not Latitude traces or feedback already sent. Private aggregate usage and cost reports are kept without automatic deletion, without conversation text or individual identifiers.

## Optional newsletter

The dedicated form requests news about the dilem app by email at a variable frequency. Clicking “Sign me up” explicitly requests these emails; using the app does not subscribe you. The subscription is active immediately, with no email confirmation. Format, DNS and disposable domain checks prove neither mailbox existence nor ownership. Your address is encrypted on the server with a separate fingerprint for deduplication. Request date, text version, language and source are recorded without linking your dilemmas or browser identity. Resend receives the address and welcome message containing a secret link to unsubscribe without an account, through an explicit action. No automated campaigns are sent. The address is retained while subscribed; unsubscribing immediately removes the address and token from active data. Inactive metadata expires after 30 days; a suppression fingerprint is kept for three years to reconcile backups before any future sending. Anonymous subscription and unsubscribe counts are kept for 400 days. Backups have their own cycle and must be reconciled upon restoration. This is separate from the 30-day conversation retention. Clearing history does not unsubscribe you. Contact: contact@dilem.si.

## Feedback and reports

Free-form feedback, comments and only the response you choose to report are sent to the publisher to improve the app and address issues. An email address is optional and used only to reply. These data and processing notes are encrypted and retained by the service for 30 days, then removed from active storage. No complete history, screenshot or audio is attached automatically, and no AI processing or newsletter subscription is triggered.

## Hosting and delivery

OVHcloud hosts the server. Cloudflare hosts the interface, relays exchanges, protects access and measures audience without dilemma content or audio. IP addresses and technical connection information are processed for delivery and security. Soniox, Umans, OpenRouter, Firecrawl, Latitude and hosting providers apply their own policies; some processing may occur outside the European Union.

## Controller, contact and rights

Service operator and data controller: Etienne Debost. To request access, correction or deletion, object to processing, or exercise other applicable rights, write to [contact@dilem.si](mailto:contact@dilem.si). Where possible, give an approximate date and technical identifiers you hold, without copying your dilemma.

[HTML](https://dilem.si/en/privacy/)