Privacy Policy

When you create a Dolos account, we collect your email address and an encrypted password. If you enable biometric authentication (Face ID or Touch ID), a biometric identifier is stored locally on your device and is never transmitted to our servers. We also store your display name, language preference, timezone, and UI settings.

We use the information we collect to: provide and improve the Dolos AI service; process your chat messages and generate AI responses; store and retrieve your documents for semantic search; deliver voice transcription and text-to-speech features; process payments and manage subscriptions; send transactional emails and push notifications; prevent abuse, fraud, and unauthorized access; and respond to support requests.

The Dolos iOS application may request access to the following device capabilities. Each permission is optional and requested only when you use the related feature:

• Camera: Used to capture photos for image analysis within chat conversations.
• Microphone: Used for voice input, audio recording, and real-time voice mode conversations.
• Photo Library: Used to select existing photos or videos from your device for analysis or upload.
• Face ID / Touch ID: Used for biometric app lock to protect your account. Biometric data stays on your device.
• Push Notifications: Used to notify you of completed tasks, AI responses, and important updates. You can disable this at any time in iOS Settings.

All AI inference in Dolos runs on Forensic Intelligence's own servers using self-hosted open-source models. Your data is never sent to third parties for model training. We do not use your conversations, documents, files, or any user content to train, fine-tune, or improve AI models. Your data is yours — we process it solely to provide you with the service.

Forensic Intelligence implements complete end-to-end encryption (E2EE) across every communication channel. At connection time, your browser negotiates a per-session AES-256-GCM key via RSA-OAEP-256 (3072-bit) key exchange. Every message you send, every AI response you receive, every file you upload or download, every API response, and every real-time event is encrypted with this session key before crossing the network. This encryption operates at the application layer — above TLS — so your data remains protected even through TLS-terminating infrastructure like CDN proxies. Files are encrypted in your browser before upload and re-encrypted with per-file keys for secure downloads. Sensitive database fields are independently encrypted with AES-256-GCM before storage.

Your data is stored on Forensic Intelligence servers with encrypted storage at rest. Chat messages, files, and documents are retained as long as your account is active. Each user has a configurable storage quota (default 2 GB). When you delete a chat, message, or file, it is permanently removed from our servers and vector databases.

Subscriptions are processed by Stripe. We do not store or have access to your full credit card number. Stripe handles all payment data in compliance with PCI DSS standards. You can manage or cancel your subscription through the Stripe Customer Portal.

Push notifications are optional. If you grant permission, we store your device token to deliver notifications about completed AI tasks and system updates. You can disable push notifications at any time through your device's Settings app. Device tokens are automatically removed when you log out or delete your account.

Dolos is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will promptly delete the account and all associated data.

All administrative actions are logged in an audit trail. Users can report inappropriate content or concerns through the in-app support system. We reserve the right to review and take action on reports of misuse or violations of our Terms of Service.

As a Singapore-registered company, we comply with the Personal Data Protection Act (PDPA) and applicable international privacy laws. You have the right to: access, correct, or delete your personal data; withdraw consent for optional data processing; request a copy of your data; lodge a complaint with the relevant data protection authority.

For privacy questions, data requests, or concerns, contact us at [email protected] or via the Contact page.