Privacy Notice

Date of Last Revision: 8 January 2026

This Privacy Policy explains how dondi.ai (“we”, “us”, “our”, or “Platform”) collects, uses, processes, discloses, and protects your personal information when you visit or use the dondi.ai website, mobile apps, services, features, or related platforms (collectively, the “Services”). By accessing or using the Services, you consent to the practices described in this Privacy Policy.

This policy applies to all users, including visitors who browse the Services without registering (“Visitors”) and users who create accounts or pay for subscriptions (“Users”).

1. Definitions

For purposes of this Privacy Policy, the following terms have the meanings set forth below:

Personal Data: Any information that identifies or can reasonably be used to identify an individual directly or indirectly, such as name, email address, location, account identifiers, content you submit, or metadata.

Processing: Any operation performed on Personal Data, including collection, storage, organization, disclosure, use, analysis, deletion, or transfer.

Consent: Freely given, specific, informed, and unambiguous indication of your preferences and agreement to the processing of Personal Data.

Controller: The party that determines why and how your Personal Data is processed. For the Services, dondi.ai acts as the Controller under applicable privacy laws.

Visitor: A person who accesses the Services without creating an account.

User: A person who has created an account on the Services and may have provided Personal Data.

2. Information We Collect

We collect different types of information from Visitors and Users, depending on how you interact with the Services. This includes:

2.1 Account Registration Data

When you create a dondi.ai account, we may collect:

• Email address
• Encrypted password
• Display or screen name
• Optional profile data (such as gender or age range)
• Authentication method (e.g., email, social login)

2.2 Usage and Interaction Data

To operate and improve the Services, we collect:

• IP address
• Browser or device type
• Operating system
• Session data and activity logs
• Dates and times of access
• Content you submit and AI responses generated during your use

2.3 Content Data

When you interact with AI companions or generate content, the following may be processed:

• Prompts and messages you enter
• AI outputs (text, images, audio, video)
• Preferences you select for AI personalities
• Metadata associated with your interactions

2.4 Payment and Transaction Data

If you make purchases (e.g., subscription or tokens), we may collect:

• Billing name
• Email
• Payment timestamps
• Payment method metadata (such as card brand and transaction identifiers processed by third-party service providers)

2.5 Support and Communication Data

When you contact support or send inquiries, we may process:

• Your message content
• Contact information used to respond to your request
• Technical information relevant to resolving issues

3. How We Use Your Information

We use Personal Data for purposes that may include:

Provision of Services: To register your account, maintain your profile, operate AI features, generate content, and support your use of the Services.

Service Improvements and Development: To analyze usage trends, evaluate performance, and develop new features, systems, or functionality.

Safety and Moderation: To detect misuse, enforce policies, protect the platform, and ensure compliance with applicable laws.

Communications: To send transactional messages, support responses, updates, and (with your consent where required) marketing and promotional information.

Payment Processing: To facilitate billing, manage subscriptions, and handle refunds or disputes through secure third-party payment processors.

Legal and Compliance: To meet legal obligations, respond to legal requests, detect fraud, and enforce our Terms.

4. Legal Bases for Processing

Where required by applicable data protection laws, we rely on one or more legal bases to process your information, including:

Contractual Necessity: Processing is necessary to fulfill our agreement to provide the Services—for example, to create your account or deliver subscribed features.

Consent: When you explicitly agree to processing (such as optional marketing communications).

Legitimate Interests: To improve the Services, ensure platform security, or communicate service-related messages, as long as such interests do not override your privacy rights.

5. Your Choices

Where applicable, you may choose:

• To update or correct your account information
• To opt out of marketing communications
• To delete certain content you submitted
• To manage cookie preferences

We explain these rights in more detail in the upcoming parts of this policy.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, enhance user experience, and provide analytics insights.

dondi.ai uses cookies and similar tracking technologies such as pixels, local storage, and SDKs (collectively, “Cookies”).

6.2 Types of Cookies We Use

We may use the following categories of Cookies:

Essential Cookies
These Cookies are necessary for the operation of the Services, including account login, security, and basic functionality. Without these Cookies, the Services may not function correctly.

Performance and Analytics Cookies
These Cookies help us understand how users interact with the Services, such as pages visited, session duration, error logs, and feature usage. This information allows us to improve performance and usability.

Functional Cookies
These Cookies remember your preferences, settings, and choices (such as language or interface preferences) to provide a more personalized experience.

Advertising and Marketing Cookies
Where permitted by law, these Cookies may be used to deliver relevant advertisements, measure marketing effectiveness, and limit the frequency of promotional messages.

6.3 Managing Cookies

You may control or disable Cookies through your browser or device settings. Please note that disabling certain Cookies may impact the functionality or availability of parts of the Services.

Where required by law, we provide cookie consent mechanisms allowing you to manage your preferences.

7. Sharing and Disclosure of Personal Data

We do not sell your Personal Data. However, we may share or disclose information in the following circumstances:

7.1 Service Providers and Partners

We may share Personal Data with trusted third-party service providers who perform services on our behalf, including:

• cloud hosting and infrastructure providers
• payment processors and billing platforms
• analytics and performance monitoring services
• customer support and communication tools
• content moderation and security partners

These providers are authorized to process Personal Data only as necessary to perform their services and are contractually obligated to protect your data.

7.2 AI and Technology Partners

Your Content and interaction data may be processed using AI systems and related technologies operated by us or our technology partners.

This processing may include:

• AI model training and improvement
• safety and compliance checks
• quality assurance and optimization

Where required, such processing is performed in accordance with applicable data protection laws.

7.3 Legal Obligations

We may disclose Personal Data where required to do so by law, regulation, legal process, court order, or governmental request.

This may include disclosure to law enforcement or regulatory authorities where necessary to:

• comply with legal obligations
• protect the rights, safety, or property of users or others
• prevent fraud or illegal activity

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or similar transaction, Personal Data may be transferred as part of the transaction.

If such a transfer occurs, we will take reasonable steps to ensure your information remains protected and used in accordance with this Privacy Policy.

8. International Data Transfers

dondi.ai operates globally, and your information may be processed or stored in countries outside your country of residence.

When transferring Personal Data internationally, we take appropriate measures to ensure adequate safeguards, such as:

• contractual protections
• recognized data transfer mechanisms
• compliance with applicable data protection laws

9. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

• providing and maintaining the Services
• complying with legal obligations
• resolving disputes
• enforcing agreements

Retention periods may vary depending on the nature of the data, legal requirements, and operational needs.

10. Your Privacy Rights

Depending on your location and applicable data protection laws, you may have certain rights regarding your Personal Data.

These rights may include the following:

10.1 Right to Access

You have the right to request confirmation of whether we process your Personal Data and to request access to the Personal Data we hold about you.

This includes the right to receive information about:

• the categories of Personal Data processed
• the purposes for processing
• the recipients or categories of recipients
• the retention period

10.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete Personal Data.

You may update certain account information directly through your account settings or by contacting us.

10.3 Right to Erasure (“Right to Be Forgotten”)

You may request deletion of your Personal Data where:

• the data is no longer necessary for its original purpose
• you withdraw consent where consent is the legal basis
• the data has been unlawfully processed
• deletion is required by law

Please note that certain data may be retained where required for legal, regulatory, security, or contractual purposes.

10.4 Right to Restrict Processing

You may request restriction of processing in certain circumstances, such as when:

• the accuracy of the data is contested
• processing is unlawful but deletion is opposed
• the data is no longer needed, but you require it for legal claims

When processing is restricted, we will store the data but not actively process it unless legally permitted.

10.5 Right to Data Portability

Where applicable, you may request to receive your Personal Data in a structured, commonly used, and machine-readable format, or request that it be transferred to another service provider where technically feasible.

10.6 Right to Object

You may object to processing of your Personal Data where processing is based on legitimate interests, including profiling or direct marketing.

If you object to marketing communications, we will stop processing your data for such purposes.

10.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

10.8 Exercising Your Rights

To exercise your privacy rights, you may contact us using the details provided in the “Contact Us” section of this Privacy Policy.

We may require verification of your identity before fulfilling your request to protect your privacy and security.

11. Children’s and Underage Privacy

The Services are strictly intended for adults only.

dondi.ai does not knowingly collect or process Personal Data from individuals under the age of eighteen (18) or the age of legal majority in their jurisdiction.

If we become aware that Personal Data has been collected from a minor:

• the data will be deleted promptly
• the associated account will be terminated
• appropriate safeguards will be implemented

Parents or guardians who believe that a minor has provided Personal Data should contact us immediately.

12. Automated Decision-Making and Profiling

dondi.ai may use automated systems, including AI-based processing, to:

• personalize user experience
• moderate content
• detect fraud or abuse
• enforce platform policies

These automated processes do not produce legal or similarly significant effects on users without appropriate safeguards.

13. Security Measures

We implement reasonable technical and organizational measures to protect Personal Data, including:

• encryption
• access controls
• secure storage systems
• monitoring for unauthorized access

However, no system can be completely secure, and we cannot guarantee absolute security of your information.

You are responsible for maintaining the confidentiality of your login credentials.

14. Data Breach and Security Incident Handling

In the event of a data breach or security incident involving Personal Data, dondi.ai will:

• promptly assess the scope and impact of the incident
• take reasonable steps to contain and mitigate the breach
• notify affected users and relevant authorities where required by applicable law
• document the incident and corrective actions taken

Despite our efforts to protect Personal Data, you acknowledge that no method of transmission or storage is entirely secure.

15. Do Not Track Signals

Some web browsers offer a “Do Not Track” (“DNT”) feature.

At this time, dondi.ai does not respond to DNT signals due to the lack of a consistent industry standard. We continue to monitor developments in this area and may update our practices accordingly.

16. Region-Specific Privacy Disclosures

16.1 European Economic Area (EEA) & United Kingdom

If you are located in the EEA or UK, you may have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including:

• the right to lodge a complaint with a supervisory authority
• the right to object to certain processing activities
• the right to restrict or limit processing

We process Personal Data in accordance with lawful bases such as consent, contractual necessity, and legitimate interests.

16.2 United States (California and Other States)

If you are a California resident or located in a U.S. state with applicable privacy laws, you may have rights regarding:

• access to Personal Data
• deletion of Personal Data
• correction of inaccurate information
• opting out of certain data uses

dondi.ai does not sell Personal Data as defined under applicable U.S. privacy laws.

16.3 Other Jurisdictions

Users located outside the EEA, UK, or United States may have rights under local data protection laws. We aim to honor such rights where applicable and lawful.

17. Data Retention and Deletion

We retain Personal Data only for as long as necessary to:

• provide and maintain the Services
• comply with legal obligations
• resolve disputes
• enforce agreements and policies

When Personal Data is no longer required, it is securely deleted or anonymized in accordance with our internal retention practices.

18. Third-Party Services and External Links

The Services may contain links to third-party websites, tools, or services.

dondi.ai is not responsible for:

• the privacy practices of third-party services
• the content or security of external websites

We encourage you to review the privacy policies of any third-party services you choose to access.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes become effective immediately upon publication on the Services. The “Date of Last Revision” at the top of this document reflects the most recent update.

Your continued use of the Services after changes are posted constitutes acceptance of the revised Privacy Policy.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us via:

• the support or contact features available on the Services
• the official support email listed on the dondi.ai website

We will respond to privacy-related inquiries within a reasonable timeframe, subject to verification requirements.

21. Entire Privacy Agreement

This Privacy Policy, together with any related notices and referenced policies, constitutes the entire agreement between you and dondi.ai regarding the processing of Personal Data.

If any provision of this Privacy Policy is found unenforceable, the remaining provisions shall remain in full force and effect.