Privacy Policy

Effective October 4, 2026, updated October 16, 2026: card payments, deletion of unused sessions together with an inactive account, team review of conversations — a separate required checkbox when you get started.

Dicamus offers AI specialists for self-help (the dicamus.com website and the Telegram bot). Here is a brief, honest explanation of what data we store, why, and how to delete it. Data controller: sole proprietor Adilet Akmatov (IP Akmatov Adilet), Kyrgyz Republic.

What we store

• An encrypted identifier instead of personal data. When you sign in through Telegram, Google, or email, we don’t store your Telegram ID, phone number, email address, or Google account — only an irreversible hash, which we use to recognize you the next time you sign in.
• What you tell us yourself: your name (any name you like), how you’d like to be addressed, gender, age, and your conversations with the specialists. From your conversations, each specialist builds a short memory of you so they don’t have to ask again — their own: other specialists can’t see it. So you don’t have to tell it all again, a specialist or Nadia passes a short note with the gist to a colleague — only within the service; ask them not to pass anything on and they won’t.
• Session notebook, session summaries, tasks, and mood ratings that you provide — for the “My Path” section.
• Technical records: when you signed in and used features, spending, and model response times — so the service works well and doesn’t waste resources.
• Purchases: the plan, amount, date and payment number: in Telegram, the Telegram payment number; for card payments, the Freedom Pay or lava.top payment number. We need them to credit the purchase and, if necessary, issue a refund. You enter your card details on the Freedom Pay or lava.top page: the card number, expiry date and code never reach us and are not stored. For payments via lava.top you enter the receipt email yourself: it is passed to lava.top and not stored by us. Payment records are kept even after the account is deleted, without conversations and with no link to them, for accounting and refunds.
• Telegram chat ID — only if you’ve allowed a specialist to message you first. Without it, messaging you is impossible. You can withdraw this permission in settings, and the number will then be deleted.

Who sees your conversations

• AI models. To reply, your message and the necessary context are sent to language models through the OpenRouter service and its providers. Voice messages are converted to text in the same way. We do not share your account name, email, or Telegram ID with them.
• The team. Reads your conversations without your name or other personal data and only to improve the specialists. While the service is in beta, this is a condition of use: when you get started, you allow it with a separate checkbox, and you can’t start without it. To withdraw consent, delete your data or write to us.
• We don’t sell data, show ads, or use conversations for advertising.

How long we keep data and how to delete it

• If you don’t write to the specialists or Nadia for 30 days (60 days with an active subscription), all your data is deleted automatically, together with unused sessions and subscription days.
• You can start without signing in. If you started a conversation and never signed in, it’s deleted after 48 hours. A chat where you wrote nothing (only the specialist’s greeting) is also deleted after 48 hours.
• At any time: Settings → “Delete my data.” Your conversations, memory, profile, and notebook disappear from the service right away (you can no longer sign in to this account, and specialists won’t message you first) and are erased permanently after 30 days — until then the team may review them in anonymized form; they also leave the nightly backups within a week.
• So that the free session for signing up can’t be claimed again and again, an irreversible account marker (a hash) remains after deletion — it can’t be used to identify you or read your data.
• After deletion, only anonymized technical records without any text remain (how many requests were made to the models and how much they cost) — for service statistics. They can no longer be linked to you.
• Site visit counter: which page is opened and which site you came from (domain only, for example vc.ru). Your IP address is not stored — a code is calculated from it and your browser data, and that code changes every day, so your visits on different days can’t be linked to each other or to an account. No cookies are used for this.

Data protection

• Encryption in the database. Conversations, specialists’ notes about you, notes to colleagues, the notebook, session summaries, and feedback are stored encrypted with the AES-256-GCM standard, and each record has its own random value (nonce).
• The key is kept separate. The encryption key is not in the database, in the backups, or in the service’s code. A database file or a copy without it is unreadable. A server with the wrong key will not start, so that data is never written with a different key.
• Backups are made every night and fully encrypted on the server itself; only the encrypted file goes to external storage.
• A hash instead of personal data. We do not store your Telegram ID, phone number, email, or Google account — only an irreversible hash.
• Connection — over HTTPS only. Only the service’s server has access to the database.
• What is not encrypted, and why. To reply, the server decrypts the conversation at the moment of answering and passes what is needed to the language model (see “Who sees your conversations”). The semantic search memory (the graph a specialist uses to recall things from long ago) is stored on the server unencrypted — otherwise it could not be searched; in backups it is encrypted.

The service is for adults (18+).

GDPR: the legal basis on which we process data

We comply with the EU General Data Protection Regulation (GDPR) and apply its rules to all users, wherever they are located.

• Your consent (Art. 6(1)(a) GDPR) — to process your conversations and what you have told us about yourself. Information about your well-being, health, and personal life is a special category of data, and we process it only with your explicit consent (Art. 9(2)(a)). You give your consent when you get started, and you can withdraw it at any time — by deleting your data or writing to us. Team review of conversations is part of this consent, with a separate checkbox; while the service is in beta, you can’t start without it.
• Providing the service at your request (Art. 6(1)(b)) — sign-in, sessions, limits, the notebook.
• Legitimate interest (Art. 6(1)(f)) — technical logs, protection against abuse, and a counter for visits and page load speed, with no cookies and no IP address.
• Data minimization (Art. 5). We do not ask for your real name, phone number, email, or address; we keep data for a limited time (see “How long we keep data and how to delete it”).

Your rights

• Access and a copy (Art. 15, 20) — what data about you we hold, in a machine-readable format.
• Rectification (Art. 16) — you can change your name, how we address you, your gender, and your age in your profile.
• Erasure (Art. 17) — Settings → “Delete my data” or by email.
• Restriction and objection (Art. 18, 21) — for example, objecting to the review of your conversations to improve the service.
• Withdrawing consent (Art. 7(3)) — at any time; anything already done before you withdraw consent remains lawful.
• Complaint (Art. 77) — to the data protection supervisory authority in your country.

To exercise a right, write to adiletakmatovofficial@gmail.com and include the number from your profile (“Your number”) — we use it to find your data without knowing who you are. We respond within a month, usually sooner. If a data breach happens and affects your rights, we will notify the supervisory authority within 72 hours and you without delay (Art. 33, 34).

Who receives the data and where

• OpenRouter and AI model providers (including in the US) — the text of messages and the context needed to respond, recognize voice, and search by meaning. Without your account name, email, or Telegram ID.
• Google — storage for nightly backups (encrypted files only) and sign-in with Google, if you choose it.
• Telegram — sign-in and bot messages, if you use them.
• Cloudflare — site delivery and protection against attacks (the encrypted connection passes through it).
• Freedom Pay (Kyrgyzstan) and lava.top — card payments: the plan and amount, and for lava.top also the receipt email. You enter your card details with them; they never reach us.

Some of these companies are located outside the EU, so data may be transferred to other countries. We transfer only what is needed to operate the service, and with your consent (Art. 49(1)(a)); where a provider offers the EU standard contractual clauses, the transfer is made on that basis (Art. 46).

Important

Dicamus is not medical care and not an emergency service. If you or someone near you is in danger, call 112 or your local emergency number. Helplines by country: findahelpline.com.

Contact

Questions about data: adiletakmatovofficial@gmail.com.

Terms of Use · Home