Privacy policy
This page explains what Digital Fusion keeps about you, who else sees it, how long it is kept and what you can do about it. The app shows a shorter version under Settings, in Data and privacy.
Who we are
Digital Fusion is run by Digitalise, a division of Digital Mall (Pty) Ltd, in South Africa. We are the responsible party for your personal information under the Protection of Personal Information Act (POPIA).
To ask about your information, email [email protected].
What we keep
Your account
- Your phone number, if you sign up with one. It is never stored in readable form. We keep a one-way code of it to find your account, and an encrypted copy so we can send you a passcode.
- If you sign in with Apple or Google, a one-way code of your account with them and of your email address. We do not keep the email address itself.
- The name, emoji and username you choose, your friend code, the year you were born (to check you are 18 or older) and the language you use the app in.
- The consents you have given, and the version of the terms you accepted.
Your chats
- Your chats, and the files, documents and pictures in them, are kept on our servers for 30 days and then deleted. You can delete a chat sooner.
- Photos you send in a chat are kept for 30 days so follow-up questions can refer to them. They are deleted after that, or sooner if you delete the chat or your account.
- A private chat is not kept. It is deleted when you end it, or after a day if you forget. It keeps no photos, never searches the web and does not add to the assistant's notes.
- Your phone also keeps a copy of your chats so the app works quickly. That copy is on your phone, not on our servers.
What the assistant remembers
The assistant keeps short notes about you, so you do not have to start from scratch each time. Settings shows every note, erases them, or turns them off. Notes are kept until you erase them or delete your account.
Portraits
If you make a portrait or avatar from a selfie, we keep the picture we made, and for the character creator a face model made from your selfie. We do not keep the selfie. You can remove the portrait in the app, and both go when you delete your account.
Voice notes
When you record a voice note, the recording is sent to Google's Gemini to be turned into text, and the text comes back to you to check before you send it. Only the recording and your app language go. Neither the recording nor the text is kept by us. Private chats do not offer voice notes.
Credit and purchases
We keep a record of the credit you buy, receive and spend, and of each purchase and voucher. The law requires us to keep sales records, so these are kept even after you delete your account, but without your name, number or anything else that identifies you.
Passcodes
The record of a passcode we send you is deleted after 48 hours.
Who else sees your information
The AI company that answers you
To answer a question, your chat goes to the company whose model you chose: Anthropic (Claude), Google (Gemini), OpenAI (ChatGPT), or xAI, now SpaceXAI (Grok). These run in the United States. Their terms for business customers like us say they do not train their models on what we send.
DeepSeek is different. It is only used if you pick it yourself, and the app tells you before you do. Your chat is then processed in the People's Republic of China, DeepSeek does not promise not to train on it, and it states no retention period. Private chats cannot use DeepSeek.
Safety checks
Every message is checked by OpenAI's moderation service before any model sees it. A message that fails is refused and costs you nothing. A message that is flagged, or that somebody reports, is kept for 30 days so we can review it.
Pictures and portraits
When you ask for a picture, the description, and any photo you ask it to work from, goes to OpenAI or Google to draw it. When you make a portrait, your selfie is first checked by Anthropic's Claude and then goes to OpenAI or Google to draw it.
Web search
When a question needs current facts, we search the web. Only the search question goes to the search provider, which is Serper today, never your other messages. When a page is opened, that website receives only the request for the page. Settings turns search off, and private chats never search.
Where you are
With Use my location on, your phone sends a position rounded to about a kilometre with a question that needs one. Otherwise we work out roughly which city your connection is in, on our own server, using the free DB-IP database. Neither is stored, and neither is sent to a search engine.
Signing in and passcodes
- Passcodes are sent by text message through Panacea Mobile, which receives your number and the passcode.
- If you sign in with Apple or Google, we check the sign-in with them. We receive your account identifier and, if you share it, your email address.
Payments
On an iPhone, the App Store takes the payment and we check the purchase with Apple. We never see or keep your card details.
Notifications and messages
Notifications are sent through Expo's push service, and from there by Apple or Google to your phone. They never contain what you wrote or what came back.
We send you messages through Xanite, our customer messaging platform. If you allow notifications, Xanite holds your first name so a message can greet you by name. Turn notifications off and your name is removed. The app also asks Xanite for the messages we send you, keeps them under Messages for 30 days, and tells Xanite when you open one.
What we count
We count what happens in the app: that a question was asked, which model answered, what it cost and whether it searched. We also note your age range, your phone's operating system, how you signed up and whether an invite or a voucher brought you. This goes to PostHog, on its servers in the European Union, and to Xanite, together with your credit balance and what kind of question you spend it on. It is never what you asked, never what came back, and never your number or your email.
We do this because we have a legitimate interest in seeing which parts of the app people use and what to fix. Help improve the app in Settings turns it off. Then nothing more is counted, and the details Xanite holds about you, such as your first name and balance, are cleared. Counts sent before you turned it off stay with PostHog and Xanite, filed under a random code rather than your name or number.
Fixing wrong answers
We read recent conversations to find and fix wrong answers, especially ones you mark with the thumb under an answer. Names, phone numbers, email addresses, ID numbers, card numbers and internet addresses are removed automatically before anyone reads them. This review uses Anthropic's Claude.
Training
We never use what you write to train a model. The AI companies we use say the same in their terms, except DeepSeek, as explained above.
Deleting your account
In the app, open the menu, tap Settings, then tap Delete my account at the bottom and confirm. On the web, open Your account and tap Delete my account.
This deletes your chats, files, pictures, notes, portrait and profile, and signs you out on every device. It cannot be undone. Credit left on the account cannot be used again or refunded. We keep the record of what you bought and spent, and the record of your consents, without anything that identifies you, because the law requires it.
Your rights
Under POPIA you have the right to:
- ask what personal information we hold about you
- ask us to correct or delete it
- object to us using it, and withdraw a consent you gave
- complain to the Information Regulator, at inforegulator.org.za
Most of this you can do yourself in Settings. For anything else, email [email protected].
Age
Digital Fusion is for adults aged 18 or older. We will close an account we believe belongs to a child.
Changes to this policy
When we change what we keep or who sees it, we update this page and the notice in the app. The date at the top says when this page last changed.