Privacy Policy

1. Information We Handle

• Account information: email address, account identifier, sign-in method, authentication records, and profile details supplied by Apple or Google, such as a name. Where available, an Apple authorization code is exchanged on our server for a refresh token, encrypted in storage, so we can revoke Apple authorization during account deletion. An Apple relay email may be used when available. We do not receive your Apple or Google password.
• Teams and discussions: team names, member names, model selections, roles, topics, discussion settings, generated replies, partial replies, and conversation context questions and answers, research briefs, extracted claims, source links, verification results, final summaries, and conversation context summaries.
• Consent and service records: consent date and version, plan and credit balances, request identifiers, timestamps, model usage and estimated costs, and error/status records.
• Support and reports: the messages and contact details you provide when contacting us, and reported AI replies, report reasons and optional notes.
• Subscriptions: your Roundtable account identifier, store purchase and receipt records, product, subscription status, expiry and renewal information. Apple or Google handles payment details; Roundtable does not receive your card number.
• Technical information: our hosting, authentication, email and AI services may process IP addresses, request metadata and operational logs to deliver and protect the service. Hosting request logs may include approximate location inferred from your IP address, such as city, region, country and time zone. We use this metadata to diagnose service activity and help prevent abuse. The app does not request GPS or precise-device-location permissions.

The app stores sign-in session information on your device so you can remain signed in. Signing out of one device does not automatically sign you out of another device.

2. Why We Use It

We use information to authenticate you, save and synchronize your teams and discussions, check consent and usage limits, generate replies, research topics, check selected factual claims, summarize discussions, screen topics for harmful requests, maintain service security, review reported replies, verify subscription access, restore purchases, understand subscription activity, and respond to support requests.

The app has no advertising, advertising tracking, or separate marketing analytics SDK. We do not sell your personal information or use discussion content for targeted advertising.

RevenueCat processes subscription and purchase records linked to your Roundtable account identifier for receipt validation, subscription access, purchase restoration and billing analytics. It also handles technical app/store metadata required for its service. See RevenueCat's privacy policy. We do not deliberately send discussion content or account emails to RevenueCat, and do not configure advertising attribution integrations or advertising identifier collection.

3. AI Processing

Live AI requires separate permission in the app. When enabled and you consent, your topic is sent to OpenRouter for an AI safety check. Discussion requests then include your topic, selected member instructions, and earlier conversation text or compressed context so members can respond to each other. A safety check is also an AI request, even if it blocks the discussion.

OpenRouter routes requests to external model-serving providers. The configured models include ChatGPT from OpenAI, Claude from Anthropic, Gemini from Google, and Mistral from Mistral AI. Perplexity Sonar provides optional research and selected claim checks. A DeepSeek model is configured only for approved hosting outside China through DeepInfra. If compliant routing is unavailable, that member is skipped rather than sent through another route.

OpenRouter, OpenAI, Anthropic, Google, Perplexity and DeepInfra are US-based organizations; Mistral AI is based in France. Provider headquarters are not a guarantee of a particular processing location.

Requests require OpenRouter routes that disallow training on inputs and outputs and support zero data retention. These are routing restrictions, not a claim that our saved discussion history, account records, or all technical metadata have zero retention. Provider handling is governed by applicable agreements and policies. Review OpenRouter's policy and its data-handling documentation.

We do not deliberately add your account email or sign-in credentials to model prompts. Anything personal that you type into a topic or member role can still be included in a request. Avoid confidential, sensitive, or third-party personal information.

You can revoke AI consent in Settings. This prevents future AI requests, but does not recall data already sent, cancel every request already in flight, or erase saved discussions. Closing the app also does not necessarily stop a turn already being generated.

New discussions include a Referee that sends reply text and relevant topic/context to a standard Mistral model to extract selected factual claims. Selected claims and context are sent through OpenRouter to Perplexity Sonar for web searches and verification. Optional Web Research sends the topic and context to Sonar before member replies. Search requests may contain information from your topic, context or claims. Source links and results are saved with your discussion; checks cover selected claims, not every reply.

Final Summary is on by default for new discussions and can be switched off before Start. When on, the saved transcript, context, research brief and claim results are sent to a Claude model through OpenRouter to produce a saved summary and action plan. A next-step checklist is saved locally on your device. Research and summaries are not run retroactively on older discussions. These features require the updated AI consent before new processing begins.

4. Other Services

Supabase hosts the app's database, authentication, server functions and synchronized updates. See the Supabase privacy policy. Apple and Google process their own sign-in flows when you choose those options. The configured email-delivery service processes your email address and sign-in email to send a code.

These legal pages are hosted on GitHub Pages. GitHub may process website request metadata under its privacy statement. These pages do not add advertising cookies, analytics scripts, or external font requests.

Authorized Duvdex operators may access stored information when needed for support, security or service operation. Information may also be disclosed when legally required or necessary to address abuse, subject to applicable law.

5. Storage and Deletion

We keep saved account, consent, team and discussion records until account deletion is requested and completed, rather than automatically expiring saved history. Generated replies, research briefs, claim results, final summaries and context summaries are saved so a discussion can be reopened on another device. Locally saved checklist choices are specific to that account and device; they are not synchronized across devices.

You can delete a team in the app. This removes that team and its editable members, but does not erase past discussions or their saved member snapshots. Signing out and revoking AI consent are not account deletion.

Updated builds provide Settings > Delete account. After confirmation, deletion pauses your discussions, removes your account and saved data from active Roundtable storage on all devices, and requests deletion of your RevenueCat customer record. Reports you own, and reports referencing your deleted replies, are removed as well. An external service failure may leave deletion pending; retry in Settings or contact support. A request already sent to an AI provider may finish, but its response is not saved back to a deleted account.

Stored Apple authorization tokens are revoked when available. For older Apple sign-ins without a stored token, the app explains how to remove Roundtable in your Apple account's Sign in with Apple settings after deletion. Deletion does not cancel an Apple or Google subscription; cancel renewal in your store account. Store-managed transaction records are handled separately by the store.

For discussion-only deletion, an older build without the account deletion option, or other privacy requests, email support@duvdex.com. Tell us which account and data the request concerns. We verify ownership and respond as applicable law requires. Do not send passwords or sign-in codes.

Completed deletion requests remove the requested account or discussion data from active Roundtable storage. Operational, security and billing records have separate handling, and records may need to be kept to comply with law, prevent abuse or resolve disputes. Hosting services may retain restricted recovery copies according to their own recovery and deletion practices. We do not promise immediate erasure from every service or recovery copy.

Service providers retain their own technical request records under their applicable policies. OpenRouter records usage metadata, such as token counts, latency and cost, separately from prompt content. Our configured routing restrictions do not erase these records. We do not treat a short dashboard log-access window as proof that all underlying records have been deleted.

6. Your Choices

You may decline AI consent and still browse the app, revoke consent in Settings, edit or delete teams, and sign out of the current device. Use the contact address below to request access, correction, export or deletion of your information.

Depending on your location, applicable law may provide additional privacy rights, including restriction or objection to processing, withdrawal of consent, and a complaint to a supervisory authority. We may need to verify your identity to respond to a request.

Roundtable is limited to adults aged 18 and over, or a higher minimum required locally. It is not offered to children. If you believe a child has submitted information, contact us.

The current app does not verify age automatically. Do not participate if you do not meet this requirement. Contact us if a child has used the app so we can investigate and address the account and its information.

7. Security and Processing Location

The app uses authenticated access, database ownership rules and encrypted network connections. AI credentials remain on the server. No system is completely secure, and we cannot guarantee absolute protection.

The configured Supabase database region is US East, us-east-1. Server-function and AI processing locations can differ. Our service providers may process information outside your country.

8. Contact and Changes

Contact Duvdex LLC at support@duvdex.com. Please do not email passwords, sign-in codes or API keys.

We will date revisions to this policy. Material changes to AI sharing require updated disclosures and, where appropriate, renewed permission before the new processing begins.