Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information: email address, name, and password hash when you register
• Debate content: transcripts, audio recordings, AI-generated flows, RFDs, and prep session data you create
• Usage data: features used, session duration, and interaction patterns (collected via PostHog)
• Device information: browser type, OS version, and app version when you use the Service
• Payment information: processed by Stripe or RevenueCat — we do not store raw payment card numbers

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process AI debate transcripts and generate flows and RFD outputs
• Authenticate your account and manage subscriptions
• Send service-related notifications (e.g., subscription reminders)
• Analyze usage to improve features and user experience
• Detect, investigate, and prevent fraudulent or unauthorized use

3. AI Transcription & Data Processing

Dikast uses AssemblyAI for speech-to-text transcription. Audio is transmitted to AssemblyAI in real time during live debate sessions. We do not store audio recordings beyond the current session unless you explicitly save a session to your account.

AI-generated outputs (flows, RFDs, feedback) are generated by AI models from MiniMax and are not reviewed by human staff unless you submit a support request.

4. Data Storage & Retention

Account data and saved debate sessions are stored in our database. You may delete your account and associated data at any time from Settings — deletion removes all personal data within 30 days. Debate transcripts and AI outputs may be retained in anonymized form for Service improvement purposes.

Audio captured during live judge sessions is not persistently stored on our servers beyond the current session.

5. Third-Party Services

We use the following third-party services:

• AssemblyAI — Real-time speech-to-text transcription
• MiniMax — AI model for debate analysis, flows, and feedback generation
• Stripe / RevenueCat — Payment processing and subscription management
• PostHog — Usage analytics (self-hosted or cloud)
• Vercel — Hosting and infrastructure

Each third-party service is used under its own privacy policy. We encourage you to review their policies.

6. Data Sharing

We do not sell your personal data. We share data only in the following circumstances: with your explicit consent; to comply with legal obligations; to detect or prevent fraud; or in connection with a merger, acquisition, or sale of assets.

7. Security

We use industry-standard encryption (TLS/HTTPS) for data in transit, and bcrypt for password hashing. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security of your data.

8. Cookies

Dikast uses session cookies for authentication (managed by NextAuth). We use PostHog cookies to track anonymized usage analytics — you may opt out of analytics tracking in your account settings. We do not use advertising cookies.

9. Children's Privacy

The Service is not directed to users under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without verified parental consent, we will delete that data promptly.

10. CCPA / GDPR Rights

If you are located in the European Economic Area or California, you have the right to: access your personal data; correct inaccurate data; delete your personal data; restrict or object to processing; and data portability. To exercise these rights, contact us at support@dikast.com.

11. Data Deletion

To delete your account and all associated data: log in to Dikast, go to Settings, and click “Delete Account.” All personal data will be removed within 30 days. Alternatively, email support@dikast.com with your registered email address.

12. Contact

For questions about this Privacy Policy, contact us at support@dikast.com or visit dikast.com/support.