Information we handle
- Requests and task content. Messages you send, the assistant’s responses, plans, task progress, action results, and information needed to continue an interrupted task.
- Screenshots and attachments. Images of the app screens the assistant observes, photos you choose or take, and files you attach. Documents may be converted into text or page images for the AI provider. These can contain messages, names, addresses, financial details, or other sensitive information visible in the app or file.
- App and device information. Names and package identifiers of launchable apps, your app-access choices, display details, device registration identifiers, and the device name you provide. The assistant can request an app list to find the app needed for a task; this can include apps you have not approved for control.
- Account information. Your Google sign-in identifier, email address, name, and profile picture when supplied by the sign-in service, together with authentication sessions and registered devices. We do not receive your Google password.
- Subscriptions. Trial dates, subscription status, purchase or checkout references, payment-provider identifiers, and records needed to verify purchases and prevent duplicate charges. Our account service does not collect or store full payment-card numbers or card security codes.
- Notifications and announcements. If enabled, an installation identifier, a push-notification delivery token, your notification preference, and delivery status. We also record which in-app announcements you have acknowledged.
- Service and support information. Request times, routes, response codes, processing duration, and error information used to operate the service. IP addresses are processed for connections and abuse prevention, and hosting providers may keep their own access logs. If you contact us, we receive your email address, message, and any information you include.
How we use it
We use this information to carry out your requests, show task progress, preserve conversation context, recover interrupted connections, sign you in, manage devices and subscriptions, deliver notifications, answer support requests, and protect the service against abuse or repeated actions.
DHD does not sell your personal information or use task content for advertising. The app does not include advertising trackers. AI providers’ handling of the content they receive is described below.
Phone access is part of the task
DHD uses the phone-control connection you set up to open approved apps, observe their task screens, and perform actions such as tapping, scrolling, and entering text. You choose individual apps in Approved apps or enable Full access. App selection limits which apps DHD can control; it does not redact sensitive information inside screenshots of those apps.
Camera access is used when you choose to take an attachment photo. Photo and file pickers provide the items you select. Notification permission supports task updates and service messages. The optional display-over-other-apps permission lets you open DHD’s floating controls.
Information displayed inside another app can become part of a task screenshot even when DHD does not request a separate Android permission for that type of information. Avoid sharing content you do not want processed by the assistant, and make sure you are allowed to share information about other people.
How long information stays
Task content on DHD’s servers
A conversation becomes eligible for deletion after three hours without task activity. Cleanup runs every minute while the service is running, and before it accepts requests after a restart. An active follow-up keeps the earlier context needed by that conversation available. Checking for updates alone does not extend its lifetime.
Cleanup removes task screenshots, original action results, messages, attachments held in task records, saved model context, and recovery state from the live task databases. It keeps identifiers and a deletion notice without the original task content to prevent delayed uploads or retries from recreating deleted data. Automatic context summarization does not itself delete the original task records.
Copies on your phone
The app keeps conversation presentation, attachments, connection settings, and action-recovery records in its private storage. Start fresh clears the current conversation view, but some attachment files and delivery or recovery records can remain. They do not share the server’s three-hour deletion schedule. Clearing DHD’s app storage or uninstalling DHD removes its app-private copies; it does not delete originals in your other apps, photos, or files.
Other records
Account, sign-in, device, subscription, notification, announcement, support, and operational records are separate from task content and are not automatically erased after three hours. Account and service records currently remain until separately removed, including through account-deletion processing. Payment providers may retain transaction records under their own obligations.
The task cleanup applies to live DHD task databases. It does not automatically erase previously created backups, infrastructure logs, developer test traces, or records held by an AI provider. We do not apply a single three-hour retention promise to those copies.
Your choices and deletion
- Control access: change Approved apps, turn off Full access, revoke optional Android permissions, or disconnect the phone-control connection. You can stop a running task; stopping it does not immediately delete its records.
- Start fresh: clears the current conversation and queues a request to delete its DHD server task data. If the phone is offline, the request is delivered when it reconnects. Server inactivity cleanup works even if the phone stays offline.
- Notifications: disable DHD notifications in Android settings. This can prevent background updates from being displayed.
- Account deletion: use Delete account in DHD Settings or the signed-in DHD account website. You can also email dhd@bolexyro.dev to request deletion of your DHD account and associated personal data. We may need to verify account ownership before processing the request.
Confirming account deletion in the app or account website immediately revokes DHD access and starts automatic removal of your hosted task history, profile, device registrations, notification registrations, and sign-in identity. DHD also cancels your Google Play and website subscriptions to stop future payments. If a provider is unavailable, cancellation and cleanup retry automatically; acceptance of the request does not mean every provider has already finished. Payments already made are not automatically refunded. We retain limited subscription, purchase, and transaction references for cancellation, refunds, late-payment reconciliation, and preventing deleted accounts from being restored by delayed events. These records do not include your task screenshots or conversations. Provider-held records, backups, and copies on your phone remain subject to the separate retention described above.
Signing out or uninstalling does not submit an account-deletion request. Start fresh does not delete your account or billing records, and DHD cannot use it to erase content already sent to recipients in another app or all copies held by service providers.
How we protect information
DHD-hosted connections use HTTPS. We authenticate account and device requests, restrict hosted task access to the registered device, and protect connection credentials using Android’s secure key storage. Selected server credentials, including payment and push tokens, are encrypted at rest.
The hosted assistant and its AI provider need to process readable task content. This is not end-to-end encrypted processing, and we do not claim that every stored database or file is encrypted. No service can guarantee absolute security.
Website, cookies, and browser storage
Its example tasks and app-access switches are demonstrations: they do not connect to your phone or submit those choices to DHD. The page currently does not use analytics or advertising trackers.
If you join the waitlist, we store your email address, Android version, signup time, agreement to receive a DHD launch notification, and confirmation-email delivery status in our server database. We use this to confirm your signup, notify you when DHD is available, and understand which Android versions people use. Our email provider processes your email address and the message content to deliver these emails. Joining does not create an account or start a subscription. Waitlist records remain until separately removed; email dhd@bolexyro.dev to request removal.
The website loads fonts from Google Fonts, so your browser sends connection information to Google when fetching them. The website host also receives ordinary web requests, which can include your IP address and browser information. The account website uses essential sign-in cookies and temporary browser storage for authentication and checkout continuity.
You can clear cookies and local browser storage through your browser settings. This may sign you out.
Connecting your own AI service
If you choose a custom AI server or the Codex companion instead of DHD AI, task content goes to that connection and its configured AI providers. The server owner or companion operator controls its storage, logging, and deletion. Our hosted task-retention and tracing rules do not govern independently operated connections.
A DHD account connection may still handle sign-in, subscription, or service messages independently of your selected task connection. Check the privacy practices of any server or companion you connect before sharing sensitive content.
Privacy requests
Depending on applicable law, you may have rights to access, correct, obtain a copy of, delete, restrict, or object to processing of your personal information, or withdraw consent where processing relies on it. Contact dhd@bolexyro.dev with your request. We may verify your identity and explain any limits that apply. You may also raise a concern with the relevant data-protection authority.
If you believe a child has provided personal information to DHD without appropriate permission, contact us so we can investigate and address it.
Changes and contact
We will update this page when our data practices change and revise the date above. Where a change needs additional notice or consent, we will provide it through the app or another appropriate channel.
For privacy questions, account-deletion requests, or concerns about sensitive content, contact the DHD developer at dhd@bolexyro.dev.