Privacy

Dalla AI ("Dalla", "we") runs dallaai.com, an Arabic and English AI assistant for people and small businesses in Qatar and the Gulf. For anything about your personal data, write to privacy@dallaai.com.

We collect the following when you use Dalla, as a guest or with an account:

• Your chats: every message you send and every reply Dalla's AI writes back to you.
• Files and work: images and documents you upload, and the work Dalla produces for you, such as documents, code, websites and other files.
• Account details: your email address, your name if you give it, and how you sign in (for example an email link or Google).
• Usage and spend: how many messages you send, which AI model answered, token counts and what each reply cost us.
• Device and network: a one-way, salted code made from your IP address (we never store the address itself), your browser type, your language, and the date and time you accepted these terms.

• To run Dalla: answer your messages, keep your chat history and files, and let you pick up where you left off.
• To keep the free tier fair, prevent abuse and keep the service secure.
• To fix problems and understand which features people use.
• To train and improve AI models: we use your chats and the work Dalla does for you, including the AI-generated replies and files, to evaluate, fine-tune and train AI models, so Dalla gets better at Gulf Arabic and at local tasks.

Using chats and work for training is part of how Dalla is offered, so it is a condition of using the service, and there is no separate opt-out. If you don't want this, please don't use Dalla.

Before anything is used for training, automated tools remove or mask personal details such as email addresses, phone numbers, Qatar ID numbers, card numbers and IBANs, and your user ID is replaced with a one-way code. Automated removal isn't perfect, so please avoid sharing sensitive details (such as health information or passwords) in chats unless you need to.

Training copies are kept in private storage that only authorised Dalla staff can access.

We process your personal data with your consent, which you give by accepting these terms before using Dalla, and to provide the service you asked for, in line with Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016). We record which version of these terms you accepted and when.

We share data only with service providers that help us run Dalla, under contracts that require them to protect it:

• Supabase: database, sign-in and file storage (servers in the European Union, Frankfurt).
• Vercel: hosting of the website and app.
• Anthropic: the Claude AI models that write Dalla's replies and run its tools.
• Resend: sending sign-in emails.
• OpenRouter and the model provider it routes to, only when we use that engine for chat.

Your data is stored and processed outside Qatar, mainly in the European Union and the United States. We use providers that commit to strong security and data-protection terms, and we send them only what they need to do their job. We don't sell your personal data.

We keep your chats, files and account details for as long as your account (or guest session) is in use, or as long as we need them to provide the service and meet legal duties. You can ask us to delete your account and chats at any time.

Training copies that have had personal details removed may be kept after that, for as long as they are needed to train and evaluate models. Where a training copy can still be linked to you, we will delete it when you ask.

Under Qatar's Personal Data Privacy Protection Law you can:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct data that is wrong or incomplete.
• Ask us to delete your data.
• Withdraw your consent. Because consent is required to use Dalla, withdrawing it means you stop using the service; it doesn't affect processing that happened before.
• Complain to the competent data-protection authority in Qatar.

Send any request to privacy@dallaai.com from the email linked to your account (guests: tell us roughly when you chatted). We aim to reply within 30 days.

Dalla is not meant for anyone under 18 unless a parent or guardian has agreed and supervises their use. If you think a child has given us personal data without that consent, contact us and we will delete it.

We use encryption in transit, strict access rules on the database so each person sees only their own chats, salted hashes instead of raw IP addresses, and private storage for files. No system is perfectly secure, so we can't guarantee it, but we work to protect your data.

If we change this policy in a way that matters, we will update its version and ask you to accept it again before you continue using Dalla.