Privacy Policy

1. Information We Collect

Account and Verification Information

When you create or access an account, we may collect:

• Your mobile phone number
• One-time password (OTP) verification information
• Internal account and user identifiers
• The public encryption key associated with your account
• Information you voluntarily add to your profile

We use this information to create your account, verify your identity, secure your account, and provide app functionality.

Memories and User Content

During The Dash allows users to create time-locked memories. Depending on how you use the app, we may process:

• Memory titles
• Written messages and descriptions
• Audio recordings
• Videos
• Intended recipient information
• Selected release dates and times
• Other content you voluntarily include in a memory

Memories may be created for yourself, shared directly, or assigned to selected recipients.

Recipient Information

When you assign or share a memory, we process information needed to associate the memory with its intended recipient. This may include:

• Recipient account identifier
• Recipient phone number or other information you provide
• Recipient public encryption key
• Sender or recipient role
• Encrypted key information required to access the memory

You should provide another person’s information only when you are authorized to do so.

Camera, Microphone, and Media Permissions

With your permission, During The Dash may access:

• Your device camera
• Your device microphone
• Your photos or media library
• Local device storage

These permissions are used when you choose to record, select, upload, download, or view memory content.

You can manage these permissions through your device settings. Disabling a permission may prevent certain features from working.

Device, Analytics, and Crash Information

We may automatically collect limited technical information, including:

• Device type and model
• Operating system and app version
• Device or installation identifiers
• IP address
• App interactions and feature usage
• Session and performance information
• Crash reports
• Diagnostic logs
• Error details and timestamps

We use this information to maintain the app, diagnose technical problems, improve performance, understand feature usage, and protect the service.

We do not intentionally include the readable content of private memories in analytics or crash reports.

2. How We Use Information

We use collected information to:

• Create, authenticate, and manage user accounts
• Send OTPs and verify mobile phone numbers
• Protect accounts against unauthorized access
• Create, encrypt, store, schedule, and deliver memories
• Make memories available to authorized recipients
• Upload, store, download, and decrypt audio or video files
• Provide essential account communications
• Respond to customer-support requests
• Monitor app performance
• Diagnose crashes and errors
• Detect and prevent fraud, misuse, and security incidents
• Enforce our Terms of Use
• Comply with applicable legal obligations
• Maintain and improve the app

We do not use the private content of your memories for advertising.

3. SMS Messaging (Important)

If you provide your mobile number and opt in, During the Dash, LLC may send you SMS messages for:

• Account verification, including one-time passcodes (OTP).

Message frequency varies. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

You can opt out at any time by replying STOP. For help, reply HELP or contact us at support@duringthedash.com.

Note: If you opt out of SMS, some features, such as phone-based login or verification, may not work.

4. Encryption and Security

During The Dash uses hybrid encryption to protect memory content.

Memory Encryption

Memory titles, message payloads, and audio or video files are encrypted using AES-256-GCM.

AES-256-GCM provides confidentiality and integrity protection. If encrypted content is changed or corrupted, authentication is designed to fail and prevent the modified content from being decrypted.

Audio and video files are divided into approximately 5 MB chunks. Each chunk is encrypted separately using its own initialization vector and authentication tag.

Encryption-Key Protection

The AES key used to encrypt a memory is protected using RSA-4096 with OAEP-SHA256.

A separately encrypted copy of the memory’s AES key is created for:

• The sender
• Each authorized recipient

Each encrypted key can be decrypted only using the corresponding user’s RSA private key.

Private and Public Keys

When you create or access an account:

• The app generates an RSA-4096 public and private key pair on your device.
• The private key remains in secure storage associated with your device and account.
• The private key is not uploaded to our server as part of the standard encryption process.
• The public key is uploaded so authorized users can securely share memories with your account.
• The app may provide options that help you preserve or restore access to your encryption keys. You are responsible for securely storing any key backup or recovery information provided to you.

Information Stored on Our Servers

Our servers may store:

• Encrypted memory titles and payloads
• Encrypted audio and video files
• Public encryption keys
• RSA-wrapped AES keys for authorized participants
• Recipient and participant associations
• Technical metadata required to operate the service

The encryption system is designed so that our servers store encrypted content and wrapped encryption keys without receiving readable memory content or users’ private RSA keys.

No security system can guarantee absolute protection. You are responsible for protecting your device, phone number, device passcode, encryption-key backups, and account access.

5. Time-Locked Memories

A memory may appear in the app before its scheduled release time, but its protected content cannot normally be opened through the app until the selected date and time have passed.

We process the selected release date, time, recipient information, and delivery status to provide this functionality.

We cannot guarantee that a notification or memory will be delivered or opened at an exact time. Delivery may be affected by internet connectivity, device availability, recipient account status, notification settings, encryption-key availability, or third-party services.

6. How We Share Information

With Authorized Recipients

When you assign or share a memory, the intended recipient receives access to information required to identify and open that memory at the appropriate time.

Only users provided with an encrypted copy of the relevant AES key should be able to decrypt the memory.

With Service Providers

We may use service providers for:

• SMS delivery and phone-number verification
• Cloud hosting
• Encrypted file storage
• Analytics
• Crash reporting
• Security monitoring
• Customer support

These providers may process only the information necessary to perform services on our behalf. We require service providers to maintain protections that are equal to or consistent with the protections described in this Privacy Policy.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

For Legal and Safety Reasons

We may disclose limited account or technical information when we reasonably believe disclosure is necessary to:

• Comply with applicable law or a valid legal request
• Enforce our agreements
• Investigate suspected fraud, abuse, or security incidents
• Protect the rights, property, and safety of users, During the Dash, or others

Because memory content is encrypted and we do not possess users’ private RSA keys, we may be technically unable to provide readable memory content stored on our servers.

Business Transfers

If During the Dash is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction, subject to appropriate privacy protections.

7. Sale of Personal Information and Advertising

We do not sell your personal information.

We do not share your personal information for cross-context behavioral advertising.

We do not use private memory content to display advertisements, create advertising profiles, or send marketing communications.

8. Data Retention

We retain account information and encrypted content while your account remains active or for as long as necessary to provide the service.

Technical logs, analytics, and crash information may be retained for a limited period for security, troubleshooting, and service improvement.

9. Account and Data Deletion

You may delete your account through the Delete Account option available within the During The Dash app.

You may also request assistance by contacting support@duringthedash.com.

When you delete your account, all data associated with your account is permanently deleted from our systems, including:

• Account and profile information
• Mobile phone number
• Verification information
• Public encryption keys
• Created memories
• Encrypted memory titles and message payloads
• Encrypted audio and video files
• Participant and recipient associations
• Wrapped encryption keys
• Related account data

Account deletion is permanent and cannot be reversed. Deleted memories cannot be recovered.

Deleting your account cannot remove content that another person previously downloaded, copied, recorded, or stored independently on their own device.

Deleting or uninstalling the app does not automatically delete your account. You must use the in-app account-deletion option or contact us.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your account and associated information
• Withdraw consent
• Object to or restrict certain processing
• Request a portable copy of eligible information
• File a complaint with an applicable privacy authority

To exercise your rights, contact support@duringthedash.com.

We may need to verify your identity before completing a privacy request.

11. Children and Minor Users

During The Dash does not currently request a user’s date of birth or independently verify a user’s age.

If a user is under the age of legal majority where they live, they should use the app only with the permission and supervision of a parent or legal guardian.

We do not knowingly collect personal information from a child under 13 without legally required parental consent.

If we learn that a child under 13 has created an account or provided personal information without appropriate parental consent, we will delete the child’s account and associated information.

Parents or legal guardians who believe a child has used During The Dash without authorization may contact support@duringthedash.com to request account and data deletion.

12. International Data Processing

Information may be processed or stored in countries other than the country where you live. Privacy laws in those countries may differ from those in your jurisdiction.

Where required, we use appropriate safeguards for international transfers of personal information.

13. Third-Party Services and Links

The app may use or contain links to third-party services. Third-party services are governed by their own terms and privacy policies.

We are not responsible for the privacy practices of third parties that we do not operate or control.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the app, our practices, applicable laws, or service providers.

When we make material changes, we may provide notice through the app or another appropriate method.

The revised Privacy Policy will display an updated “Last Updated” date.