Privacy Policy
Doosi is a personal assistant app. It remembers what you tell it, sets reminders, keeps lists and files your documents. This policy explains what Doosi collects, why, who processes it, how long it's kept and how to delete it. Doosi is provided by Cheetahs Deliver Pty Ltd (ABN 23 671 328 706), an Australian company ("we", "us"). We handle your information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles, and this policy is written so it also answers the questions other privacy laws (such as the GDPR) ask.
In short: your information is used only to run Doosi for you. We don't sell it, don't use it for advertising, don't track you across apps or websites, and the AI services we use don't train on it. You can delete your account and everything in it from inside the app at any time.
What Doosi collects
- Account: your email address and sign-in credentials (a password, or a passkey that stays on your device). Sign-in is handled by Amazon Cognito; we never see your password.
- What you tell Doosi: the messages you type or say, and the conversation history (the most recent 500 messages), so Doosi can follow up and so the chat appears on your devices.
- What Doosi saves for you: records (such as receipts, test results, warranties and bookings), reminders, lists, and notes about people you mention (names, birthdays, relationships, money owed). Information about other people is entered by you; please only add what you have a right to share.
- Photos and PDFs you share: kept on your phone. If Photo backup is on (you can turn it off in the app), an encrypted copy is kept in your private cloud vault so it can be restored.
- Voice: your phone turns speech into text, on the device where possible, otherwise through its maker's speech recognition service (Apple's on iPhone). For languages it can't recognize, the recording is sent to Amazon Transcribe to be turned into text; the recording isn't stored afterwards.
- Your agreements: a record of each time you agreed to (or withdrew) the AI data sharing described below and this policy: which version, when, and the app version and device type. It's kept as proof of your choice and can't be changed afterwards.
- Device and settings: a push notification token for each device you sign in on, your time zone and voice language, and your in-app settings.
- Security and limits: a log of each action Doosi took for you (such as saving a record or setting a reminder, with what was saved), kept so there's a trail of what happened, and request counters used to prevent abuse.
Doosi doesn't collect your location, contacts, health app data, advertising identifiers or browsing history, and contains no advertising or third-party analytics.
How it's used
Only to provide Doosi to you: to answer your requests, remember and find what you saved, send your reminders and daily brief, keep your account secure, and prevent abuse. We don't use your information for advertising, profiling or selling, and we don't read your content except when you ask us for help or the law requires it.
AI services
Doosi uses third-party AI services to understand and answer you, read the photos and PDFs you share, make your saved items searchable, and turn speech into text when your phone can't. Before you first use Doosi, the app asks for your permission and explains what's sent.
These services receive only what's needed for each request: your message, the photos or PDFs you share, and the saved items needed to answer you. Neither Doosi nor the AI services it uses train AI models on your information, and AI providers are only used under terms that keep your information confidential and prohibit using it for training. Doosi currently uses AI models provided through Amazon Bedrock, part of Amazon Web Services. If we change providers, this policy will be updated.
Who processes your information
- Amazon Web Services (United States): hosting, database, encrypted file storage, sign-in (Amazon Cognito), AI services (Amazon Bedrock), speech-to-text (Amazon Transcribe) and scheduling of reminders.
- Expo (650 Industries, Inc.) and Apple: delivery of push notifications. A notification's text (such as a reminder's title, or your daily brief) passes through their services to reach your phone.
- Apple (on iPhone): speech recognition, as described above.
We share information with no one else, except where required by law or to protect someone's safety.
Where it's stored
Doosi's servers, database, files and AI processing run in Amazon Web Services data centres in the United States (us-east-1, Virginia). So when you use Doosi from Australia or elsewhere, your information is sent to and stored in the United States. We use AWS under contracts that require it to protect your information and to use it only to provide its services to us, and we stay responsible for how your information is handled there, as the Australian Privacy Principles require.
Security
Information is encrypted in transit (HTTPS) and at rest (with keys managed in AWS Key Management Service). Each account's data is separated at the database level, so one account can't read another's. Sign-in tokens are kept in your phone's secure storage (the Keychain on iPhone), and you can protect the app with Face ID.
How long it's kept
- Your account, content, the log of Doosi's actions and the record of your agreements: until you delete them, or delete your account.
- The conversation: the most recent 500 messages; older ones are deleted automatically.
- Deleted photos and PDFs in your vault: earlier versions are kept for up to 30 days in case of a mistaken delete, then erased. Deleting your account erases them immediately.
- Database backups: up to 14 days, after which deleted information is gone from backups too.
- Server logs, which record errors and timings rather than your content: 30 days.
- Spreadsheet exports you create: 1 day.
- When you delete your account, we keep a deletion receipt for 3 years as proof it was done: the date, and one-way codes made from your account id and email address. They can't be turned back into your email, and the receipt holds none of your content.
The waitlist and this website
- Waitlist: if you join, we keep your email address, the date, and which form you used. We use it only to tell you when Doosi launches and, now and then, about the beta. Every email has an unsubscribe link, and you can ask us to delete your address at any time. We delete waitlist addresses we no longer need after launch.
- Abuse prevention: to stop automated sign-ups, we count requests using a one-way code made from your IP address. The counts are deleted automatically within two days.
- No cookies or tracking: this website sets no cookies and uses no analytics or advertising tools.
Your choices and rights
- Delete your account: in the app, open Memory, tap your picture, then Delete Account. This deletes your account and everything Doosi keeps for it.
- Delete or change items: ask Doosi, or clear the conversation from your account.
- Get a copy: ask Doosi to export your records as a spreadsheet, or contact us.
- Withdraw consent to AI data sharing: in the app, open Memory, tap your picture, then How Doosi Uses AI. This is recorded, and Doosi signs you out, since it can't work without it.
- Turn off Photo backup to keep new photos and PDFs only on your phone.
You can ask us for a copy of the information we hold about you, or to correct it, at any time. Depending on where you live, you may also have rights to delete or move your information, or to object to its use. Contact us at privacy@doosi.ai to use any of these; we'll answer within 30 days.
Complaints
If you're unhappy with how we've handled your information, please tell us first at privacy@doosi.ai and we'll respond within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to the privacy regulator where you live.
Children
Doosi isn't meant for children under 13 (or the minimum age in your country) and we don't knowingly collect their information. If you believe a child has an account, contact us and we'll delete it.
Not professional advice
Doosi can store and summarize health, financial and other documents, but it doesn't give medical, legal or financial advice. Check important information with a professional.
Changes
If this policy changes in a meaningful way, we'll update the date above and, where the change affects what's shared with AI services, ask for your permission again in the app.
Contact
Cheetahs Deliver Pty Ltd · ABN 23 671 328 706 · Western Australia, Australia
Privacy questions: privacy@doosi.ai · Everything else: hello@doosi.ai