Privacy Policy - Dhito

Privacy Policy

Effective: April 28, 2026

1. Introduction

Dhito ("we", "our", or "us") values your privacy. This Privacy Policy explains how we handle your data when you use the Dhito desktop application ("App"). The short version: We do not collect, store, or sell your personal files. Your photos, videos, and search queries stay on your machine.

2. Data We DO NOT Collect

We explicitly do not have access to:

  • Your Files: Your photos, videos, audio files, and documents remain locally on your device.
  • Indexed Data: The search index and thumbnails generated by the App are stored locally on your machine.
  • Search Queries: We do not see, log, or transmit your search terms, until you pass it as part of feedback.
  • AI Outputs: Descriptions and transcriptions generated by the AI models remain on your device.

3. GDPR & International Compliance

We adhere to high privacy standards, including the principles of the General Data Protection Regulation (GDPR) and other global data protection frameworks:

  • Data Minimization: We only collect the absolute minimum operational data needed to validate your license.
  • Right to Access & Deletion: Since your files stay on your system, you have full control. For any operational data (like billing history), you can request access or deletion via our contact email.
  • Privacy by Design: Our architecture ensures that privacy is not a setting, but a core technical requirement of how the app functions.

4. Data We Collect

To provide our service, manage subscriptions, and deliver updates, we collect a minimal amount of operational data:

  • License Validation: We collect your License Key and Machine ID (a unique hardware identifier) to validate your subscription status via our payment provider, Dodopayments.
  • App Updates: Your IP Address is temporarily logged during connection to check our GitHub repository for new versions.
  • Crash Reports: If the application crashes, we may collect technical crash data (e.g., stack traces, OS version) to help us fix the bug. We NEVER send any of your user data along with these reports.

5. Third-Party Services

We use the following trusted third-party services:

  • Dodopayments: Handles payments, taxes, and license key generation. (Merchant of Record)
  • GitHub: Hosts application updates and releases.

6. AI Transparency

Dhito uses local Artificial Intelligence models to process your data. No user content is sent to any cloud AI API. All processing happens on your computer's hardware.

  • Visual Analysis: Microsoft Florence-2 (runs locally).
  • Audio Transcription: OpenAI Whisper (runs locally).
  • Embedding & Reranking: All-MiniLM / MS-MARCO (runs locally).
  • Conversational Chat: Qwen3 (runs locally).