Privacy Policy

Daakye Privacy Policy (Beta)

Effective date: October 15, 2026
Last updated: October 19, 2026

Daakye is in a private beta. This policy covers the beta and will be updated before Daakye opens to everyone. If anything changes how we use information you already gave us, we will tell you first.

This policy explains what AI Innovation Foundry, Inc., doing business as Daakye ("Daakye," "we," "us"), collects through the Daakye iPhone app and its extensions (the share sheet, the text message filter and Siri), [email protected], our websites daakye.ai and daakye.app, and related services (together, the "Service"). It explains how we use that information, who we share it with, and the choices you have.

The Service is a beta. It is offered only in the United States, to people 18 and older, and only to people we have let in.

1. The short version

  • The parent is in charge of the parent's information. Nothing about the parent is shared with family until the parent says yes. The parent picks what is shared, can change it, and can leave at any time.
  • Every look is logged. When a family member opens something of the parent's, the parent can see who looked and when.
  • We keep messages for 30 days, then delete them. After that we keep only the result, such as "likely a scam" and the type of scam. For a screenshot, your phone reads the words and sends those; we keep the words like a message, and we do not store the picture.
  • The text filter keeps nothing you could read. Texts it checks are not stored.
  • We do not sell your information or share it for advertising.
  • We do not use your messages to train AI models.
  • You can download or delete your data in the app, or by writing to [email protected].

2. Who is who

  • Account Owner: the adult child who creates the family and, once paid plans start, pays.
  • Members: 1 to 3 brothers or sisters the Account Owner invites.
  • Parent: the older parent who chooses to join.
  • Family circle: the Account Owner, Members and the Parent (if the Parent has joined).

3. How you send us things to check

You can ask Daakye about a message in several ways. Each one sends the item to our server, where it is checked as described in Section 5.

  • In the app: you paste or type a message, a link, or add a picture.
  • The share sheet ("Ask Daakye"): you share a link, web page or picture from Safari, Photos, Messages or another app.
  • Siri and Shortcuts ("Hey Siri, Ask Daakye"): you read or paste a message to Siri. Apple turns your speech into text under Apple's own privacy policy. We receive only the text.
  • Email: you forward an email to [email protected]. We accept it only from the email on your account or another address you confirmed. If we do not know the address, we reply to say so and keep nothing.
  • The text message filter: if you turn it on in iPhone Settings, your iPhone may ask our server about texts from numbers not in your contacts. This works differently. See Section 4.

4. The text message filter

The filter is optional and you turn it on in iPhone Settings. It looks only at SMS and MMS texts from senders not in your contacts. Apple does not let it see iMessages or texts from your contacts.

  • Some texts are sorted on your iPhone and never leave it.
  • For the rest, your iPhone (not the Daakye app) sends the text and the sender's number or address to our server. Apple does not tell us whose iPhone it came from, so we cannot link it to you or your family.
  • We send the text to our AI provider to decide if it looks like a scam, and tell your iPhone which list to put it in.
  • We do not store the text or the sender. We keep a one-way code made from the text (with numbers removed) and our answer for 7 days, so the same scam sent to many people gets the same answer quickly. That code cannot be turned back into the message. We also keep daily counts.
  • Our hosting provider records the internet address (IP address) that sent the request, as it does for all web traffic.
  • The filter does not send alerts to your family.

5. What we collect, why, and how long we keep it

What we collectFrom whomWhyHow longShared with
Name and emailEveryone with an accountCreate your account, sign you in (we email a link and a code; there is no password), send noticesUntil you delete your accountSupabase, Vercel, Resend
Phone number (optional)Anyone who adds oneSo family can call you if you are a trusted contact on a "pause before you pay" planUntil you remove it or delete your accountSupabase
The Parent's own phone number (optional)ParentSo the family can call the Parent in one tap about an urgent alert. Everyone in the family can see it, and the Parent sees each time someone looksUntil the Parent removes it (any time, in Settings) or deletes their accountSupabase
Family circle details (members, roles, invites, sharing level)Everyone in the familyRun the family circleUntil the family is deletedSupabase, Vercel
The Parent's consent record (what was shown, the choice made, date, app version, changes, leaving)ParentProve and respect the Parent's choicesFor as long as the family exists. When the family is deleted, they are deleted with itSupabase
Items you ask Daakye to check (text, email, link, picture, plus any note)Anyone in the family, mostly the ParentCheck for signs of a scam and answerMessage text, the short excerpt, and Daakye's written answer: 30 days, then deleted. Screenshots: your phone reads the words in the screenshot and sends the words. We keep those words for 30 days, like a message. The picture is not sent or stored unless the words cannot be read, and then it is checked and discarded. The result (risk level, scam type, how sure Daakye was, how it was sent, date): until the check or account is deletedAnthropic, Supabase, Vercel; Resend for emails
Texts checked by the filterAnyone who turns the filter on, including information about the senderSort the textNot stored. A one-way code and our answer for 7 days; daily countsAnthropic, Vercel
Your answer to "Was this right?"Anyone who taps itSee where Daakye is wrongWith the checkSupabase
Examples you choose to share ("Help improve Daakye", off unless you turn it on)Anyone who opts inTeach Daakye to spot more scamsThe full message, kept until we use it or 12 months, whichever is first. A rewritten copy with names and numbers changed may be kept to test DaakyeSupabase
Alerts and the weekly summaryCreated by DaakyeTell the family when Daakye thinks the Parent got a scam messageAlert wording follows the 30-day rule above; the fact of the alert stays with the checkSupabase, Apple (push), Resend (email)
Who-looked logCreated when anyone opens the Parent's items, or downloads their dataShow the family who looked at whatLife of the familySupabase
"Pause before you pay" plan (amount, trusted contacts, dates)Account Owner and ParentRemind the family what they agreedUntil changed or the family is deletedSupabase
Device data: push token, app version, iOS versionEveryone who uses the appSend alerts and reminders, supportPush token until you sign out or delete your accountApple, Supabase
Activity record: the days you used Daakye and a short code for what you did (opened the app, opened an alert, opened the summary), never what you checkedEveryone in a familyCount active families and improve the Service13 months, then we keep only totals with no namesSupabase
App usage events, with a random ID made on your phone, not your accountEveryone who uses the appSee if setup and checks workUp to 12 monthsPostHog
Error reports from our server, with no message content or request dataCreated by our serverFix problemsUp to 90 days; our own error list 30 daysSentry, Supabase
Crash reports from the appTesters who allow Apple to share themFix crashesAs Apple keeps themApple
Questions you type in "Ask a question" in HelpAnyone who uses itAnswer from our help guidesNot stored or logged by usCloudflare
Contact Daakye messages and support conversationsAnyone who contacts usHelp you, and help again laterKept while you have an account; deleted with your accountSupabase, Resend, Google Workspace (our email)
Beta sign-up and survey answersPeople who join the waitlist or researchChoose beta families, improve the ServiceUntil you ask us to delete them, or 24 monthsCloudflare, Resend
Payment informationAccount Owner, once paid plans startCharge for the planCard details stay with Stripe. Billing records 7 years for taxStripe

We do not collect: your inbox, your message history, your contacts list, your location, your bank logins, health information, or Apple's advertising ID. We do not use tracking cookies or advertising trackers.

Information about other people. Messages you check often include someone else's name, number or email, usually the scammer, sometimes a real person or company being copied. We use it only to check for scams, and it follows the same 30-day rule.

6. What family members can and cannot see

What the family sees depends on the sharing level the Parent picks:

  • Only me: the family knows the Parent joined. Nothing else.
  • Alerts only: the family gets a short alert when Daakye thinks the Parent got a scam message: what kind of scam and when. Not the message.
  • Alerts and details: also why Daakye thinks so, and a short part of the message with private numbers hidden. At this level only, the Parent can also let family open the full original text (not pictures) for as long as it is kept.

Also:

  • The family never sees the Parent's ordinary texts or emails, or checks Daakye rated likely safe, unless the Parent's sharing level shows them.
  • The Parent can see every time a family member opened the Parent's items.
  • When the Parent leaves or stops sharing, alerts stop right away and the family can no longer open anything. The family sees that the Parent left and when.
  • If the Account Owner deletes the family, the Parent can still see their own checks for the rest of the 30 days and we tell the Parent by email. The family cannot.
  • Family members cannot see examples another person shared or their feedback, and cannot turn on sharing for the Parent.

7. How we use information

We use information to:

  • run the Service: accounts, family circles, checks, alerts, the weekly summary and reminders;
  • record and respect the Parent's choices;
  • keep the Service secure, including limits that stop abuse;
  • fix problems and improve the Service, using counts and the examples people choose to share;
  • send service messages, and reminders you can turn off;
  • handle billing once paid plans start;
  • follow the law and enforce our Terms.

AI processing. To check an item we send it to our AI provider, Anthropic, through its paid business service. Anthropic processes it for us under a contract, does not use it to train its models, and deletes it within 30 days. Anthropic may keep it longer only if its safety systems flag it as misuse of its service, or if the law requires it. Because the messages we check are often scams, this can happen. We do not use your messages to train AI models. Daakye's answers are guidance only and can be wrong. Our system, not the AI, decides when the family gets an alert. Daakye does not make decisions about you with legal or similar effects.

8. Who we share information with

  • Your family circle, as described above and as the Parent allows.
  • Service providers that help run Daakye, under contracts that limit their use of the data to serving us:
ProviderWhat they do for us
AnthropicChecks messages for scams (Claude API)
SupabaseDatabase and sign-in (US)
VercelRuns our server and records web traffic logs
ResendSends email and receives email at [email protected]
CloudflareHosts our website and waitlist, answers Help questions, protects staff tools
ApplePush notifications, Siri, TestFlight, crash reports, the App Store
PostHogCounts app events (anonymous)
SentryServer error reports (no content)
Google WorkspaceOur company email
StripePayments, once paid plans start
  • Legal reasons: if the law requires it, or to protect someone's safety, prevent fraud, or protect our rights. When the law allows, we will tell you first.
  • Business transfers: if Daakye is merged, bought, or sells its assets, information may move under this policy, and we will tell you.
  • When you ask us to: for example, to share something with your bank or the police.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

9. Daakye staff

Staff tools never show message content when looking up an account. Staff can read support messages you send us, and examples you chose to share. Every time staff open an account, a support request or a deletion, it is logged. Staff can access other content only to answer your request, keep the Service secure, or follow the law.

10. Your choices

The Parent can:

  • pick a sharing level and change it any time;
  • stop sharing, or leave the family;
  • see the who-looked log;
  • turn the text filter on or off in iPhone Settings.

Everyone can:

  • see and edit their name and phone number;
  • delete a check they sent;
  • turn "Help improve Daakye" on or off (turning it off removes examples we have not used yet);
  • turn off reminders, the weekly summary email and push notifications;
  • download a copy of their data (Settings, then Download my data). The family sees a note in the who-looked log that you did;
  • leave the family, or delete their account (Settings, then Delete my account).

The Account Owner can also delete the family for everyone (Settings, then Delete our family).

11. Deleting and keeping

When you delete a check, leave, or delete your account, access ends right away and message text is cleared. We then remove the rest from our systems within 30 days, and from backups within 7 days after that. We keep some records longer: billing, payment and tax records for 7 years to meet financial record-keeping and audit rules; the record of the Parent's consent as described in Section 5; and anything else the law requires us to keep or that we need to settle a dispute. These records do not include the messages you checked.

12. Security

We encrypt data in transit and messages at rest, limit and log staff access, and log every family look at the Parent's information. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires. To report a security problem, write to [email protected].

13. Your privacy rights

Depending on your state, you may have the right to:

  • know what personal information we have and get a copy;
  • correct it;
  • delete it;
  • opt out of sale, targeted advertising and certain profiling (we do none of these);
  • limit use of sensitive personal information (we use it only to run the Service);
  • appeal if we say no;
  • not be treated differently for using these rights.

How to ask. Use the in-app controls, or email [email protected] with the subject "Privacy request." We confirm it is you, usually through your account email. You may use an authorized agent; we may ask for proof and check with you. Being in your family circle does not make someone your agent. We reply within 45 days, or tell you if we need more time as the law allows. To appeal, reply with the subject "Privacy appeal."

Sensitive personal information. Messages you check may count as sensitive under some state laws. We use them only to run the Service you asked for.

California. We collect these categories: identifiers; customer records; commercial information (once paid plans start); internet or other electronic activity; inferences (Daakye's results); and sensitive personal information (contents of messages you choose to check). Sources, purposes, how long we keep them and who receives them are in Section 5. We do not sell or share personal information as California law defines those words, and we do not share it with others for their direct marketing.

Do Not Track and Global Privacy Control. We do not track you across other apps or sites. We treat a Global Privacy Control signal on our website as an opt-out request where the law requires it.

14. Children

Daakye is for adults 18 and older. We do not knowingly collect information from children under 13. If a message you check mentions a child, we handle it like any other message. If you think a child gave us information, write to [email protected] and we will delete it.

15. Where we process data

We are in the United States, and we store data in the United States. Some providers, such as Cloudflare, may handle web traffic at locations close to you.

16. Changes

We will post changes here and update the date at the top. If a change is important, we will tell you in the app or by email before it takes effect. If a change would let family see more of the Parent's information, we will ask the Parent again.

17. The waitlist and our website

This policy also covers the waitlist at daakye.ai, and it replaces the earlier waitlist notice.

  • What we collect: what you type into the form: your name, your email, whether you are an adult child or a parent, and your answers about your parent's phone, your parent's age range, how many siblings might join, and what worries you most. We do not ask for your parent's name or contact details. We also record which link brought you to the site, such as a campaign tag in the web address.
  • Why: to email you about the beta and launch, to choose which families to invite first, and to learn what families need.
  • Where it is kept: with Cloudflare, our website host. We send email through Resend.
  • How long: until you ask us to delete it, or 24 months after you join, whichever comes first.
  • Your choices: email [email protected] to see, correct or delete your information. Every email we send has an unsubscribe link.
  • Our website does not use advertising or tracking cookies.

18. Contact us

AI Innovation Foundry, Inc., doing business as Daakye
2261 Market Street, STE 72763
San Francisco, CA 94114
[email protected]

Back to daakye.ai