Slam Thunk Privacy Policy
Draft for attorney review. Not in effect. Effective date: [EFFECTIVE DATE]
This policy explains how Sumo Creations LLC ("we", "us") handles personal information in the Slam Thunk app and its tutor, Dunk. We are the business responsible for that information, and the data controller where that term applies.
The short version
- Slam Thunk is for adults 18 and over.
- What you say and type is saved to your account as transcripts, so you can pick up where you left off.
- Your voice goes to ElevenLabs and your words go to Anthropic, because those companies run Dunk's voice and replies. We ask for your permission before this happens.
- We do not sell your personal information, show ads, or use advertising or analytics trackers in the app.
- We do not train AI models on your conversations.
- You can delete a conversation or your whole account in the app. Section 4 explains what deletion does not reach.
1. What we collect
| Information | Examples | Why we use it | How long we keep it |
|---|---|---|---|
| Account | Apple's identifier for you, plus your name and email address if you share them at sign-in. With Hide My Email, we get an Apple relay address instead of your own | Sign-in, account security, showing your account in Settings, and contacting you about your account and the Service | Until you delete your account |
| Profile | The name Dunk calls you, up to three interests, your tutor style | Personalising Dunk and your lessons | Until you change it or delete your account |
| Conversations | Transcripts of what you and Dunk say and type, session titles and summaries | Providing the tutor, your history, generating lessons | Until you delete the conversation or your account |
| Voice audio | Your voice during a call | Transcribing what you say, so Dunk can reply | We do not store audio on our own servers. ElevenLabs keeps recordings for [X DAYS] |
| Lessons | Scripts, spoken recordings and flashcards made for you | Providing lessons | Recordings go when you delete the conversation. Scripts and flashcards stay until you delete your account |
| Documents and links | PDFs you attach, links you give, and text extracted from them | Reading them so Dunk can teach from them | The PDF file is deleted once read. Extracted text is removed after no live conversation uses it, normally within a day or two |
| Research requests | Search terms Dunk uses to find papers | Finding sources for you | Search services receive these. See Section 3 |
| Device and notifications | Your push notification token and device environment | Telling you when a lesson is ready | Until you sign out, the token stops working, or you delete your account |
| Usage counts | How many lessons and document reads you have used, with times | Enforcing daily limits | About a day. Older records are removed the next time you use that feature |
| Subscription | Your subscription status from Apple. We never receive your card details | Unlocking paid features | [X YEARS, FOR TAX AND RECORDS] |
| Technical traces and logs | Conversation content, prompts and replies in our debugging system, and activity logs | Fixing faults, measuring cost and quality, keeping the service safe | Traces: [X DAYS]. Logs: [X DAYS] |
| Safety checks | The kind of concern a message raised (financial, medical, self-harm or emergency) and when. Not your words | Showing you a safety notice, and alerting our team to a possible crisis or emergency | Until you delete your account |
| Support messages | What you send us by email | Helping you | [X YEARS] |
We collect this information from you, your device, Apple and our service providers. We do not buy data about you.
On your device. The app keeps a copy of your conversations and lessons on your device, protected by iOS file protection.
Information you should not share. Please do not give Dunk health details, financial or government ID numbers, passwords, or other people's personal information. Anything you say or upload is handled as this policy describes, even if it is sensitive.
2. How voice and AI work
Dunk is an AI, not a person. We ask for your explicit permission on the AI and data notice before your first conversation.
In a voice call, your microphone audio streams to ElevenLabs, which turns it into text and speaks Dunk's replies. ElevenLabs runs the voice conversation and calls the AI model that writes Dunk's spoken replies, which is a Claude model from Anthropic. It sends us the transcript when the call ends, and holds the recording under its retention settings.
In text mode, and for lessons, your words and relevant conversation history go to Anthropic, whose Claude models write replies, lessons and flashcards. Your name and interests can be included, so that Dunk can talk to you personally. ElevenLabs then records lessons as audio from the written script.
Documents and research. Text from your documents is sent to Anthropic and ElevenLabs when Dunk uses it. When you give a link, our servers fetch that page or document, and the website sees a request from our servers, not from you.
Who trains on your data:
- We do not use your conversations, voice or documents to train AI models.
- Anthropic may not train its models on content we send through our commercial API account, under its commercial terms. For voice calls, Claude is reached through ElevenLabs, so [CONFIRM BEFORE PUBLISHING: the same protection applies to that route].
- ElevenLabs [CONFIRM BEFORE PUBLISHING: we have turned off the use of our account's data for model training].
Safety checks. Each message you send or say is checked outside the conversation, by fixed phrases and by a Claude model at Anthropic. If it looks like a crisis or a medical emergency, we show you who to call and alert our team with your user ID and session ID, not your words. Someone on our team may then read that conversation. No one is watching live.
People can see some data. We can see transcripts and traces in our own systems. We look at them to fix problems, respond to you, check quality and safety, and meet legal duties. Our providers may also review or keep data where needed for safety or legal reasons, under their own terms.
Output about you is automated. We do not use it to make decisions with legal or similarly significant effects on you.
How we use information, and our legal bases
We use personal information to provide the Service, keep it secure, fix problems, enforce our Terms, respond to you, send service messages and comply with law. We do not use it for advertising. We use your email address to reach you about your account, the Service and legal matters. We do not send it to the AI providers that run Dunk or to our debugging system.
If the GDPR or UK GDPR applies, we rely on: performance of our contract with you (running the Service); your consent (sending your data to AI providers, and notifications), which you can withdraw at any time; our legitimate interests (security, debugging, quality, and protecting our rights); and legal obligation. Withdrawing consent does not affect earlier processing, but we cannot run Dunk without those providers.
This website. This site sets no cookies and uses no analytics or advertising trackers. Our hosting provider, [WEBSITE HOST], handles server logs such as IP addresses and page requests to deliver and protect the site.
3. Who receives your data
We share personal information only with the providers below, as needed to run the Service, and in the other cases listed under the table.
| Provider | What it does | What it receives |
|---|---|---|
| ElevenLabs | Voice calls, speech-to-text, Dunk's voice, lesson audio | Your voice, transcripts, your user ID, name and interests, lesson scripts, document text used in calls |
| Anthropic | Claude AI models for replies, lessons, flashcards, titles and summaries | Your messages, conversation history, name and interests, document text |
| Convex | Our backend database, file storage and hosting | Everything we store, as listed in Section 1 |
| Langfuse, self-hosted on [HOSTING PROVIDER] | Our debugging and quality system | Conversation content, prompts, replies and tool activity, mostly filed under your user ID |
| [ALERT DESTINATION] | Delivering safety alerts to our team | The kind of alert, your user ID and session ID, never your words |
| Apple | Sign-in, push notifications, in-app purchases, app distribution | Your account identifier, push token, lesson titles in notifications and subscription status |
| OpenAlex and arXiv | Finding and opening academic papers | Search terms and paper identifiers, sent from our servers |
| Websites you link to, and open-access paper hosts | Serving the page, document or open-access paper Dunk was asked to read | A request from our servers for that address |
We may also disclose information:
- to comply with law, legal process or a valid government request
- to enforce our Terms, or to protect the rights, safety and property of you, us or others
- to investigate fraud, abuse or security problems
- to our professional advisers and insurers
- as part of a merger, financing, sale of assets or similar transaction, in which case we will tell you
- with your consent
We may use and share de-identified or aggregated information that cannot reasonably identify you. We will not try to re-identify it.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have no actual knowledge of selling or sharing personal information of anyone under 16.
4. Deleting your data
Delete a conversation. Swipe it in your session list. This removes its transcript, title and summary from our active database and from your device. Its lesson recordings are deleted too, and its document text is removed once no live conversation uses it. Lesson scripts and flashcards stay on our servers until you delete your account. The ElevenLabs recording and our traces stay until their retention period ends or you delete your account.
Delete your account. Go to Settings, then Delete account, and confirm with Sign in with Apple. We then erase your account, conversations, lessons, documents, notification devices and usage records. We also ask ElevenLabs to delete the recordings and transcripts of your conversations, we delete traces filed under your account, and we revoke the app's access to your Apple sign-in. The app erases what it holds on that device.
What deletion does not reach:
- Your subscription. Deleting your account does not cancel it. Cancel with Apple first.
- Anthropic. Anthropic keeps API data under its own retention terms, for [X DAYS], and longer if content is flagged for safety review.
- ElevenLabs onboarding. We keep no record of your onboarding call, so we cannot delete it on request, although ElevenLabs holds it with your user ID. ElevenLabs removes it after [X DAYS].
- Provider failures. Deletion at a provider is attempted automatically and can fail. If it fails, that copy stays until the provider's retention period ends. Some traces, including those made when naming a conversation, are not filed under your account, so they stay until [X DAYS].
- Backups. Copies in backups are overwritten within [X DAYS].
- Other devices. The app erases its copy only on the device you delete from. Copies on your other devices stay until you delete the app there.
- Records we must keep. We may keep information where the law requires, to resolve disputes, to enforce our Terms, or for security and fraud prevention.
- De-identified data. This may be kept, as it no longer identifies you.
You can also ask us to delete your information at [PRIVACY EMAIL].
5. Your rights
Depending on where you live, you may have the right to:
- know what personal information we hold, and get a copy in a portable format
- correct it
- delete it
- withdraw consent
- object to or restrict certain processing
- opt out of sale, targeted advertising and certain profiling (we do none of these)
- appeal our decision on your request
To make a request, email [PRIVACY EMAIL]. We verify requests, usually by asking you to confirm control of your account, and we respond within the time the law sets, typically 30 to 45 days. An authorised agent may act for you where the law allows. We will not discriminate against you for using your rights. If we deny your request, we will explain how to appeal. You may also complain to your state attorney general or data protection authority.
California. In the past 12 months we collected these categories: identifiers; commercial information (subscription status); internet or network activity (usage counts, logs); audio information (voice); inferences (session titles and summaries, and your learning conversations); and sensitive personal information only if you choose to include it in a conversation. We disclosed them for business purposes to the providers in Section 3. We do not sell or share them. We do not use sensitive personal information for purposes that would give you the right to limit it. Retention periods are in Section 1.
EEA, UK and Switzerland. [If the app is offered there: name of EU/UK representative, and the transfer mechanism.] We are based in the United States, and your information is processed there. Where the law requires, we rely on a lawful transfer mechanism such as the European Commission's standard contractual clauses.
6. Adults only
Slam Thunk is not for anyone under 18, and we do not knowingly collect information from them. If we learn that we have, we will delete the account and its data. If you believe a minor is using the app, contact [PRIVACY EMAIL].
7. Security
We use encryption in transit, per-account access controls and iOS file protection. No system is completely secure, and we cannot guarantee the security of your information. If a breach affects you, we will notify you as the law requires.
8. Changes to this policy
We may update this policy. We will post the new version with its date. If a change is material, we will tell you in the app or by email, and we will ask for your consent again where the law requires. The AI and data notice in the app will ask you again if it changes.
9. Contact
Sumo Creations LLC, [STREET ADDRESS, CITY, STATE, ZIP, USA]
Privacy questions and requests: [PRIVACY EMAIL]