Privacy Policy

Effective date: 21 September 2026

Information we collect

• Account information: name, email address, account role, and authentication information when you register or sign in. Passwords are processed for authentication; the application's own password records use salted hashes.
• Legal conversations and matter records: questions, messages, facts, dates, people or organisations you mention, generated responses, summaries, legal classifications, and matter identifiers. This information can include sensitive personal, financial, employment, family, health, or criminal-case information if you choose to provide it.
• Documents and workspace records: files you choose to upload, filenames, file types, sizes, extracted text, and associated client, case, task, and activity records.
• Lawyer profiles and referrals: practice areas, location, professional experience, languages, availability, fees, and profile information. When requesting a referral, you supply contact details and a consultation preference, and we record your consent and the referral status.
• Technical information: IP addresses used for abuse prevention, request and error information processed by hosting services, and browser or device information transmitted with web requests. Cookies and local storage hold sign-in tokens, guest identifiers, the current matter identifier, and theme preferences.

The Android app uses an internet connection and the system file picker for files you select. It does not request access to contacts, SMS, call logs, microphone, camera, or precise device location, and does not include an advertising identifier SDK.

How we use information

We use information to authenticate users, remember conversations, provide legal information and document assistance, organise legal work, suggest relevant lawyers, process referrals you authorise, maintain security, investigate errors, and respond to support or privacy requests. The current app does not include advertising or advertising tracking SDKs.

Only share information you are entitled to provide. Avoid unnecessary identity numbers, passwords, payment-card details, and sensitive information about other people.

AI processing and service providers

Relevant messages, matter facts, case context, and document text may be sent to an external AI service to generate responses, summaries, or drafts. The application integrates NVIDIA-hosted AI for conversational assistance and OpenAI for supported lawyer-workspace features, depending on the enabled feature and server configuration. Do not assume that AI conversations remain only on your phone or that this service is end-to-end encrypted.

The service also uses Vercel for hosting and Supabase for configured authentication, database, and document-storage services. Website fonts are loaded from Google Fonts, which receives technical web-request information. These providers process information needed to deliver their services and may retain records under their applicable service terms and privacy policies.

Provider information: NVIDIA, OpenAI, Vercel, Supabase, and Google.

Sharing with lawyers and other recipients

When you consent to a lawyer referral, we share your contact details and a factual case brief with the selected lawyer and create the associated lawyer-workspace record. The referral flow does not send your full conversation as the referral brief. Information you later provide directly to a lawyer or add to their workspace is handled as part of that engagement.

Authorised workspace users can access records available to their workspace. Service operators and providers may process information for support, maintenance, and security. Information may also be disclosed when required by a lawful request or necessary to address fraud, abuse, or threats to safety. External legal-source links and lawyers' own services are subject to their own privacy practices.

Storage, security, and international processing

The hosted service uses HTTPS for network transport. Access checks, authentication, and server-side credentials help protect stored information. No internet service can guarantee absolute security. Service providers may process information outside Uganda or your country of residence.

Guest conversations are stored by the service and are associated with a guest token on your device. They are not automatically anonymous merely because you have not registered.

Retention and deletion

Account, conversation, matter, referral, and document records do not currently have a fixed automatic deletion period in the application. They remain stored until removed through an available feature or an operator-handled deletion process. Security logs and provider backups may have separate retention periods.

Clearing app data, clearing browser storage, signing out, or uninstalling the app removes or changes local access but does not by itself delete server-side records. An authorised lawyer-workspace user can delete uploaded documents through the document controls.

To request deletion of your account and associated personal data, use the dedicated account deletion request page. You can also email info@dott-media.org with the subject "Legal Advisor data deletion request". Identify your account email and the scope of your request. For a guest conversation, include a matter reference if available; never send your password or session token. We may need information to verify your authority over the records.

Some records may need to be retained for applicable legal obligations, security, or the rights of others. A lawyer may separately retain professional records under their own obligations. Where a deletion request cannot be completed in full, we will explain what is retained and why. Provider backup removal follows the relevant provider's retention process.

Your choices and privacy requests

You can choose what to submit, decline a lawyer referral, and stop using the service. Contact the address below to request access to, correction of, or deletion of personal information, or to raise a concern about its use. Available rights depend on applicable law and the records involved.

Children and information about other people

A parent or guardian concerned that a child has submitted personal information can contact us to request review or deletion. Avoid submitting unnecessary identifying details about children or other people when describing a legal problem.

Changes to this policy

Updates will be posted on this page with a revised effective date. Material changes to data handling may require additional notice or consent.