Privacy Policy

1. Who we are

Dion is an AI-powered creative director you interact with via SMS, operated by The Brooklyn App Company ("we," "us," "our"), based in Brooklyn, New York. This policy explains how we collect, use, and protect your information when you text with Dion or visit heydion.com.

2. What we collect

Information you provide

• Phone number (required) — to communicate with you via SMS
• Name (optional) — if you share it during conversation
• Images (optional) — photos you send for creative feedback (outfits, rooms, moodboards, etc.)
• Conversation history — your text messages with Dion, used to provide context and continuity

Information collected automatically

• SMS metadata — message timestamps and delivery status, provided by our messaging service
• Website analytics — standard analytics on heydion.com (page views, referrer) via Google Analytics, using cookies

3. How we use your information

We use your information to:

• Respond to your text messages with creative feedback and suggestions
• Analyze images you send for outfit checks, room design, and other creative tasks
• Maintain conversation context so Dion remembers your preferences and past interactions
• Generate images and creative content based on your requests
• Improve the service based on aggregate usage patterns

We do not use your information for advertising, and we do not build advertising profiles.

4. What we don't do

We want to be explicit about this:

• We do not sell your personal information to anyone
• We do not share your phone number with third parties for marketing
• We do not share your images or conversations with other users
• We do not send unsolicited marketing messages

5. AI and your data

Dion uses artificial intelligence to generate creative responses, analyze images, and create content. Your messages and images are sent to AI providers as part of the conversation processing.

We use third-party AI providers, including Anthropic and Google, to process content. Your messages and images may be included in prompts sent to these providers so Dion can answer, analyze references, and generate requested content. These providers process that data under their applicable service terms, privacy policies, and our agreements with them.

6. Service providers

We use the following third-party services to operate Dion:

• Twilio — SMS messaging
• Google Cloud Platform — infrastructure and hosting
• Anthropic — AI content generation
• Google (Gemini) — AI content processing and image analysis
• Supabase — file storage
• Cloudflare — website hosting
• Google Analytics — website analytics

These providers have access only to the data necessary to perform their services and are bound by their respective privacy policies and our data processing agreements.

7. Data retention

We retain your phone number, messages, and images so Dion can maintain conversation context. Texting "STOP" stops future messages but does not delete this data. To request deletion, email support@thebkapp.co and identify the phone number you use with Dion. We may verify the request before deleting personal information associated with that number, subject to legal, security, fraud-prevention, and dispute-resolution obligations.

Some data may persist in backups for a limited period after deletion, but is not actively used or accessible.

8. Your rights

You have the right to:

• Opt out at any time — text "STOP" to immediately stop receiving messages
• Request your data — email support@thebkapp.co to request a copy of the information we hold about you
• Request deletion — email support@thebkapp.co and identify the phone number you use with Dion

9. Cookies and local storage

The heydion.com website uses minimal browser storage:

• Theme preference — stored in your browser's localStorage to remember your light/dark mode choice (not a cookie, never sent to our servers)
• Google Analytics — standard analytics cookies to understand website traffic patterns

We do not use cookies for advertising or cross-site tracking.

10. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), secure cloud infrastructure, and access controls that limit who can view user information. No system is perfectly secure, but we take reasonable steps to safeguard what you share with us.

11. Children's privacy

Dion is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has used the service, please contact us and we will delete their information.

12. California and international users

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request its deletion. We do not sell personal information as defined by the CCPA.

If you are located outside the United States, please be aware that your information is processed and stored in the United States. By using Dion, you consent to the transfer of your data to the U.S. We apply the same protections to all user data regardless of location.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. For significant changes, we'll notify you via SMS. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

14. Contact

Questions or concerns about your privacy? Email us at support@thebkapp.co.

The Brooklyn App Company
Brooklyn, New York