The short version: we collect your phone number to let you text with Dion. We don't sell it, share it, or do anything sketchy with it. If you opt out, we delete your data.
1. Who we are
Dion is an AI-powered creative director you interact with via SMS, operated by The Brooklyn App Company ("we," "us," "our"), based in Brooklyn, New York. This policy explains how we collect, use, and protect your information when you text with Dion or visit heydion.com.
2. What we collect
Information you provide
- Phone number (required) — to communicate with you via SMS
- Name (optional) — if you share it during conversation
- Images (optional) — photos you send for creative feedback (outfits, rooms, moodboards, etc.)
- Conversation history — your text messages with Dion, used to provide context and continuity
Information collected automatically
- SMS metadata — message timestamps and delivery status, provided by our messaging service
- Website analytics — standard analytics on heydion.com (page views, referrer) via Google Analytics, using cookies
3. How we use your information
We use your information to:
- Respond to your text messages with creative feedback and suggestions
- Analyze images you send for outfit checks, room design, and other creative tasks
- Maintain conversation context so Dion remembers your preferences and past interactions
- Generate images and creative content based on your requests
- Improve the service based on aggregate usage patterns
We do not use your information for advertising, and we do not build advertising profiles.
4. What we don't do
We want to be explicit about this:
- We do not sell your personal information to anyone
- We do not share your phone number with third parties for marketing
- We do not share your images or conversations with other users
- We do not use your images or conversation history to train AI models
- We do not send unsolicited marketing messages
5. AI and your data
Dion uses artificial intelligence to generate creative responses, analyze images, and create content. Your messages and images are sent to AI providers as part of the conversation processing.
We use third-party AI providers (including Anthropic and Google) to process content. Your messages and images may be included in prompts sent to these providers. These providers process data according to their own data handling agreements and do not retain prompt data for model training under our agreements with them.
6. Service providers
We use the following third-party services to operate Dion:
- Twilio — SMS messaging
- Google Cloud Platform — infrastructure and hosting
- Anthropic — AI content generation
- Google (Gemini) — AI content processing and image analysis
- Supabase — file storage
- Cloudflare — website hosting
- Google Analytics — website analytics
These providers have access only to the data necessary to perform their services and are bound by their respective privacy policies and our data processing agreements.
7. Data retention
We retain your data for as long as you are actively using Dion. When you opt out by texting "STOP," your data is deleted. This includes your phone number, conversation history, images, and any other information associated with your account.
Some data may persist in backups for a limited period after deletion, but is not actively used or accessible.
8. Your rights
You have the right to:
- Opt out at any time — text "STOP" to immediately stop receiving messages
- Request your data — email us to receive a copy of the information we hold about you
- Request deletion — texting "STOP" triggers automatic deletion, or you can email us directly
9. Cookies and local storage
The heydion.com website uses minimal browser storage:
- Theme preference — stored in your browser's localStorage to remember your light/dark mode choice (not a cookie, never sent to our servers)
- Google Analytics — standard analytics cookies to understand website traffic patterns
We do not use cookies for advertising or cross-site tracking.
10. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), secure cloud infrastructure, and access controls that limit who can view user information. No system is perfectly secure, but we take reasonable steps to safeguard what you share with us.
11. Children's privacy
Dion is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has used the service, please contact us and we will delete their information.
12. California and international users
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request its deletion. We do not sell personal information as defined by the CCPA.
If you are located outside the United States, please be aware that your information is processed and stored in the United States. By using Dion, you consent to the transfer of your data to the U.S. We apply the same protections to all user data regardless of location.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. For significant changes, we'll notify you via SMS. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.
14. Contact
Questions or concerns about your privacy? Email us at support@thebkapp.co.
The Brooklyn App Company
Brooklyn, New York