Contact us

Privacy Policy for Dossier

Effective Date: July 31, 2026

Clevero AB ("Clevero," "we," "us," or "our") operates the Dossier mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use Dossier.

By using Dossier, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We collect information needed to provide, maintain, secure, and improve Dossier.

a. Account Information Dossier currently uses anonymous app accounts. We may collect and store an internal user identifier, authentication session records, subscription entitlement state, generation credit balances, and basic account timestamps. If Dossier later offers sign-in with Apple, Google, email, or another provider, we may also collect the account information supplied by that provider, such as email address and basic profile details.

b. User-Generated Content Dossier is built around creative content. Depending on how you use the App, we may collect and store:

  • character names, archetypes, identity traits, canon locks, and related notes;
  • uploaded reference photos and generated reference images;
  • image prompts, scene descriptions, style instructions, and generation settings;
  • generated, edited, reference, and canonical images;
  • prompt payloads, generation status, model identifiers, request identifiers, token usage, and error details needed for debugging, reproducibility, support, and credit accounting;
  • audio recordings or audio snippets you choose to submit for scene dictation, together with the resulting transcription or processed prompt text.

c. Face Data and Reference Photos Dossier processes face data only when you choose to upload a reference photo. The face data we collect consists of the uploaded photo and text descriptions of visible characteristics derived from it, including age range, face shape, eye color and shape, nose shape, lip shape, hair characteristics, skin tone, build, and distinctive visible marks.

We use this face data only to create an editable character identity, preserve the depicted person's likeness across images you ask Dossier to generate or edit, and display and manage your reference and generated images. We do not use face data to authenticate users, identify an unknown person, verify identity, track people, or make decisions about them. Dossier does not access Face ID, TrueDepth, or ARKit face-mapping data, and Clevero does not intentionally create or store a mathematical face template or faceprint.

Uploaded reference photos are stored in Cloudflare R2. The derived text descriptions and records linking the photos to your character are stored in Convex. To perform identity extraction and likeness-preserving image generation, Dossier gives OpenRouter and the selected underlying Google AI model provider time-limited access to the relevant reference photo and sends the derived traits needed for the requested output. Face data is not shared with RevenueCat, Apple payment services, or analytics providers. We do not sell face data, use it for advertising or marketing, or permit AI providers to use it for model training.

Dossier-controlled reference photos are retained until you delete the relevant image or your Dossier account. Derived facial-trait descriptions and their identity-version history are retained until you delete your Dossier account. Deleting a reference image permanently removes its Cloudflare R2 object and Dossier image record, but the editable traits previously derived from that image remain part of the character identity until account deletion. Deleting your account permanently removes all Dossier-controlled reference images, character identities, identity-version history, and related records. OpenRouter does not persist image files beyond the time needed to route a request, except where required for abuse prevention, security, billing, or legal compliance. The current Google AI endpoints used by Dossier may retain processed request data for up to 55 days for service operation and abuse monitoring, after which it expires under the provider's retention policy. Deleting content from Dossier stops future processing but cannot recall a request already processed during that limited provider retention period.

Before choosing a reference photo, Dossier presents this processing disclosure and asks you to continue or cancel. You must have the depicted person's permission and all necessary rights to upload and process their image. You can withdraw from future processing by deleting the reference image or your account.

d. Uploaded Media and Device Permissions Dossier may request access to your photo library, camera, microphone, or local files so you can choose reference images, save images, or dictate scene prompts. These permissions are used only when you actively choose the related feature.

Picked photos may be compressed on your device before upload. Uploaded photos and generated images are stored in cloud storage so they can be displayed in the App, used as references for generation, and deleted when you delete your account or content.

e. Purchases and Subscription Information For subscriptions and in-app purchases, we collect information related to purchase status, entitlement status, product identifiers, renewal or expiration state, and generation credit grants. We do not collect or store your payment card details. Payments are processed by Apple through the App Store and subscription entitlement handling is supported by RevenueCat.

f. Usage, Device, and Diagnostic Information We may collect limited usage, device, and diagnostic information, such as device type, operating system, app version, feature usage, timestamps, crash or error details, and network or service diagnostics. We use this information to operate the App, resolve issues, prevent abuse, improve reliability, and understand product usage.

2. How We Use Your Information

We use the information we collect to:

  • provide Dossier's core features, including onboarding, canon extraction, image storage, scene generation, gallery management, and account deletion;
  • analyze reference photos into editable visible traits and preserve the depicted person's likeness in user-requested generations and edits;
  • process uploaded media, prompts, generated images, and audio dictation through the AI and storage services needed to run the App;
  • manage your subscription, entitlement status, and generation credits;
  • secure your account, authenticate sessions, prevent fraud, and protect the service from misuse;
  • provide customer support and respond to inquiries;
  • debug errors, monitor reliability, and improve the App's performance and user experience;
  • comply with legal obligations and enforce our rights.

3. AI Processing and Service Providers

Dossier relies on trusted third-party service providers to operate the App. These providers may process personal information and user-generated content only for the purposes described in this Privacy Policy and under their own security and privacy commitments.

These providers may include:

  • Convex for backend infrastructure, authentication state, database storage, server functions, and realtime app data;
  • Cloudflare R2 for image and media storage;
  • OpenRouter and underlying AI model providers for identity extraction, image generation, prompt rewriting, scene suggestions, and audio transcription or processing;
  • RevenueCat for subscription entitlement management and purchase event handling;
  • Apple App Store for payment processing and in-app purchase infrastructure;
  • website, hosting, email, analytics, logging, or support providers used by Clevero to operate and support the service.

When you use AI features, relevant prompts, uploaded reference images, generated images, audio inputs, and related metadata may be sent to AI providers to produce the requested output. Dossier instructs OpenRouter to reject providers that use request data for provider data collection or model training. Face-data processing and its specific 55-day maximum underlying-provider retention are described in Section 1(c). We do not sell your personal information or use your content for third-party advertising.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

  • With Service Providers: We share information with providers that help us operate, secure, process, store, analyze, and support Dossier.
  • With Your Direction: If you export, save, share, or otherwise disclose content from Dossier, that content may be visible to the recipients or services you choose.
  • For Legal Reasons: We may disclose information if required by law, legal process, or valid requests from public authorities, or when necessary to protect our rights, users, or the public.
  • Business Transfers: If Clevero is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate notice and protections.

5. Data Storage and Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information against unauthorized access, loss, misuse, alteration, or disclosure.

Your structured app data is stored in Convex, and your uploaded and generated media is stored in Cloudflare R2. Reference photos are disclosed to OpenRouter and the underlying Google AI provider through time-limited URLs only when needed for the requested identity-extraction or image-generation operation. No method of transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security.

6. Data Retention and Account Deletion

Except for the specific face-data periods described in Section 1(c), we retain information for as long as needed to provide Dossier, maintain your account and content, comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements.

You can delete your Dossier account from inside the App. Account deletion is intended to remove your app account, authentication session records, character data, images, generated content, prompt and generation records, and purchase event records controlled by Dossier. Some information may remain for a limited time in backups, logs, App Store purchase records, RevenueCat records, or other third-party systems where retention is required for security, fraud prevention, accounting, legal compliance, or service operation.

If you need help deleting your account or content, contact us using the details below.

7. International Data Transfers

Clevero AB is based in Sweden. Your information may be processed in Sweden, the European Union, the United States, and other countries where we or our service providers operate. These countries may have data protection laws different from those in your country.

Where required, we use appropriate safeguards for international transfers of personal information.

8. Your Data Protection Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

  • access the personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of your personal information;
  • request restriction of or object to certain processing;
  • request a copy of your information in a portable format;
  • withdraw consent where processing is based on consent.

To exercise these rights, contact us using the details below. We may need to verify your request before responding.

9. Children's Privacy

Dossier is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe that a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated Privacy Policy on this page and update the effective date above. Your continued use of Dossier after the effective date of the updated Privacy Policy means that you accept the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or want to exercise your privacy rights, please contact us:

Clevero AB
5592819097
Klyfteråsen 55
427 35 Billdal
Sweden

Website: https://clevero.se/contact