EFFECTIVE 21 AUGUST 2026
Privacy Notice
Atlantic SQ Ltd (company number 16467255), registered in England and Wales, is responsible for personal data used by Dorothy. Contact us at hello@dorothymindread.com.
Your data
What you enter: the Case story, questions and choices you choose to send. What the platform supplies: a pseudonymous player identifier, saved progress and purchase status. What Dorothy records: usage counters, entitlement status, limited error and security records, and optional allowlisted gameplay events when analytics is enabled. Optional analytics exclude Case text and AI replies.
You do not need to give Dorothy your real name, email address, contacts or precise location. The game platform handles payment-card details; Dorothy does not receive them. Please do not enter passwords, health records, sexual information, information about children, or another person's sensitive information in a Case.
How a game turn moves
Your device or game host sends the text needed for the current turn to Dorothy's Supabase backend in London (eu-west-2). Safety checks run first. The text is then sent to OpenRouter and the selected model provider only to generate the requested game reply. The reply and story state are encrypted into a save capsule and returned to the device or host platform.
Dorothy's operational database stores pseudonymous identifiers, counters, entitlements and security records—not a readable copy of your Case story or AI replies. A short-lived encrypted retry copy may remain for up to 24 hours. Pseudonymous identifiers are not claimed to be fully anonymous.
Why we use it
We use Case content and saved progress to generate replies, restore your Case and provide the features you request. This is necessary to perform our contract with you. We use limited usage, security and diagnostic information to prevent abuse, apply game limits and keep Dorothy reliable; our lawful basis is our legitimate interests in operating and protecting the service. Purchase and accounting records are used to provide paid features and meet legal obligations. Optional analytics or reminders are used only when you choose to enable them.
We do not sell personal data, use Case content for targeted advertising, or use it to train Atlantic SQ Ltd's own general-purpose AI model. Sharing a game result is always initiated by you and does not include your Case story or chat transcript.
Who receives it
We share only the information needed with the game platform, cloud hosting and AI processing providers, payment providers, and professional advisers supporting security, accounting or legal obligations. Case content is shared with AI processing providers only to generate the reply you request. These organisations must handle information under their own legal duties or contracts with us.
International transfers
Some providers may process information outside the UK. Where required, we rely on an adequacy regulation or safeguards such as approved standard contractual clauses and the UK transfer addendum. Contact us if you would like information about the safeguard relevant to your data.
How long we keep it
Your saved Case remains until you delete it, clear the platform save or ask us to delete eligible account records. Temporary retry copies expire within 24 hours. Optional analytics events expire after 90 days. Security, entitlement and purchase records are kept only as long as needed to prevent abuse, resolve disputes and meet tax, accounting or legal duties, then deleted or anonymised.
Your choices and rights
Use Privacy & Data Controls to export device data, delete the active Case, clear saved game data or change optional analytics. You may also ask us for access, correction, deletion, restriction or portability, object to processing based on legitimate interests, or withdraw consent at any time. We may need your platform identifier and reasonable verification before acting on an account-level request.
AI-generated game content
Dorothy uses automated tools to generate fictional game replies and apply safety rules to submitted text. These functions do not make legal or similarly significant decisions about you. Replies may be inaccurate and do not reveal another person's private thoughts.
Complaints
Contact us first so we can investigate. You may also complain to the UK Information Commissioner's Office at ico.org.uk, or to the data-protection authority where you live.
Contact
Email hello@dorothymindread.com for privacy help. Please do not send your Case story, password or payment information by email.