Privacy policy
Last updated: October 12, 2026
This policy explains what AFThe Labs ("we", "us"), the company that makes Dimitri, collects when you use the Dimitri website and chat, how we use it, who we share it with, and the choices you have.
The short version: we store your conversations so you can come back to them, and we use them only to run Dimitri. We never use them to train AI models, we never send them to advertisers, and you can delete them.
What we collect
Your conversations. The messages you send and the answers you receive, stored so you can return to them. Please don't put passwords, account numbers or other details you need to keep private into a chat.
An anonymous account. There's no sign-up. On your first visit we create an account with a random ID and keep its sign-in in your browser's local storage. We don't ask for your name, email address or phone number.
Usage records. For each answer we record technical details: which AI model answered, how long it took, what it cost, whether it searched the web, the result of the safety check, the type of task our classifier assigned (for example "math" or "writing"), whether an ad was or would have been shown, and any thumbs up or down you give. These records don't contain the text of your messages.
Your IP address and device information. We use your IP address to limit how many messages can be sent, which keeps the service free for everyone. Our database stores only a salted one-way hash of it, not the address itself. Our hosting, security and ad providers (listed below) also receive your IP address and basic browser information when you visit.
Error reports. When something breaks, we send a technical error report to our error-tracking provider. These reports are set up to leave out your messages, request contents and cookies.
How we use it
- To answer your messages and keep your chat history.
- To choose which AI model answers each message, and to switch to another model if one fails.
- To run safety checks on messages and answers, and to block abuse, spam and automated use.
- To measure cost, speed and answer quality, so we can improve which models we use.
- To decide when ads appear, and to show them.
We don't use your conversations to train AI models, and neither do the AI providers we send them to: we reach AI models through OpenRouter with a setting that excludes providers that train on prompts, and our message classifier, TypeSafe, commits not to train on user data. We don't sell your conversations, and we never share them with advertisers.
Who we share it with
We share data only with the companies that help us run Dimitri:
| Provider | What it does for us | What it receives |
|---|---|---|
| OpenRouter | Sends each message to an AI model | The conversation so far |
| AI model providers, reached through OpenRouter: currently Anthropic, OpenAI, Google Cloud, Amazon Web Services, Microsoft Azure, CoreWeave, Morph, Inference.net and DeepInfra | Write answers and run safety checks | The conversation so far |
| Web search providers, reached through OpenRouter | Look up current information when a question needs it | A search based on your message |
| TypeSafe | Classifies each message so we can choose a model | Your latest message and the start of your previous one |
| Supabase | Database and anonymous sign-in | Everything we store |
| Vercel | Hosts the website | IP address, browser information and requests |
| Cloudflare (Turnstile) | Checks that new visitors are human | IP address and browser signals |
| Sentry | Error reports | Technical error details, without message text |
| Google (AdSense) | Serves ads | Cookie, device and browsing data (see below) |
Which AI provider handles a message depends on the task and on availability; the list changes as we change models, and we keep it current here.
We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the service, in which case this policy would continue to apply to it.
Ads and cookies
Dimitri is free because it shows ads. Ads appear below answers from time to time, are labeled, and are never chosen based on what you write: your conversations are never sent to ad providers.
We use Google AdSense to serve ads. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.
- You can opt out of personalized advertising by visiting Google's Ads Settings.
- You can opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info.
- Learn how Google uses information from sites that use its services.
Besides ad cookies, we keep your sign-in in your browser's local storage, which the service needs to work, and Cloudflare Turnstile may use similar technology to tell people from bots.
How long we keep it
- Conversations: until you delete them. Accounts with no activity for 12 months are deleted, together with their conversations.
- Usage records: kept to measure cost and quality. They don't contain message text, and once an account is deleted they're no longer linked to it.
- Rate-limit records (a hashed IP address and a count): deleted within 12 months.
- Error reports: kept by our error-tracking provider for up to 90 days.
- Our hosting and database providers keep short-term access logs under their own policies.
Deleting your data
Delete any conversation from the chat menu using the trash icon. This permanently removes its messages from our database.
Because there's no sign-in, your account lives in your browser. If you clear your browser data, use a private window or switch devices, you'll start a new account and won't be able to reach earlier conversations; they're deleted when the old account reaches 12 months without activity. We can't look up conversations by name or email, because we never collect either.
For privacy questions or requests, email info@afthelabs.com. Depending on where you live, you may have the right to access, correct or delete your personal information. We'll respond to requests we can verify.
Children
Dimitri is for people 18 and older. We don't knowingly collect personal information from anyone under 18. If you believe someone under 18 has used Dimitri, contact us and we'll delete what we can identify.
Security
Data travels over encrypted connections (HTTPS), and the database lets each account read only its own conversations. No system is perfectly secure, so we can't guarantee absolute security.
Where data is processed
We and our providers operate mainly in the United States. Some providers may process data in other countries.
Changes to this policy
When this policy changes, we'll update it here and change the date at the top. If a change is significant, we'll also note it on the site.