daziLITTLE PLANS, GOOD COMPANY.

Privacy

Dazi is a student project (Turing College capstone). This page explains what happens to your data in plain English. It is not legal advice.

What we store and why

  • Account: your email and password (handled by Supabase Auth) — to log you in.
  • Birth year: to make sure every user is 18+. Others only ever see an age range (e.g. 30–34), never the year.
  • Profile: display name, languages, home city, bio, cities visited, hobbies, travel style — shown to other signed-in users and used for matching.
  • Gender and matching preferences (age range, gender): private, only used for matching, never shown.
  • Plans: your one-sentence plan and its card (city, dates, interests…). Phone numbers and emails are removed before anything is stored.
  • AI usage counters: how many AI actions you used in the last 24 hours — only to cap costs.
  • Embeddings: number lists computed by AI from your plan and from your bio, hobbies, cities and travel interests — used only to rank matches, never shown.
  • Match explanations: AI-written reasons why a plan fits yours, cached so reloading costs nothing.
  • Technical logs: Supabase (login) and Vercel (hosting) keep standard request logs, which include IP addresses and browser information, for security and debugging.

AI processing

AI requests go through OpenRouter to the model providers below. These providers may process the data outside the EU (e.g. in the US). Contact details are removed from your plan text before it is sent.

  • Turning your sentence into a plan card and writing match reasons: Google google/gemini-2.5-flash-lite, falling back to OpenAI openai/gpt-4.1-nano.
  • Matching (comparing plans and profiles as numbers, “embeddings”): OpenAI openai/text-embedding-3-small — from your plan card and your bio, hobbies, cities and travel interests.
  • Match reasons only use safe fields (plan headlines, shared interests, overlapping days, pace) — never your birth year, gender or preferences.

Every AI-written text in Dazi is labelled “AI-generated” (EU AI Act, Art. 50).

Where your data lives

  • Supabase (database and login) — EU, Frankfurt.
  • Vercel (hosting) — the app’s server code runs in Frankfurt (fra1).
  • Your browser — the sentence you type on the homepage stays only in this browser (localStorage). It is removed when you save a plan, sign out or delete your account, and after 7 days at the latest. A sentence typed while signed out is only offered to a new account created afterwards on this browser, never to someone else’s existing account.

How long we keep it

Until you delete your account. Ended plans stay in your own history until then.

Deleting your data

Go to Settings → Delete my account (also possible before you finish onboarding). Your account, profile, plans, embeddings, match explanations and AI usage records are deleted from the database immediately. Copies in our providers’ backups and logs expire on their own schedules.

Contact

Questions or requests: xiangquyuanfang@hotmail.com