Privacy Policy · Updated 20 Oct 2026
Privacy, in plain words
Dump keeps what you add on our server only while it's in your dump, and only to run Dump for you: to read it with AI models, write your brief, sync it and share it when you ask. Remove something and it's deleted. We don't sell it, show ads or track you, and this website uses no cookies. The AI companies that read your items for us use them only to answer us, never train on them, and delete them within 30 days.
This policy covers the Dump app for Mac and the website dump.computer.
Who we are
Dump is made by MsExtEmp, Inc., 220-410 Adelaide Street West, Toronto ON M5V 1S8, Canada ("we", "us"). We decide how your personal data is used, which makes us responsible for it under Canada's privacy law (PIPEDA) and its controller under laws such as the GDPR.
Questions about this policy or your data: anton@dump.computer.
What we collect
Only what Dump needs to work.
What you add
Text and notes you paste or drop, links, and files (documents, PDFs, images, screenshots and more), with each file's name, size, type and checksum. Where each card sits on your canvas. For a link, the page title and the page as your Mac downloaded it; for a YouTube video, its page and captions.
What Dump makes from it
The text Dump extracts from each item, a short card for each, and your brief.
What you add can contain personal data, about you or about other people. You choose what goes in, so please add other people's information only when you're allowed to.
Dump also keeps a copy of your dump on your Mac so it works offline. Deleting the app doesn't delete your data from our server (see Your rights).
Your account
Dump has no sign-up: no name, email or password. The first time Dump opens, your Mac makes a random ID that becomes your account. Once Dump is on the Mac App Store, the ID Apple gives your purchase (the AppTransaction ID) identifies your account instead. Neither tells us who you are. With your account we keep your trial and subscription status.
Usage
How much AI processing your account used each day, so we can apply daily limits.
Server logs
When the app or the website talks to our server, the server logs the IP address, the time, which request was made and whether it worked, the internal IDs of your items, and the size and cost of AI requests. Logs never contain what you added.
Website visits
The website counts visits with Plausible Analytics: which pages were viewed, which site sent you, your browser, operating system, device type and rough location. Plausible uses no cookies and never stores your IP address, so it can't tell who you are or recognize you on another day.
Your email, if you give it to us
On the website you can enter your email to get the download link. We use it only to send you that link. If you write to us, we keep your email and our conversation.
From Apple
Apple handles downloads, payments and subscriptions; we never see your name or payment details. Apple shows us App Store statistics, plus crash reports and usage data from people who chose to share them with developers. If you use the TestFlight beta, Apple passes on crash reports and any feedback you send through TestFlight.
What we don't collect
Your contacts, location, browsing history, or anything outside what you add to Dump. The app has no analytics or advertising code. The website uses no cookies, ads or trackers.
How we use it
| What for | Data | Legal basis |
|---|---|---|
| Running Dump: storing and syncing your dump, reading your items, writing and sharing your brief | Data: what you add, what Dump makes, your account | Legal basis: contract |
| Daily limits, security, preventing abuse, fixing problems | Data: usage, server logs, your account | Legal basis: legitimate interests:, keeping Dump working and safe |
| Counting website visits | Data: pages viewed, referring site, browser, device, rough location | Legal basis: legitimate interests:, knowing how the site is used |
| Sending the download link | Data: your email | Legal basis: contract:, you asked for it |
| Answering you | Data: your email and our conversation | Legal basis: legitimate interests |
| Meeting legal obligations | Data: what the law requires | Legal basis: legal obligation |
We use what you add only to run Dump for you. We don't sell your data, use it for advertising, or build profiles of you, and neither we nor our AI providers use it to train AI models.
Links you add
When you add a link, your Mac fetches the page straight from that website, as a browser would, so the site sees your Mac's IP address. Dump doesn't send your browser's cookies or logins. If your Mac doesn't fetch it (for example, because it went offline), our server fetches it instead, from our server's address.
Who sees it
AI providers
AI models read your items and write your brief, and we pick the model that does each job best. That can include models from Anthropic, OpenAI and companies that host open-source models. The table below lists every provider that receives your content today; we add a provider there before it gets any. Our AI providers use your content only to answer our requests and never train their models on it. They delete it within 30 days, and keep it longer only if their safety systems flag it for abuse review (Anthropic: up to 2 years) or the law requires it.
Service providers
Companies that run Dump for us, under contracts that limit them to our instructions:
| Company | What for | Where |
|---|---|---|
| Amazon Web Services | Our server: database, files, backups | United States |
| Anthropic | AI: reading your items and writing your brief (Claude) | United States |
| Resend | Sending emails from the website | United States |
| Plausible Analytics | Counting website visits | European Union |
Apple
Apple runs the App Store, payments, TestFlight and crash reporting under its own privacy policy.
People you share with
Share gives you a link to your brief. Anyone with the link can read the brief and the titles and sites of its sources, but not your files or the full items. The page shows your latest brief, and search engines are asked not to index it. You can't turn a link off in the app yet: email us and we will.
Us
We look at your dump only when you ask us to, or when we have to in order to fix a problem, keep Dump safe or follow the law.
Legal reasons and company changes
We disclose data when the law requires it. If MsExtEmp, Inc. merges or is sold, your data moves with Dump and stays under this policy.
Where it's stored
On our server at Amazon Web Services in the United States; website statistics stay with Plausible in the EU. We're in Canada, so we work with your data from there. Data held outside Canada is subject to the laws of the country it's in, and authorities there may be able to access it.
If you're in the EEA, the UK or Switzerland: the European Commission recognizes Canada as protecting personal data adequately, and your data goes to the United States and to the providers above under the Standard Contractual Clauses (with the UK Addendum), or under the EU-US Data Privacy Framework where the provider is certified.
How long we keep it
What you add, and what Dump makes from it
Only while it's in your dump. Remove a card and Dump deletes the item, its files, its extracted text and its card from our server right away; your brief drops it at its next update. Select all and delete (⌘A ⌫) removes everything. Our server is backed up daily and the last 7 backups are kept, so deleted data is gone from backups within 8 days.
Your account and usage records
Until you delete your account.
Server logs
Overwritten automatically as new entries come in. We don't keep them longer than we need to keep Dump running.
Website statistics
As long as we use Plausible. They don't identify you.
Your email
We don't store it. Resend, which sends the email, keeps a record of it for 30 days.
Emails you send us
As long as we need them to help you.
At our AI providers
Up to 30 days, except as described in Who sees it.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to stop using it for something. Email anton@dump.computer and we'll answer within 30 days. Because Dump has no login, we'll work with you to confirm which account is yours before we act.
To delete everything you added yourself, select all and delete (⌘A ⌫).
In Canada
You can ask to see and correct your personal information, and complain to the Office of the Privacy Commissioner of Canada.
In the EEA, the UK or Switzerland
You have the right to access, correct, erase, restrict and port your data, and to object to how we use it, including uses based on legitimate interests. You can also complain to the data protection authority where you live or work.
In California and other US states with privacy laws
You can ask to know, correct and delete your personal information. We don't sell your personal information or share it for targeted advertising, and we won't treat you differently for using your rights.
Security
Everything between the app, the website and our server travels encrypted (HTTPS). Our database isn't reachable from the internet. The app's sign-in tokens expire after an hour, and its upload links after 15 minutes. Only the people who run Dump can get into the server. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
Children
Dump isn't meant for children under 16, and we don't knowingly collect their data. If you think a child has given us data, email us and we'll delete it.
Changes
When this policy changes, we update the date at the top. If a change matters, we'll tell you in the app or by email before it takes effect.