This privacy policy applies to the Dolphin app, website, and related test-preparation services provided by PaloAI Inc. (hereby referred to as the "Service Provider"). This service is intended for use "AS IS".
Information Collection and Use
The Application collects information when you download and use it. This information may include information such as:
- Your device's Internet Protocol address (e.g. IP address)
- The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
- The time spent on the Application
- The operating system you use on your mobile device
The Application does not gather precise information about the location of your mobile device.
The Service Provider may use the information you provided to contact you from time to time to provide you with important information, required notices and marketing promotions.
For a better experience, while using the Application, the Service Provider may require you to provide us with certain personally identifiable information, including but not limited to firstName, LastName, email. The information that the Service Provider request will be retained by them and used as described in this privacy policy.
If you choose phone-based sign-in or verification, the Application collects the phone number you provide and uses it to send transactional one-time verification codes by SMS. A phone number used for verification is not used for promotional text messages unless you separately select the optional promotional-SMS consent checkbox. SMS delivery providers and mobile carriers may process message metadata needed to deliver, secure, and troubleshoot these messages. This site is protected by reCAPTCHA. When SMS abuse protection is enabled, Google reCAPTCHA assesses your phone number, app or browser signals, and network information before a verification text is sent. We use this assessment to prevent automated abuse and measure mistaken blocks. Google processes this information on our behalf for security, fraud, and abuse prevention.
Pip Accountability Texts
If you separately enable Pip accountability texts, Dolphin uses your verified phone number, chosen reminder level, timezone, saved coursework dates, study plans, and completion checks to schedule reminders. Message contents and delivery metadata are processed by SMS providers and carriers. SMS opt-in records are not shared with third parties for their marketing. Verification alone does not enable reminders. You can pause in Settings → Accountability partner or reply STOP.
Promotional SMS Messages
If you separately opt in, Dolphin may use your phone number to send recurring promotional SMS messages about study tips, product updates, and offers. Consent is optional, is not a condition of creating an account or making a purchase, and can be withdrawn at any time by replying STOP. Reply HELP for help or contact [email protected]. Message frequency is up to 4 messages per month, and message and data rates may apply.
Dolphin records whether you opted in, when consent was provided, and the signup surface where it was collected so that we can honor and demonstrate your messaging preferences. Mobile information, including phone numbers, SMS opt-in data, and consent records, is not sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. We may share it with messaging providers and mobile carriers only as needed to deliver messages, prevent fraud, process opt-outs, and comply with law.
Dolphin College: chats and optional imports
Dolphin College stores chat text, extracted file content, imported course material, transcripts, and generated study materials to provide your account history and study tools. Relevant content, including earlier messages and connected information, may be processed by external service providers, including AI providers, to answer questions and generate study materials.
Google Calendar. If you connect Google Calendar, Dolphin requests read-only access to calendar names and event details to display your schedule. Where saved connections are available, Dolphin stores encrypted authorization tokens on its server so your connection can continue after a reload; schedule data is fetched when you view or refresh the calendar. Otherwise, the access token stays in the current browser session. If you select an event for a chat and send the message, its details become part of that chat’s saved context and may be processed by our AI service providers. Disconnecting clears the browser’s calendar data and deletes any saved connection credentials. For saved connections, Dolphin also asks Google to revoke access and tells you if this could not be confirmed. Existing chat context remains; you can also remove access in your Google Account permissions.
Calendar links. If you import a private iCalendar link, Dolphin stores the link in encrypted form and stores imported events. You can reimport the link to refresh those events.
Canvas. Connecting Canvas opens a hosted browser provided by Browserbase where you sign in to your school. A saved browser session supports reconnection. Dolphin stores connection references and the course content you select for import. Disconnecting the school connection does not remove course material already imported.
ChatGPT exports. Dolphin processes your uploaded export to show an import preview and stores the conversation text you confirm importing. This does not connect Dolphin to your ChatGPT account. Files and images included in the export are not imported.
Dolphin in ChatGPT. If you connect the Dolphin plugin, the permissions you approve let ChatGPT read your Dolphin coursework, selected source material, saved chats and study activities, progress, and calendar information to fulfill your requests. With write permission, it can create or edit the study work you request and save answers you submit. Relevant content and saved record identifiers are returned to ChatGPT; content you imported may include personal information. Interactive activities use your normal Dolphin sign-in and account permissions. Dolphin does not give ChatGPT your Dolphin password or connected-service credentials. Disconnecting the plugin in ChatGPT ends its connected access but does not delete previously saved conversations or Dolphin work; those remain subject to each service’s history and deletion controls.
Shared chats. If you create a shared-chat link, anyone with that link can read its snapshot. Information from connected services or imports may appear in the shared conversation. Removing the shared link prevents further access through that link.
Third Party Access
Dolphin uses external service providers to operate its features, including to process the information described in this policy. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.
The Service Provider may disclose User Provided and Automatically Collected Information:
- as required by law, such as to comply with a subpoena, or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- with their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.
Opt-Out Rights
You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.
Data Retention Policy
The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. If you'd like them to delete User Provided Data that you have provided via the Application, please contact them at [email protected] and they will respond in a reasonable time.
Children
The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.
The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider ([email protected]) so that they will be able to take the necessary actions. You must also be at least 16 years of age to consent to the processing of your personally identifiable information in your country (in some countries we may allow your parent or guardian to do so on your behalf).
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.
Changes
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
This privacy policy is effective as of 2026-07-13.
Your Consent
By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at [email protected].
Effective July 13, 2026