Chat with all AIPrivacy Policy
Last updated: November 13, 2026. Applies to Chat with all AI 1.0.5 and later and to getduoai.com.
Summary
- The extension sends data only when you act: your message, and — only if you choose — the page, a screenshot, an image or a voice recording.
- That data goes to our server and through OpenRouter to the AI model you picked, only to create your answer. We do not store your conversations, pages, screenshots or recordings.
- Your chat history and settings stay in your browser. Delete them any time in Settings.
- We keep a small anonymous record (a random install ID and request counters) to apply limits. “Delete all my data” erases it.
- Payments are handled by Dodo Payments as merchant of record. We never see your card.
- No ads, no analytics, no tracking cookies, no selling or sharing of personal data, and no use of your content to train AI models.
1. Who we are
This Privacy Policy explains how Chat with all AI (formerly Muse AI Assistant), a browser extension for Google Chrome, and the website getduoai.com handle information. Both are operated by NextApps AI (“we”, “us”). We are the controller of the personal data described here. Contact: romanvlasovdev@gmail.com.
Chat with all AI is an independent product. It is not affiliated with, endorsed or sponsored by Google, OpenAI, Anthropic, Meta, xAI or WhatsApp.
2. Key principles
- Action-based: the extension never reads pages, captures the screen or records audio in the background — only when you click, use a shortcut or a menu item.
- Minimal: the server keeps only what's needed to run limits and subscriptions.
- No profiling: no ads, no analytics SDKs, no tracking cookies, no data brokers.
- Your control: local history can be cleared and the server record deleted in one click.
3. Data we process, when and why
| Data | When | Why | Stored by us? |
|---|---|---|---|
| Your messages and the conversation so far | When you send a message | To generate the answer | No — processed in memory and discarded after the answer |
| Page content: title, address, visible text (up to about 60,000 characters) and selected text | Only when you turn on “This page”, use a page action (Summarize, Explain, Translate, Extract), the email/WhatsApp Reply tools, or “Ask AI about this page” | To answer about that page | No |
| Text you select and send with a right-click action | Only when you use the action | To perform it | No |
| Screenshots of an area you select; images you upload or paste | Only when you capture or attach an image and send it | To read or answer about the image | No |
| Image prompts and an optional reference image | When you create an image | To generate the image | No |
| Voice recordings | Only while voice input is on | To transcribe speech to text | No |
| Install record: random install ID, a hash of its access token, plan (free/pro), extension version, created and last-seen dates | When you first use AI features (or open checkout) | To recognise your browser, apply limits and prevent abuse | Yes, until you delete your data or stop using the extension |
| Usage counters: free requests used, daily requests, daily requests on the most powerful models | With each request | To apply the free plan and fair-use limits | Yes, together with the install record |
| Checkout session: install ID, chosen plan and checkout link | When you open Pro checkout | To connect a purchase to your browser | Yes, with the install record |
| Subscription data: subscription and customer IDs at Dodo Payments, product, plan, status, renewal date, trial length, cancel-at-period-end flag, and your checkout email as a keyed hash and a masked version (like “ro•••@gmail.com”) | If you buy Pro | To activate Pro, show your plan and let you restore and manage it | Yes, while the subscription exists and afterwards as long as accounting and tax law require |
| Restore request: the email you type as a keyed hash, a hashed one-time code and token, attempt count and expiry | When you use “Restore purchase” | To verify you and link Pro to another browser | Yes, briefly — codes expire after 15 minutes |
| Payment webhook IDs and types | When Dodo Payments notifies us | To process each payment event exactly once | Yes, as part of billing records |
Before you accept the data notice in the extension, nothing you type is sent. If you open Pro checkout before that, only the anonymous install ID and the plan you chose are sent so the purchase can be linked to your browser.
4. Data stored only on your device
The following stays in Chrome's local extension storage on your computer and is never uploaded to us: your chat history (text and images the extension generated for you — images you upload are not saved), settings (theme, language, default model, preferences), your onboarding and limit state, and your install access token. Use Settings → Clear chat history or Delete all my data, or uninstall the extension, to remove it.
5. How your request reaches an AI model
When you send a message, the extension sends it over HTTPS to our server (hosted on Railway). The server checks your limits and forwards the request to OpenRouter, a model router, which passes it to the provider of the model you chose: OpenAI (GPT models), Anthropic (Claude), Meta (Muse) or xAI (Grok). Image generation and voice transcription currently use Google models through OpenRouter. The answer is streamed back to your browser.
We do not keep a copy of the request or the answer. OpenRouter and the model providers process the request under their API terms and privacy policies; they may retain data for a limited time, for example for abuse monitoring, as described in their own policies. We do not use your content to train AI models and we do not allow it to be used for advertising.
6. Service providers (processors)
- OpenRouter — routes AI requests (text, page content, images, audio) to model providers.
- OpenAI, Anthropic, Meta, xAI, Google — generate answers, images and transcriptions for the model you select.
- Dodo Payments — merchant of record for Pro. Dodo collects and processes your payment details, name, email, billing address and tax information under its own privacy policy, and sends receipts. We never receive your card number.
- Resend — sends the one-time code for “Restore purchase”.
- Railway — hosts our server and database.
- Cloudflare — hosts and protects the getduoai.com website.
Infrastructure providers may log technical data such as IP addresses and request times for security and reliability for a short period. Our own error logs record status codes and short technical messages; we do not intentionally log message content, email addresses or codes.
7. The website getduoai.com
The website is static. It sets no cookies, uses no analytics or advertising tools and has no forms. Our hosting provider processes standard request data (such as IP address, browser type and the page requested) to deliver and protect the site. Links to the Chrome Web Store take you to Google, whose privacy policy applies there.
8. Browser permissions
- sidePanel — shows the extension in Chrome's side panel.
- storage — saves your settings and chat history locally.
- activeTab and scripting — read the current tab or start an area capture only after you click an extension button, menu item or shortcut.
- contextMenus — adds the right-click actions.
- Access to websites — shows the small floating button on the right edge of web pages, and lets the extension read the page or capture an area when you click an action. The floating button reads nothing from the page until you click it; you can hide it on any site, or everywhere, in Settings.
- Microphone — requested by Chrome only when you turn on voice input; used only while recording.
9. Chrome Web Store Limited Use
The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use data only to provide and improve the extension's user-facing features. We do not sell it, use it or transfer it for advertising, use it to determine creditworthiness or for lending, and humans do not read it except with your permission, for security purposes, to comply with law, or when it's aggregated and anonymized for internal operations.
10. Legal bases (EEA, UK and similar laws)
- Contract — to provide the features you use and your Pro subscription.
- Legitimate interests — to apply fair limits, prevent abuse and keep the service secure.
- Legal obligation — to keep billing records required by tax and accounting law.
- Consent — for optional permissions such as website access and the microphone, which you can withdraw in Chrome at any time.
11. How long we keep data
- Conversations, page content, screenshots, images and recordings: not stored by us; discarded after the answer.
- Install record, counters and checkout sessions: while you use the extension; deleted immediately with “Delete all my data”.
- Subscription and webhook records: while your subscription exists and afterwards for as long as accounting and tax laws require (typically up to 10 years for financial records).
- Restore codes: expire after 15 minutes.
- Infrastructure logs: a short period set by our providers.
12. International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses offered by those providers.
13. Security
All traffic uses HTTPS. Access tokens, checkout emails and restore codes are stored only as keyed hashes. Payment details never reach us. Access to our systems is limited. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you and authorities of a breach where the law requires.
14. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California's CCPA/CPRA), you can request access to, correction, deletion or a copy of your personal data, object to or restrict processing, and withdraw consent. Most requests can be completed instantly in the extension: Settings → Delete all my data. For anything else, email romanvlasovdev@gmail.com; we answer within 30 days and may need to verify the request. You can also complain to your local data protection authority.
California: we do not sell or share personal information for cross-context behavioral advertising, and we don't use sensitive personal information to infer characteristics. We will not discriminate against you for exercising your rights.
15. Children
The extension is not intended for children under 13 (or the minimum age required in your country). Users under 18 should use it only with a parent's or guardian's permission. We don't knowingly collect children's data; if you believe a child has used the service, contact us and we'll delete the related data.
16. Sensitive information
Please don't send passwords, payment card numbers, government IDs, health records or other people's confidential data to any AI service, including this one. If you share such content in a message or page, it is processed only to answer you and not stored by us, but it does pass through the providers listed above.
17. Changes to this policy
We'll update this page when our practices change and show the date at the top. For significant changes we'll also let you know in the extension or on this website before they take effect.
18. Contact
NextApps AI · Email: romanvlasovdev@gmail.com · Website: getduoai.com