Privacy Policy

Effective date: August 18, 2026

This Privacy Policy explains how DappHero Corp (“free-pi,” “we,” “our,” or “us”) collects, uses, stores, and shares information when you use the free-pi command-line service, including free-pi-cli and related services (the “Service”).

Our contact email is legal@freepi.ai.

1. Our Plain-Language Summary

free-pi is free because advertising helps pay for the AI inference users receive.

When you use free-pi, we may collect your coding-session content, including prompts, model responses, source code, and files or context that the agent reads. We call these records “traces.” We use traces to operate and improve the Service. We do not currently use traces to train AI models.

Ads are displayed in the terminal interface. Ad content never enters the model’s context. We do not include an advertisement’s content in the prompts, source code, or other context sent to the AI model.

2. Information We Collect

Information you provide or the Service receives from your coding session

We may collect and store traces, including:

prompts, messages, and instructions you send;
model responses;
source code, file content, terminal context, and other material the agent reads or receives;
configuration and command information necessary to provide the Service; and
feedback you provide.

These traces can contain confidential information, proprietary code, personal information, credentials, API keys, passwords, tokens, or other secrets if they are included in your prompts or context. We do not ask users to submit secrets, but we may inadvertently receive them when they appear in a session.

Account and authentication information

When you sign in through GitHub, we may receive and store:

your GitHub identifier;
your GitHub handle; and
your GitHub account creation date.

We do not receive or store your GitHub password.

Usage and operational information

We may collect information about how you use the Service, including:

token usage, request counts, inference cost, daily allowance usage, and billing/operational metrics;
device, command-line, application-version, and diagnostic information;
IP address, approximate location derived from IP, timestamps, and log information; and
information used to detect fraud, abuse, security incidents, or attempts to bypass Service controls.

Advertising and analytics information

We may collect information about terminal ad delivery, including ad impressions, clicks, campaign identifiers, and measurement information.

Our current providers include:

OpenRouter and applicable model providers for AI inference;
PostHog for product analytics; and
advertising providers for advertising delivery and measurement.

3. How We Use Information

We use information to:

provide and maintain the Service, including authentication, inference, and daily allowance management;
send permitted inputs to AI providers and return model responses;
store, analyze, evaluate, develop, and improve our models, tools, and Service;
measure usage, costs, performance, quality, and reliability;
display, measure, and improve advertising;
detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms;
respond to requests, enforce agreements, and comply with legal obligations; and
communicate changes, technical notices, and support information.

We may create aggregated or de-identified information and use it for these purposes to the extent permitted by law.

4. Our Legal Bases for Processing

If you are in the EEA, UK, or another jurisdiction that requires a legal basis, we process personal information as follows:

Performance of a contract: to provide the Service you request, authenticate your account, process prompts, return responses, and administer usage limits.
Legitimate interests: to secure and improve the Service, prevent abuse, measure operational performance, maintain records, and protect our rights. Where the law gives you a right to object to legitimate-interest processing (for example in the EEA/UK), you may contact us (see §6 and §9).
Consent: where applicable, including for certain advertising, measurement, cookies or similar technologies, and any processing for which consent is required. You may withdraw consent where it is the applicable legal basis.
Legal obligations: to comply with applicable law, lawful requests, and enforceable legal processes.

We rely on legitimate interests for the operational, security, and service-improvement processing described above. Where the law independently grants a right to object (for example in the EEA/UK), we will honor it as required.

5. How We Share Information

We may share information with:

AI and infrastructure providers, including OpenRouter and the model providers it routes to, to provide inference. Those providers process your requests under their own data policies, which may include retaining or using your Content to improve their models. We may change our routing and provider mix at any time as we optimize cost, speed, and quality;
analytics providers, including PostHog, to understand and improve the Service;
advertising providers to display ads and measure performance;
service providers that provide hosting, storage, security, support, and technical operations;
professional advisers such as lawyers, accountants, and insurers when reasonably necessary;
government authorities or other parties when we reasonably believe disclosure is required by law, legal process, or to protect rights, safety, security, or property; and
a successor organization in connection with a merger, financing, sale, reorganization, or transfer of assets.

We do not sell your source code as a standalone product. However, some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly, and our advertising and measurement practices may fall within those definitions. See “Your Privacy Rights.”

We do not permit advertisers to place ad content into the model’s context or receive your prompts, source code, or traces merely because they advertise through the Service.

6. Model Training and Session Traces

We do not currently use prompts, source code, context, model responses, or session traces to train AI models.

If we decide to begin training models with session traces, we will update this Policy and provide any notice required by applicable law before using traces for that purpose. We may offer a paid no-training option in the future.

Please do not submit code or information that you are not permitted to disclose. We use reasonable safeguards and access controls, but no system can guarantee that sensitive information will always be detected automatically.

7. Retention

We retain information only as long as reasonably necessary for the purposes described in this Policy.

Our current intended retention schedule is:

raw session traces: retained for as long as reasonably necessary to operate, secure, and improve the Service, except where deletion is required by law or you have an enforceable deletion right (see §9);
account, authentication, usage, security, billing, advertising, and analytics records: retained for as long as reasonably necessary to operate, secure, and improve the Service, comply with law, and resolve disputes; and
aggregated or de-identified information: may be retained indefinitely.

We may retain information longer when required or permitted by law, to address security or abuse, or to maintain a record of deletion requests.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, access controls, logging, and measures intended to reduce unnecessary exposure of secrets.

No system is completely secure. You should avoid including passwords, API keys, private keys, tokens, or other secrets in prompts or context unless you have assessed the risk and have permission to do so.

If we identify a security incident requiring notification under applicable law, we will provide notice as required.

9. Your Privacy Rights

Depending on where you live, you may have rights to: request access; request correction; request deletion; restrict or stop certain processing; object to processing based on legitimate interests; receive a portable copy; withdraw consent; and opt out of targeted advertising, certain sharing, or certain uses.

To make a request, contact legal@freepi.ai with the subject line “Privacy Request.” We may ask for information to verify your request and may limit or deny a request as permitted by law.

To request account or data deletion, contact legal@freepi.ai with the subject line “Privacy Request.”

If you are a California resident, you may have rights under the CCPA/CPRA, including rights to know, delete, correct, and opt out of certain “sale,” “sharing,” or targeted-advertising uses.

If you are in the EEA or UK, you may also have the right to complain to your local data-protection authority.

10. International Transfers

We may process information in the United States and in other countries where we or our providers operate. When required, we use appropriate safeguards for international transfers.

11. Children

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information to us, contact legal@freepi.ai.

12. Third-Party Links and Services

The Service may contain links to third-party services, including advertiser links. Their privacy practices are governed by their own policies.

13. Changes to This Policy

We may update this Privacy Policy as our Service, providers, or legal requirements change. We will post the updated policy, update the effective date, and provide additional notice for material changes when required.

14. Contact

For privacy questions or requests, contact:

legal@freepi.ai DappHero Corp Brooklyn, NY 11216