Security.
Who can see what, and how DawonAI protects you. The technical page has the details.
Who can see what.
-
You
Phone or computer
Your chat key is stored only here
-
Your network
Wi-Fi and internet provider
Sees that you use DawonAI, and when
Sees that you use a VPN
Sees that you use Tor
-
Your VPN
The company you chose
Sees your IP address and that you use DawonAI
-
Tor
Three volunteer servers
The first sees your IP address. The last sees that you use DawonAI. None sees both.
-
The relay
DawonAI, on DigitalOcean
Sees your account and youryour VPN’sa Tor IP address
Stores your saved chats, encrypted
-
The model server
DawonAI, on our own hardware
Reads your messages to answer them, and doesn’t write them down. Never learns your account or IP address.
Can see Can’t see
Tor: no single server sees both your IP address and that you use DawonAI.
With a VPN or Tor, the relay still sees your account when you sign in, and your saved chats’ ID each time they sync.
Cloudflare runs this website and DawonAI’s DNS. It isn’t in the path of the web app or pai.
What each part does.
The relay
Signs you in, issues day passes, stores your saved chats, and passes your messages to the model server. It can’t read your messages or saved chats.
The model server
Runs Qwen 3.8 27B and answers your messages. It reads each message to answer it, and doesn’t write it down.
Saved chats
Encrypted saved chats are stored under vault IDs that aren’t linked to your account. They’re encrypted with a key stored only on your authorized DawonAI devices.
Day passes
Every message carries a day pass. It proves you paid, without saying which account you are.
pai
Makes sure your coding harness talks only to DawonAI. Impersonators get blocked, so no one else can read your messages.
Stripe
Takes card payments. It knows who paid, and never sees your messages or chats.
What DawonAI protects, and what it doesn’t.
Protected
- Saved chats. Encrypted on your device. We can’t read them.
- Who paid, from what you ask. Day passes don’t name your account.
- Your email and phone number. We never ask for them.
- Message logs. Our servers don’t write down messages or IP addresses.
- Your account key. Coding harnesses never see it.
Not protected
- What you write. The model server reads every message. Anything identifying in it identifies you.
- Your IP address, from the relay. Use a VPN or Tor.
- One day’s messages. They share a day pass, so they can be grouped together.
- Patterns. While there are few users, your plan, harness and hours can stand out.
- Your sessions. Saved chats sync under one ID, so the relay can tie your sessions together.
- Card payments. Paying by card tells Stripe who you are.
Built to be checked.
- pai checks the server. It talks only to DawonAI and blocks impersonators.
- One-way login. Your account key never leaves your device. We store a hash of a key made from it.
- Release hashes. Check that the web app you load is our release. The code is published before the public launch.
Questions.
Your chats
Can DawonAI read my saved chats?
No. They’re encrypted on your device with a key stored only on your authorized devices. A tampered web app could steal that key, so you can check each release.
Can DawonAI read what I ask?
Yes, while answering it. The model server doesn’t write it down.
What do you keep?
- Your account: plan, paid-until date, devices, Stripe’s subscription ID, and a hash of a key made from your account key.
- Your saved chats, encrypted, under a vault ID that isn’t linked to your account.
- A daily encrypted backup of the relay. DigitalOcean also backs up the relay.
- Hourly error counts and service totals, with no messages, accounts or IP addresses.
We don’t write down messages or IP addresses. The model server’s disk isn’t encrypted yet.
How do I delete everything?
In the web app: Account, then Delete everything. You can also have the account delete itself after 30, 90 or 365 days unused.
Linking messages to you
Can my messages be linked to me?
Not through the day pass. They can be through:
- your IP address and timing, which the relay sees
- what you write
- the day pass, which groups one day’s messages from one device
- patterns, while there are few users
- your saved chats’ ID, in the web app
Does a VPN or Tor help?
Yes. The relay sees the VPN’s or Tor’s IP address, not yours. The other links above stay.
What does Stripe know?
If you pay by card: your name, card and email, and that you paid DawonAI. Never what you ask.
Your account and devices
What if I lose my account key?
If a browser is still logged in, open Account, then Make a new key. If not, we can’t recover the account: we only have a hash.
How do I stop paying without my key?
Cancel from Stripe’s receipt email. The refund policy has the rest.
What if I lose a device?
From another logged-in browser, remove the device, then make a new account key. The new key moves your saved chats somewhere the lost device can’t reach.
Do I need to install the web app on iPhone?
Yes, if you use Safari. Add it to your Home Screen, or Safari deletes its data, including your keys, after 7 days unused.
pai and the web app
Should I use the web app or pai?
Both reach the same model server. pai also blocks impersonators, which a browser can’t. Saved chats are in the web app only.
Orders and checks
What if DawonAI is ordered to hand over data?
We can hand over only what’s listed under “What do you keep?”. Saved chats are encrypted, and we can’t read them.
How do I check the web app hasn’t been changed?
Verify the app shows how to compare its files with our published hashes.
What’s next
What is DawonAI working on?
- A key for each device and each chat, so removing a device cuts it off.
- Full-disk encryption and tighter container limits on the model server.
- Later: Bitcoin payments, approving new devices, and device keys stored in hardware.
Each part of DawonAI, in detail.
What every server holds, sees and stores, and what an attacker controlling it could learn.
How DawonAI protects you