Privacy policy

• Your ideas are private by default. We do not publish them or show them to other users.
• We do not use your idea as a public example. Every example on this site is built from invented data.
• We do not send the text of your idea to our analytics provider, and we do not record your screen or sessions.
• We do not train our own or cross-customer recommendation systems on your idea text. If that ever changes, it will require a separate, explicit opt-in.
• We do not sell your personal information or your ideas, and we do not share them for advertising.
• To run a Scout, parts of your idea are sent to the AI and search providers named below. That is the one place your idea leaves our systems, and only to produce your report.

DittoScout is a product of MadMooze, operated by MadMooze LLC, 108 W Crystal Dr, Sanford, FL 32773 (“DittoScout”, “we”, “us”). Our website is www.madmooze.com. We are the controller of the personal information described on this page. You can reach us about privacy at privacy@madmooze.com.

This policy covers the DittoScout website, web app and mobile app. The terms of service cover what the product does and does not promise.

Account information. Your email address, your password (stored only as a secure hash by our authentication provider), an optional display name, your plan, and the identifier our payment provider gives your customer record.

Your ideas and research. The idea titles and descriptions you enter, the structured specification each idea is turned into, the Scouts you run and their progress, the resulting reports and scores, ScoutWatch settings and alerts, and any feedback you leave on a report, including optional notes.

Problem reports. If you report a problem, we keep what you wrote, which part of the product you said it was about, the page you were on and the Scout you were reading if you came from one, and which build of DittoScout you were using. We do not attach your IP address or anything else from your session, and we never record the full web address — only the in-app path — because a full address can carry access tokens in it.

Payments. When you buy credits or subscribe, our payment provider (Stripe) collects your payment details. No payment information — card numbers, bank details or billing addresses — is stored on our systems. We keep your credit balance, a ledger of credit purchases and uses, your subscription status, and the payment notifications Stripe sends us to confirm a payment happened.

Usage and technical information. Our hosting provider records standard request logs, which include IP addresses, browser and device details, and the pages or endpoints requested. We record how many Scouts you run and what they cost us, to enforce plan limits, prevent abuse and price the service.

Product analytics. On the website we record a small, fixed set of events — for example that a Scout was created, a report was viewed or an upgrade was clicked — along with values such as the Scout type or plan. These events are anonymous: they are not linked to your account, they never include idea text, competitor names or report contents, and page views are recorded only for public pages. Our analytics provider receives your IP address and browser details with each event and uses them to estimate an approximate location. The mobile app does not currently send analytics.

Messages to us. If you email us, we keep the message and our reply.

DittoScout researches public products. To do that it stores information about apps, websites and open-source projects, some of which relates to people:

• App and product listings — names, descriptions, ratings, prices, install ranges, update dates and the developer or publisher name shown publicly on app stores, product websites and code repositories. We collect these from public app store pages, from licensed data providers (including DataForSEO), and from public search and code-hosting APIs, and we keep a history of how listings change over time.
• App reviews — the text, star rating, title and date of public reviews, obtained from licensed data providers and used to identify common complaints and requests. We do not store reviewers’ names, usernames or profile pictures.

We use this information, on the basis of our legitimate interest in providing market research, only to analyse products for our users. If you are a developer or reviewer and want to ask about, correct or object to information about you, contact privacy@madmooze.com.

• To provide the service you asked for — creating your account, running Scouts, storing and showing your reports, ScoutWatch rescans and alerts, exports and account deletion. Legal basis: performance of our contract with you.
• To take payments and manage credits. Legal basis: contract, and our legal obligations for tax and accounting records.
• To keep the service secure and fair — rate limits, spend limits per Scout, abuse detection and fixing faults. Legal basis: our legitimate interests in protecting the service and its users.
• To understand and improve the product through the anonymous analytics described above and aggregate cost and usage figures. Legal basis: our legitimate interests.
• To contact you about your account — for example password resets and important changes to this policy. Legal basis: contract, or our legitimate interests.
• To comply with the law and respond to lawful requests.

We do not use your information for automated decisions that have legal or similarly significant effects on you. The scores and verdicts in a report are about a market, not about you.

We share personal information only with service providers that process it on our behalf to run DittoScout, under contracts that limit their use of it, and only as much as each needs:

• Supabase — database and authentication.
• Vercel — hosting for the website and the servers that run Scouts.
• OpenAI (and Google Gemini, if we switch to it) — receives your idea text to turn it into a structured specification and search plan, and to measure how similar products are to your idea; also receives retrieved public listing and review text to extract features and group reviews into themes. Where the provider supports it, we ask it not to store the requests.
• Search and app-data providers — web search (Tavily or Brave), GitHub, Apple’s App Store search, and DataForSEO (Google Play search and app reviews). They receive search terms generated from your idea — short phrases, not your full description — or the identifiers of apps being researched. They do not receive your name or email.
• Stripe — payment processing, subscriptions and receipts.
• PostHog — the anonymous product analytics described above.
• Zoho — our email service, for account emails such as password resets and for messages you send us.

We may also disclose information:

• if the law requires it, or to protect the rights, safety or property of anyone;
• as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your information and we will tell you before it changes.

Competitor and market records describe public products, not you. They are shared across the service: if two people research neighbouring ideas, both reports may cite the same product. Your ideas, reports and scores are never shared with other users.

• Essential — sign-in cookies that keep you logged in and protect your session. The service does not work without them.
• Analytics — PostHog stores a random identifier in a cookie and in your browser’s local storage, so it can count visits and events without knowing who you are. Blocking cookies or local storage for this site in your browser stops it without affecting the service.

We do not use advertising cookies, cross-site trackers, session recording or social media pixels. The mobile app keeps your sign-in session in storage on your device.

• Account, ideas, reports and watch data — for as long as your account exists, or until you delete them. Deleting an idea permanently deletes it, together with its Scouts, reports and ScoutWatch.
• Credit ledger and subscription records — for as long as your account exists.
• Billing records — the payment notifications we receive from Stripe are kept for up to 2 years, or until 30 days after your account is deleted, whichever comes first, and are then deleted automatically. No payment information is stored on our systems. Stripe stores your payment information and its own records under the Stripe privacy policy, which we do not control.
• Request logs from the public app sources we check — 90 days.
• Hosting logs and analytics events — for the periods set by our hosting and analytics providers.
• Backups — deleted data can remain in our database provider’s encrypted backups until they are overwritten on its own schedule, which we do not control. See Supabase’s privacy policy and security page.
• Public product and market data, including listing history and review text — kept indefinitely, because the history of a market is what the service analyses.

• Export. From your settings you can download your profile, ideas, Scouts and reports, watchlists, alerts and credit history as a file.
• Correct. You can change your display name in settings. For anything else, contact us.
• Delete. You can delete any idea from your ideas list; it is deleted permanently, with its Scouts, reports and ScoutWatch, once no Scout on it is still running. You can delete your whole account from your settings. This permanently removes your profile, all your ideas, Scouts, reports, watchlists, alerts, feedback, problem reports, credit balance and ledger, and the usage records tied to your account, and cancels any active subscription with Stripe immediately, without a refund for the current period. Remaining purchased credits are forfeited, so export first if you want to keep anything. A subscription bought through the App Store or Google Play can only be cancelled there, so we will ask you to cancel it before deleting your account. Billing records and backups are handled as described above.

Depending on where you live, you may also have the right to access the personal information we hold about you, to object to or restrict how we use it, to have it transferred to another service, and to withdraw consent where we rely on it. Residents of the European Economic Area, the United Kingdom and Switzerland have these rights under data protection law, and may complain to their local data protection authority.

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect, use and disclose; to access, correct and delete it; and not to be discriminated against for exercising these rights. In the past 12 months we have collected the categories described in “What we collect from you”, for the purposes described above, and disclosed them only to the service providers listed. We do not sell or share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information beyond what is needed to provide the service.

To exercise any of these rights, email privacy@madmooze.com from the address on your account. We may need to verify your identity, and we will respond within the time the law requires. You may use an authorised agent, and if we decline a request you can ask us to reconsider it.

Our service providers, including our AI, analytics and payment providers, process data in the United States and other countries whose laws may differ from yours. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses and the UK addendum to them.

Access to your ideas and reports is restricted to your account by database access rules. Connections are encrypted, secrets and provider keys stay on our servers, internal data about public apps is not reachable from users’ browsers, and billing and credit changes are recorded in an audit trail. Text retrieved from other websites is treated as untrusted and never given control over the analysis. No system is perfect; if a breach affects your information, we will tell you what happened and what it affects, as the law requires.

DittoScout is for adults. You must be at least 18 years old to create an account, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account, contact us and we will delete it.

When we change this policy we will update the date at the top of this page. If a change materially affects how we use your information, we will tell account holders before it takes effect. Any change that widens how we use your idea text will require your opt-in.

MadMooze LLC
108 W Crystal Dr, Sanford, FL 32773
privacy@madmooze.com
www.madmooze.com