Privacy and terms
This page covers everything on daviddavisbukenya.no that touches your personal data: the idea form, the DEVDAVE terminal, and the estimates that come out of them. It is written to be read, not to be survived.
Who is responsible
David Davis Bukenya, Oslo, Norway — an independent developer, working alone. I am the data controller for this site. Questions and requests go straight to me: 2davedev@gmail.com
Why I am allowed to process it
When you send me a project idea or ask the terminal about an engagement, I process your data under GDPR Article 6(1)(b) — steps taken at your request before entering into a contract. You asked me about work; the data is what lets me answer.
I do not run advertising, profiling, or automated decisions with legal effect. Nothing on this site is sold or shared with anyone outside the processors named below.
What is stored
When you submit the idea form (or the compact version of it inside the terminal), one row is stored:
- your name
- your email address
- the idea text you wrote
- the budget band and timeline, if you picked them — both optional
- a one-way hash of your IP address, used only to rate-limit abuse; the address itself is never stored
- the timestamp, the language you used, and whether the submission passed the bot check
What is not stored
- Your conversation with DEVDAVE. The terminal keeps the thread in your browser for the length of the visit and I never see it. Nothing is written to a database.
- Voice recordings. I never store audio: if you use the microphone, the recording is sent to Groq to be transcribed and is handled there under their agreement.
- Cookies for tracking. The site uses cookieless analytics that count page views without identifying you.
How long I keep it
This is the promise made on the form itself, and it is the one that binds:
I store your name, email and the idea text to review it and reply. An AI system helps me triage submissions internally — nothing is sent back to you without me reading it first. Unconverted submissions are deleted within 12 months. Questions or deletion requests: 2davedev@gmail.com.
If we end up working together, the correspondence becomes part of the engagement record and is kept as long as the accounting rules require.
Who else touches it
Five processors, each doing one job:
- Groq (US) — the language model behind DEVDAVE. What you type into the terminal is sent there to produce a reply. Under its Services Agreement, Groq is not permitted to use inputs or outputs for training or fine-tuning, and deletes customer data within 30 days of termination. Transfers out of the EEA rely on the EU–US Data Privacy Framework and the Standard Contractual Clauses as offered in Groq’s data processing agreement.
- Cartesia (US) — the streaming text-to-speech that speaks DEVDAVE’s replies when you switch spoken replies on; Google Gemini only steps in if Cartesia is unavailable. Only the robot’s reply text is sent there, to be turned into audio, on a paid plan with training on that text switched off. Transfers out of the EEA rely on the Standard Contractual Clauses in Cartesia’s data processing terms.
- Google (Gemini text-to-speech) — the fallback voice, used only when you switch spoken replies on and Cartesia is unavailable. The robot’s reply text is sent to be turned into audio. Nothing you typed or said is sent there for any other purpose. Transfers out of the EEA rely on the EU–US Data Privacy Framework and the Standard Contractual Clauses in Google’s data processing terms.
- Cloudflare (Turnstile) — the bot check on the forms. It sees a challenge token, not your submission.
- Hetzner (Germany and Finland) — the servers this site and the idea inbox run on. Your submission stays inside the EU/EEA.
The AI on this site
DEVDAVE, the terminal on the front page, is my AI — not a person, and not a colleague. It is labelled as such wherever it appears, which is what the EU AI Act (Article 50) asks for, and it is scope-locked: it answers questions about my work and helps you describe a project.
It never quotes a price. Every figure on this site is produced by deterministic code, not by a model, and a proposal is written and reviewed by me before it reaches you. If the robot ever states an amount, treat it as a defect and tell me.
Nothing the AI produces commits me to anything, and nothing it does is a decision with legal effect about you.
Your rights
You can ask me for a copy of what I hold, ask me to correct it, or ask me to delete it — and I will do it, without asking why. One email is enough:
You also have the right to complain to Datatilsynet, the Norwegian Data Protection Authority.
Estimates and proposals
Prices, packages and timelines shown on this site or produced in a conversation are indicative. They are not an offer, and accepting one does not create a contract.
Priser er veiledende og uten forbindtlighet (avtaleloven § 9). Et tilbud gjelder i 30 dager fra dato.
Prices are indicative and without obligation. A proposal is valid 30 days from its date.
A note about language
This site renders in English first and switches to Norwegian with the toggle in the header — the switch happens in your browser, so a search engine or a screen reader arriving cold will see the English text. That is a limitation of how the site is built today, not a claim that the Norwegian version is secondary. Both say the same thing; if they ever disagree, tell me and I will fix it.
Last updated: 2026-08-26