Privacy Policy

This Privacy Policy explains how Pappu (the "Service"), operated by Pratyush Kumar (the "Developer", "we", "us", or "our"), handles information when the Pappu Discord bot is installed in a server, when members interact with it, and when related web properties are used. By using the Service, you consent to the practices described here. If you do not agree, remove Pappu from your server and stop interacting with it.

Pappu is a personal, non-commercial project built for Discord communities. We intentionally collect the minimum information required to run the bot and to keep the Service healthy for everyone.

1. Information We Process

Pappu processes information sent to it through the Discord platform. This may include:

• Message content in channels where Pappu has been granted access, but only when a message is directed at Pappu (via mention, reply, or supported prefix command) or falls within a short conversational session Pappu is already participating in.
• Message metadata including message ID, timestamp, channel ID, guild (server) ID, and the Discord user ID and display name of the author.
• Server context such as the server's name, the channel's name, and role or permission signals that determine whether Pappu is allowed to respond.
• Attachments referenced inline, such as sticker names, custom emoji names, and reply targets, to the extent required to compose a coherent reply. Pappu does not download, store, or analyze uploaded image, video, or audio files.
• Configuration data intentionally set by a server administrator, such as a custom personality prompt or per-guild mode selection.

We do not read messages in channels Pappu cannot see, and we do not access direct messages between users. Pappu is not a moderation or surveillance tool.

2. How We Use It

Information processed by Pappu is used to:

• Generate a conversational reply that fits the current channel context.
• Maintain a short-lived session window (on the order of thirty seconds) so that follow-up messages feel coherent. This session is held in volatile memory and is discarded automatically.
• Enforce rate limits, cooldowns, and abuse protections.
• Apply per-guild configuration (personality prompt, tone mode, allow-lists, block-lists).
• Operate and improve the Service, diagnose incidents, and defend against abuse.

We do not sell your data. We do not use your data to train, fine-tune, or evaluate our own machine-learning models. We do not build advertising profiles.

3. Analytical Usage Data

To operate a free service on a finite compute budget, we collect anonymous usage metrics on a per-message basis. Specifically: we collect data of number of tokens generated by each message, along with information such as the server (guild) ID, the channel ID, the timestamp, and the member (user) ID that triggered the message, for analytical purposes.

This telemetry is used to:

• Understand aggregate load on the Service and plan capacity.
• Detect abusive patterns such as automated spam, prompt-injection loops, or attempts to exhaust our model quotas.
• Enforce fair-use limits at the server and member level.
• Debug performance issues such as latency spikes or provider quota errors.

We do not attach message content to these analytical records. The identifiers we retain (guild, channel, member) are opaque Discord IDs, not human-readable profile data.

4. Third-Party AI Providers

To generate replies, Pappu forwards the relevant portion of a conversation to one or more third-party large-language-model providers (currently including, but not limited to, Google Gemini). These providers process the submitted context on their own infrastructure and under their own privacy and data-handling policies. We select providers whose stated policy is not to train on inputs submitted through their API, but we cannot audit their systems and we make no independent guarantee about their internal practices.

Do not send secrets, credentials, private keys, sensitive personal information, financial account details, health information, or any other information you would not want a third-party AI provider to process. If a member of your community submits such information to Pappu, that information will be transmitted to a third-party provider.

5. Trust and Safety Checks by the Developer

To keep the Service healthy and to investigate reports of abuse, the Developer may join a server through Pappu for a faith check. This means the Developer may, at their own discretion, briefly join a Host Server (for example, by using an invite generated by an administrator or an invite associated with Pappu's onboarding) in order to:

• Verify that the server represents itself accurately when using Pappu.
• Confirm that the server is not using Pappu to target, harass, or endanger identifiable people.
• Investigate reports of Terms of Service violations before or after taking enforcement action.
• Understand the context of automated abuse reports.

Where practical, the Developer will identify themselves to server administrators during such a check. The Developer will not, as part of a faith check, exfiltrate member data, scrape message history, or participate in server activity beyond what is required to reach a decision.

6. Retention

• Short-term conversation context used to compose replies is held only in volatile memory and is discarded within a short session window (typically seconds).
• Per-guild configuration (custom prompt, mode, allow-lists) is retained for as long as Pappu remains in the server, and is removed on a best-effort basis after Pappu is removed from the server.
• Analytical usage records described in Section 3 are retained only for as long as needed for capacity planning, abuse detection, and incident response, and are aggregated or deleted thereafter.
• Diagnostic logs may be retained for a limited period to investigate incidents and are rotated out on a rolling basis.

We do not maintain a permanent archive of user messages processed by Pappu.

7. Disclosure of Information

We do not sell or rent your information. We may disclose information:

• To third-party AI providers strictly as required to generate a reply, as described in Section 4.
• To infrastructure providers that host or transport Pappu's traffic, strictly to the extent required to operate the Service.
• Where required by law, valid legal process, or a good-faith belief that disclosure is necessary to protect the rights, safety, or property of the Developer, the Service, its users, or the public.
• In connection with the investigation of suspected fraud, abuse, or violations of the Terms of Service.

8. Security

We take reasonable technical and organizational measures to protect the information Pappu processes, including limiting the scope of data collected in the first place. No online service is perfectly secure, and we make no absolute guarantee against unauthorized access, alteration, disclosure, or destruction of information.

9. Children

Pappu is not directed to children under the age of thirteen (13). We do not knowingly process data from users below the minimum age required to use Discord. If you believe a child has interacted with Pappu, please contact us and we will take reasonable steps to address the report.

10. Your Choices

• You can stop sending your data to Pappu at any time by not mentioning it, not replying to it, and not using its commands.
• A server administrator can remove Pappu from a server at any time, which stops all future processing for that server.
• You may contact the Developer to request deletion of persistently stored configuration associated with a server you control.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Effective" date at the top of this page. Continued use of the Service after an update constitutes acceptance of the revised Policy.

12. Contact

Questions, deletion requests, or reports of misuse should be sent to the Developer at pratyush@flollama.in or via Discord at @pratyushio_.