Duck.ai Privacy Policy

5 hours ago 1

The Duck.ai privacy policy and terms of service explicitly mentions:

All metadata that contains personal information (for example, your IP address) is removed before sending Prompts to underlying model providers (for example, Anthropic, Azure OpenAI, OpenAI, together.ai). If you submit personal information in your Prompts, it may be reproduced in the Outputs, but no one can tell (including us and the underlying model providers) whether it was you personally submitting the Prompts or someone else.

"All metadata that contains personal information" is aparently "removed".

But if you ask (specifically reproducable with GPT-4o mini) something like "Do you know the current time and location?", the model outputs with your correct approximate location and timezone. The one shown in the screenshot is my correct city and country, which can only be known via IP address.

I have never mentioned my location or timezone to duck.ai, nor have I submitted any other personal information before (I have only used duck.ai once or twice before for general questions)

This means that duck.ai does not remove personal information (like IP address) before calling the model providers (OpenAI). Therefore, that line in the privacy policy is a lie.

Please try to reproduce this yourself (with the GPT-4o model) before they patch it.

Read Entire Article