The AI and your data

What Divvent's AI is shown, what it never sees, what it can and can't do by itself, and how its use is paid for.

Divvent's AI helps design your application. It proposes changes, maps spreadsheet columns and explains faults. It works from the design of your application, never from the records inside it. This article explains where that line is, and why it holds.

What the AI sees

When you ask for a change, the AI is shown:

your words: what you typed in the box, and the conversation on that change so far;
your application's design: the names and descriptions of its records, fields, roles, pages, flows and connections, the story on What it is, and recent changes;
what Divvent can build: the building blocks every application is made from.

That's all it needs to propose a change. It never sees what is stored in your application: not your customers, bookings, invoices or notes. This isn't a promise to be careful. Divvent is built so the part that talks to the AI has no way to reach your records.

The words you type are sent to the AI, so keep real details out of them. It never needs a customer's name or phone number to add a field. Divvent refuses anything that looks like a payment card number, and saves nothing when it does.

Importing a spreadsheet

Importing is where your data comes closest to the AI, so it is kept apart on purpose:

The file is uploaded to your application, not to Divvent. It is previewed, run and undone there. See Import your existing records.
Only the file's shape can come to Divvent: each column's heading, what the column looks like (text, a date, a number), how many cells are filled and how many different values there are. For example, "1,198 different values in 1,201 rows" is enough to tell that a column holds names, without showing any of them.
The Import tab in Settings shows you exactly that shape before anything is sent. Pressing Propose a mapping into… sends it and nothing else.
Values such as status words (Compl. becoming Completed) are matched inside your application, and never reach Divvent.

No row of your spreadsheet reaches Divvent or the AI.

When something goes wrong

Divvent checks your application's numbers every hour: counts, timings and error codes, never your data. If something looks wrong, it investigates before you have to. See Health and Activity.

On Settings, the Health tab has Ask why for a fault. That asks the AI what is most likely wrong, using the same numbers and your application's design. It never reads your records. You can ask about a given fault at most once an hour; asking again within the hour shows the same answer. Each Ask why counts against your AI budget. Investigations that Divvent starts itself are paid for by us.

If the AI suggests a fix, it comes back as a change for you to read, like any other. It is never applied by itself.

What the AI can't do by itself

The AI proposes. People decide.

It never approves or releases anything. Every proposal becomes a change that a person reads and approves, and approving makes a version without releasing it. Releasing is a separate step on Releases. See Read a change and approve it.
It doesn't decide how big a change is. Divvent works out the size from what the change actually does, not from what the AI says about it, and that size decides who approves it.
Changes that widen access or send data somewhere new go to our team. A change that lets more people reach something, sends data somewhere it didn't go before, or changes how your records are protected is reviewed by Divvent, whatever your account approves itself.
Some things only a person can do. The AI can't set what your application keeps about people (you choose that when you create it). It can't turn off the second sign-in step for a role, lower how sensitive a kind of record is marked, or record less about changes than it does now. A proposal that tries is refused, and nothing changes.
It never reaches your hosting or your secrets. Where your application runs, its credentials and the keys to your connected services are out of its reach.

Your AI budget

Every answer the AI gives costs a little and counts against your account's one AI budget, in pounds. That includes checking your request is about your application, a question, a proposal, a reworked proposal and an Ask why. You pay whether or not you accept the answer.

Each change shows what it has cost so far, and each turn of its conversation shows its own cost.
Plan and billing shows the budget, what is left and when it resets. There are also limits on how much can be asked in an hour and in a day. They are only mentioned when one stops someone.
When the budget is used up, requests wait until it resets. You are never charged extra, and nothing is sent to the AI in the meantime.
A request that isn't about your application is turned down. After several in a row, you see the same answer for a while. That lifts by itself within an hour.

See Plans and billing.

Helping us improve the AI

On Settings, under Helping us improve the AI, an owner can let Divvent keep what people type into the box, to make its suggestions better. It is off until an owner turns it on, and it applies to one application at a time. The screen shows the exact wording you agree to. In short: only the sentence is kept, with which application it was about and whether the suggestion was right. Nothing about your data is kept.

You can turn it off at any time with Turn this off. That stops anything more being kept. Sentences kept while it was on are not deleted. If we ever change the wording, it switches off until an owner agrees to the new words.