1. What we collect
Account information
- Your name and email address.
- Your password, stored only as a secure one-way hash (bcrypt). We can't see it.
- If you choose "Continue with Google": your name, email address and a Google account ID that Google shares with us to sign you in. We never receive your Google password.
- Your plan and the date you joined.
- If you reset your password: a one-time reset code, stored only in hashed form and expiring after 30 minutes.
Your content
- Your conversations: the messages you send, the AI's replies, and any web sources cited in them.
- Text from files you attach. Their contents are sent as part of your message.
- Photos you take with the camera or attach. They are resized in your browser, saved with the conversation, and deleted when you delete that conversation or your account. Camera access is only used while the camera window is open, and only the photo you choose to send leaves your device.
- Notes you save.
Usage and billing
- How many messages and web searches you've used each day, to apply plan limits.
- If you subscribe: your Paddle customer and subscription IDs, subscription status and renewal dates. Card and payment details are entered on Paddle's secure form and never reach our servers.
In your browser
- We store your sign-in token and a few preferences (sidebar and web search settings) in your browser's local storage. We don't use advertising or tracking cookies. Paddle's checkout may set its own cookies when you pay.
- Voice input records audio only while the microphone button is active. The recording is sent to OpenAI to be turned into text and is not stored by us; only the resulting text goes into your message.
2. How we use it
- To provide the Service: sign you in, generate replies, save your history and notes, and apply your plan.
- To handle subscriptions, renewals, cancellations and refunds.
- To keep the Service secure and fix problems.
- To contact you about your account or important changes.
We do not sell your personal data, use it for advertising, or use your conversations to train AI models.
3. Who we share it with
- OpenAI generates AI replies and runs web searches. Your messages, recent conversation history, attached text and photos are sent to OpenAI's API for each reply. Under OpenAI's API terms, this data is not used to train their models by default and may be kept for a limited time for abuse monitoring.
- Paddle is our payment reseller and Merchant of Record. It processes payments, taxes, invoices and refunds, and receives your email and payment details under its own privacy policy.
- Our email provider sends account emails, such as password reset links, and receives your name and email address to do so.
- Google, only if you use "Continue with Google": it confirms who you are so you can sign in.
- Our hosting providers store the database and run the servers.
- Authorities, if the law requires it.
4. How long we keep it
- Conversations and notes stay until you delete them or your account.
- Deleting a conversation in the app removes it from our database right away.
- You can delete your account at any time in Settings. This immediately removes your account, conversations, notes and usage records, and cancels any paid subscription. Billing records that tax law requires us (or Paddle) to keep are retained.
5. Your rights
You can ask to see, correct, export or delete your personal data, or object to how we use it. Email abdulwadoodhashmi10@gmail.com from your account's email address and we'll reply within 30 days. Depending on where you live (for example under the GDPR or CCPA), you may also complain to your local data protection authority.
6. Security
Passwords are hashed, repeated failed sign-ins are temporarily blocked, changing or resetting your password signs out every other device, every request is checked against your account so no one else can read your data, and payment details stay with Paddle. No system is perfectly secure, so use a strong, unique password.
7. Children
The Service isn't meant for children under 13. If you believe a child has given us personal data, contact us and we'll delete it.
8. International transfers
Our providers may process data in the United States and other countries. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.
9. Changes
If we change this policy in a significant way, we'll tell you in the app or by email before it takes effect.