PRIVACY POLICY

1. INFORMATION WE COLLECT

1.1 Information You Provide

• Account Information: Name, email address, phone number, and profile information when you create an account.
• Chat Content: Messages and conversations you have with our AI advisor service.
• User-Generated Content: Photos, voice messages, or other content you choose to share through the Service.
• Payment Information: Billing details processed through secure third-party payment processors (we do not store complete payment card information).
• Support Communications: Information provided when contacting customer support.

2. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

Core Service Functions:

• AI Conversation Service: To provide personalized relationship advice through our AI advisor.
• Service Personalization: To customize responses based on your relationship patterns and preferences.
• Feature Enhancement: To develop new features like voice responses and coach matching.
• Quality Improvement: To improve AI response quality and accuracy (conversations are anonymized).

Business Operations:

• Account Management: To create, maintain, and manage your user account.
• Payment Processing: To process subscription payments and manage billing.
• Customer Support: To provide technical support and respond to inquiries.
• Communication: To send service updates, feature announcements, and important notices.

Safety and Compliance:

• Safety Monitoring: To detect harmful content or potential safety concerns.
• Fraud Prevention: To prevent abuse, fraud, and unauthorized access.
• Legal Compliance: To comply with applicable laws and legal obligations.

Analytics and Research:

• Usage Analytics: To understand how users interact with our app (aggregated and anonymized).
• Product Development: To identify opportunities for new features and improvements.

Important Note on AI Training: Your personal conversations are NEVER used to train third-party AI models or shared with other AI companies for model improvement.

3. INFORMATION SHARING AND DISCLOSURE

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

3.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Service, including:

• Cloud hosting and storage providers (Amazon Web Services, Supabase)
• Payment processing services (Stripe, Apple Pay, Google Pay)
• Analytics and performance monitoring tools (Google Analytics, Mixpanel)
• Customer support platforms (Intercom, Zendesk)
• AI and machine learning service providers (Anthropic Claude)
• Email and communication services (Resend, Twilio)

These providers are contractually bound to protect your information and may only use it for specified purposes.

3.2 Legal Requirements

We may disclose information if required by law, legal process, or government request, or to:

• Protect the rights, property, or safety of AskGrandma AI, our users, or the public
• Enforce our Terms of Service
• Investigate potential violations of our policies
• Comply with applicable laws and regulations

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, user information may be transferred as part of the transaction, subject to equivalent privacy protections.

4. DATA SECURITY

We implement comprehensive security measures to protect your personal information and sensitive relationship conversations:

Technical Safeguards:

• End-to-end encryption for all chat communications using industry-standard encryption
• Data encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security assessments and penetration testing
• Multi-factor authentication for administrative access
• Secure API endpoints with rate limiting and DDoS protection
• Regular automated backups with encryption

Organizational Measures:

• Employee background checks and confidentiality agreements
• Strict access controls on a need-to-know basis
• Regular security training for all staff members
• Incident response procedures and breach notification protocols
• Third-party security audits and compliance certifications

Data Isolation:

• User conversations are compartmentalized and never used to train public AI models
• Personal conversations are not accessible by customer support without explicit consent
• AI processing occurs in secure, isolated environments

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. DATA RETENTION

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:

• Account Information: Until account deletion or 7 years after last activity
• Chat Content: Until account deletion or as required for service improvement
• Usage Data: Up to 24 months for analytics purposes
• Support Communications: Up to 3 years for quality assurance

You may request deletion of your account and associated data at any time through the app settings or by contacting us.

6. YOUR RIGHTS AND CHOICES

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request information about the personal data we have about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Restriction: Request limitation of processing in certain circumstances
• Objection: Object to certain types of processing

To exercise these rights, contact us at privacy@askgrandma.ai or through the app settings.

7. CHILDREN'S PRIVACY

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided personal information to us should contact us immediately at privacy@askgrandma.ai.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have different data protection laws than your country. When we transfer personal information internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions by applicable data protection authorities
• Other legally recognized transfer mechanisms

9. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of your personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at privacy@askgrandma.ai or call +1 (929) 899-2876.

10. EUROPEAN PRIVACY RIGHTS

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under applicable data protection laws, including:

• Lawful basis for processing your personal information
• Rights of access, rectification, erasure, restriction, and portability
• Right to object to processing and withdraw consent
• Right to lodge a complaint with supervisory authorities

Our lawful bases for processing include consent, contract performance, legal obligations, and legitimate interests. Contact our Data Protection Officer at dpo@askgrandma.ai for privacy-related inquiries.

11. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to enhance your experience and collect usage information. Types of technologies we use include:

• Essential Cookies: Required for basic app functionality and security
• Analytics Cookies: Help us understand usage patterns and improve our Service
• Functional Cookies: Enable enhanced features and personalization

You can manage cookie preferences through your device settings. Disabling certain cookies may affect app functionality.

12. THIRD-PARTY INTEGRATIONS

Our Service may integrate with or contain links to third-party services, including:

• Payment processors: Stripe, Apple Pay, Google Pay
• Analytics providers: Google Analytics, Mixpanel
• Cloud services: Amazon Web Services, Supabase
• Communication: Resend, Twilio
• AI Services: Anthropic Claude
• Social media platforms: Links to share content on Instagram, TikTok, Twitter

These third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to review their privacy policies before providing information. Specific Third-Party Privacy Policies:

• Stripe: https://stripe.com/privacy
• Google: https://policies.google.com/privacy
• Anthropic: https://www.anthropic.com/privacy
• Apple: https://www.apple.com/privacy/
• Supabase: https://supabase.com/privacy

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Provide notice through the app or via email
• Obtain consent where required by applicable law

Your continued use of the Service after such notice constitutes acceptance of the updated Privacy Policy.