This Privacy Policy explains what personal data ConvoAI collects, why, who it is shared with and what choices you have. ConvoAI is provided by Yahor Hreben ("we", "us"), the controller of your personal data. You can reach us at yahorhreben@icloud.com.
1. What we collect
Account data. The first time you open the app, it creates a random installation identifier, kept in your device's Keychain, and an account on our server with a made-up display name, which you can change. If you sign in with Apple, we receive Apple's identifier for you and — if you choose to share them — your name and email address, which may be a private relay address from Apple.
Your content. The messages you send, the photos and PDFs you attach, the answers and the pictures, videos and audio created for you, the titles of your chats, and the thumbs up or down you give answers.
Purchases. Whether you subscribe to ConvoAI PRO, which product, its dates and its transaction identifiers, which we receive from Apple through Adapty. We never receive your payment card details.
Usage data. How the app is used — for example the screens opened, the features used and the purchases started — together with your device model, operating system, app version, language and an approximate location derived from your IP address. We collect it with Mixpanel, linked to your account identifier and display name, along with your plan and how many chats, messages, pictures, videos and audio your account has. It never includes the content of your messages.
Ad attribution. If you came to ConvoAI from one of our Apple Ads, Apple's own attribution tells Adapty which campaign it was. It does not identify you to other companies, and we do not collect your device's advertising identifier.
Technical data. Our servers record the IP address, time and outcome of requests, to run and protect the Service.
Support. If you write to us, your email address and what you write.
2. How we use it
- To provide the Service: answer your messages, create media, keep your chats and restore them on your devices.
- To apply your plan's daily limits and give PRO features to subscribers.
- To keep the Service safe: prevent abuse, fraud and attacks, and enforce our Terms of Use.
- To understand how the app is used and improve it, mostly from aggregated usage data.
- To measure which of our Apple Ads campaigns brought you to ConvoAI.
- To answer you when you contact us.
- To meet our legal obligations.
We do not sell your personal data, show you advertising, or track you across other companies' apps and websites.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: the performance of our contract with you (providing the Service and PRO), our legitimate interests (security, preventing abuse and improving the app), your consent where we ask for it, and our legal obligations.
3. How the AI works with your content
To answer you, the text, photos and files of a conversation are sent to Google's Gemini API, which writes the answer or creates the media. Before your first message is sent, the app asks your permission to do so. Google processes this content on our behalf under its terms for paid API use, which do not allow it to use the content to improve its products. So that a conversation can continue where it left off, Google keeps its exchanges for a limited time — currently up to 55 days. When you delete a chat or your account, we ask Google to delete them straight away.
4. Who we share it with
Only with the service providers that help us run ConvoAI, under agreements that limit how they may use your data:
- Google (Gemini API) — writing answers and creating media.
- Cloudflare (R2) — storing the photos, files and media in your chats.
- Our hosting provider — running our servers and database.
- Apple — Sign in with Apple and App Store purchases.
- Adapty — managing subscriptions and measuring which Apple Ads campaigns brought you.
- Mixpanel — app analytics.
We may also disclose data when the law requires it, to protect rights and safety, or as part of a sale or reorganisation of the Service, in which case this Policy continues to apply to it.
5. How long we keep it
Your account and chats are kept until you delete them. Deleting a chat removes it and its files from our servers. Deleting your account — Settings → My Account → Delete account — removes the account and all its chats, and their files soon after. Server logs are kept for a limited time. Usage data is kept by Mixpanel for as long as it is needed to understand trends, and purchase records for as long as the law requires.
Deleting your account does not cancel an App Store subscription: cancel it in your Apple ID settings.
6. International transfers
Our providers may process data in countries other than yours, including the United States. Where the law requires it, these transfers rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
7. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to receive a copy of it, to object to or restrict its processing, and to withdraw your consent at any time. You can delete your chats and your account in the app; for anything else, write to yahorhreben@icloud.com. You also have the right to complain to your data protection authority.
8. Security
Data travels encrypted, access to our systems is restricted, and your installation identifier stays in your device's Keychain. No system is perfectly secure, but we work to protect your data.
9. Children
ConvoAI is not meant for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this Policy
We may update this Policy. We will post the new version here with a new effective date and tell you in the app about significant changes.