Privacy Policy

Last Updated: March 6, 2026

GroupChatAI is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

1. Information We Collect

Personal Information

  • Email address (for OTP authentication)
  • Display name and profile picture
  • Messages and content you create within chats and events
  • AI-generated images you create or save
  • Preferences, settings, and relationship choices
  • Feedback and correspondence

Automatically Collected Information

  • Device type, operating system, and device identifiers
  • Usage data (features used, time spent, interaction patterns)
  • Log data (access times, errors, crash reports)
  • Performance data (app responsiveness, load times)
  • Session tokens

2. How We Use Your Information

  • Provide and maintain the service
  • Manage your account and sync your data across devices
  • Personalize your experience, including character memories and relationships
  • Generate AI responses based on conversation context
  • Generate AI images based on chat and event context
  • Send notifications (including proactive messages from AI characters)
  • Process subscriptions and in-app purchases
  • Provide customer support
  • Analyze usage and improve the service
  • Monitor for security issues
  • Comply with legal obligations

3. AI-Generated Content

  • All character responses, event narratives, and images are AI-generated
  • Conversations with AI characters are generated in real-time with no human involvement
  • We use third-party AI services (Google Gemini, OpenRouter) to generate text and image content
  • AI-generated content may occasionally be inaccurate or inappropriate
  • All characters are entirely fictional and do not represent real individuals
  • AI-generated images depict fictional scenes and do not portray real people

4. Data Storage

  • Chat messages, character data, and settings are stored locally on your device
  • If you enable cloud sync, your data is encrypted and stored on our servers (Supabase) to allow access across devices
  • AI-generated images are stored locally on your device; metadata is synced if cloud sync is enabled
  • We do not access or read your conversations unless required to provide technical support at your request

5. Data Sharing

We may share your information with:

  • AI Service Providers: Google Gemini and OpenRouter receive conversation context to generate responses and images. This data is processed per their respective privacy policies and is not used to train their models.
  • Infrastructure Providers: Supabase (database and authentication), RevenueCat (subscription management)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Retention

  • Account data is retained until you delete your account
  • Chat history is stored locally on your device; server copies exist only if cloud sync is enabled
  • Usage data is retained in anonymized form
  • Payment records are retained per financial regulations
  • You can delete your account and all associated data at any time from the app settings; deletion is completed within 30 days

7. Security

  • TLS/SSL encryption for all data in transit
  • Encryption at rest for sensitive data
  • Row-level security on all database tables ensuring users can only access their own data
  • Secure OTP-based authentication (no passwords stored)
  • Regular security assessments
  • Rate limiting and spending caps on AI services

8. Your Rights

You have the right to:

  • Access and export your data
  • Correct inaccurate information
  • Delete your account and all associated data
  • Opt out of notifications and analytics
  • Restrict data processing

9. Children's Privacy

GroupChatAI is not intended for children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it promptly.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We use standard contractual clauses and data processing agreements to protect your data during transfers.

11. California Privacy Rights (CCPA)

California residents have the right to know what personal information is collected, request deletion, opt out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising their privacy rights.

12. European Privacy Rights (GDPR)

EU/EEA/UK/Swiss residents have the right to access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, and to lodge a complaint with a supervisory authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the date at the top of this policy.

14. Contact Us

If you have questions about this Privacy Policy, contact us at [email protected]. We commit to responding within 30 days.