Privacy Policy

1. Introduction

Welcome to Conversaio ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Account Information: Name, email address, username, and profile information
• Communication Data: Messages, voice recordings, and AI conversation history
• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Usage Data: App usage patterns, feature interactions, session duration, and performance metrics

2.2 Automatically Collected Information

• Log files and analytics data
• IP address and approximate location
• Cookies and similar tracking technologies
• Crash reports and diagnostic information

3. How We Use Your Information

3.1 Primary Uses

We use your information for the following purposes:

• Service Delivery: Providing and maintaining our AI conversation services
• Personalization: Customizing your experience and improving AI responses
• Analytics: Understanding usage patterns to improve user experience
• Communication: Sending service-related notifications and updates
• Support: Providing customer service and technical support

3.2 AI and Machine Learning

Your conversation data may be used to:

• Train and improve our AI models
• Enhance natural language processing capabilities
• Develop new features and improvements
• Ensure quality and safety of AI responses

4. In-App Purchases and Subscriptions

4.1 Subscription Services

Our app offers monthly subscription services with the following data practices:

• Payment processing is handled through Apple App Store or Google Play Store
• We receive transaction confirmations but do not store payment card details
• Subscription status and billing history are tracked for service delivery
• Auto-renewal preferences and cancellation history are maintained

4.2 Purchase Analytics

We analyze subscription data to:

• Understand user engagement and retention
• Improve pricing and feature offerings
• Identify and prevent fraudulent transactions
• Comply with financial reporting requirements

5. Third-Party AI Data Sharing and OpenAI Integration

5.1 AI Data Sharing Disclosure

To provide our AI-powered language learning service, we share certain personal data with OpenAI, L.L.C. ("OpenAI"), a third-party artificial intelligence service provider. Before using our conversation features, you will be asked to provide explicit consent to this data sharing. The following personal data is sent to OpenAI when you use our AI conversation features:

• Your name — used to personalize AI tutor conversations
• Your selected learning language — used to tailor the conversation language
• Your language proficiency level — used to adjust conversation difficulty
• Your learning reasons and goals — used to customize conversation topics
• Your personal interests and topics — used to make conversations relevant to you
• Your conversation content (voice recordings and text messages) — processed in real time to generate AI responses

5.2 User Consent for AI Data Sharing

We obtain your explicit consent before sharing any personal data with OpenAI:

• Before your first AI conversation, the app will present a clear consent screen explaining what data is shared and with whom
• Your consent is voluntary — you may decline, but AI conversation features will not be available without consent
• You may withdraw your consent at any time through the app settings, which will disable AI conversation features
• Your data will not be shared with any other third-party AI service without separate, explicit consent

5.3 About OpenAI (Third-Party AI Provider)

OpenAI, L.L.C. is our third-party AI service provider. OpenAI provides the following data protections:

• OpenAI's API data usage policy states that data sent via the API is not used to train their models
• OpenAI maintains SOC 2 Type II compliance and enterprise-grade security standards
• Data is transmitted to OpenAI over encrypted connections (TLS 1.3) and is subject to OpenAI's data retention and deletion policies
• OpenAI's privacy policy and data processing practices are available at openai.com/privacy

5.4 OpenAI Compliance

In accordance with OpenAI's usage policies:

• We prohibit use of the service for illegal activities
• Content filtering is applied to prevent harmful or inappropriate content
• We monitor for policy violations and may suspend accounts for misuse
• Age restrictions apply in compliance with OpenAI terms

5.5 AI Data Processing

When processing your data through AI services:

• Your conversation data is processed in real time and is not stored by OpenAI beyond the session
• Your personal data and conversations are not used to train AI models
• AI training data usage follows strict ethical guidelines
• You can request exclusion from AI training datasets by contacting us

6. Data Security and Protection

6.1 Technical Safeguards

We implement industry-standard security measures:

• HTTPS Encryption: All data transmission uses TLS 1.3 encryption
• Data Encryption: Personal data is encrypted at rest using AES-256 encryption
• Access Controls: Role-based access with multi-factor authentication
• Regular Security Audits: Comprehensive security assessments and penetration testing
• Secure Infrastructure: Cloud hosting with enterprise-grade security controls

6.2 Data Retention

• Account data: Retained until account deletion
• Conversation history: Retained for service improvement (configurable retention period)
• Analytics data: Aggregated and anonymized after 24 months

6.3 Incident Response

In the event of a data breach, we will:

• Notify affected users within 72 hours
• Report to relevant authorities as required by law
• Provide detailed information about the incident and our response
• Implement additional security measures to prevent future incidents

7. Information Sharing and Disclosure

7.1 Third-Party Service Providers

We may share your information with:

• AI Service Providers: OpenAI and other AI platforms for service delivery
• Analytics Providers: For app performance and user behavior analysis
• Cloud Infrastructure: For secure data storage and processing
• Support Services: For customer service and technical support

7.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal process or government requests
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our terms of service

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity with equivalent privacy protections.

8. Your Privacy Rights

8.1 Data Subject Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Restriction: Limit processing of your personal data
• Objection: Object to certain types of data processing
• Withdrawal: Withdraw consent for data processing

8.2 Account Controls

You can manage your privacy settings through the app:

• Delete conversation history
• Adjust data sharing preferences
• Control analytics data collection
• Manage notification settings
• Export your data

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions by data protection authorities
• Binding Corporate Rules for international transfers
• Other legally recognized transfer mechanisms

10. App Store Compliance

10.1 Apple App Store Guidelines

In compliance with Apple's App Store Review Guidelines:

• We provide clear information about data collection and usage
• Users can access, correct, and delete their personal data
• We implement appropriate age verification mechanisms
• Location data collection requires explicit user consent
• We follow Apple's guidelines for AI and machine learning features

10.2 Google Play Policy

In accordance with Google Play's Developer Policy:

• We comply with the Personal and Sensitive Information policy
• Prominent disclosure of data collection practices
• Secure handling of personal and sensitive user data
• Compliance with applicable privacy laws and regulations

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes through:

• In-app notifications
• Email notifications to registered users
• Prominent notice on our website
• Updated "Last Modified" date at the top of this policy

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: info@conversaio.ai

Response Time: We will respond to your privacy-related inquiries within 3 working days of receipt.