Last Modified: 13 August 2026
This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the Chaticon: Chatbot AI Assistant mobile application, the website chaticon.co, and related services (the "Service").
By using the Service, you consent to the data practices described in this Policy. If you do not agree, please do not use the Service.
For privacy inquiries or data subject requests, please contact us at support@chaticon.co.
When you create an account, we collect:
Our hosting provider (Firebase / Google Cloud) automatically logs:
Logs are kept for a limited period (typically up to 30 days) for security and error analysis (GDPR Art. 6(1)(f)).
We use cookies and similar technologies on the website. See Section 6 for details.
The Service requires users to be at least 13 years of age (or the minimum digital-consent age in their jurisdiction). We do not knowingly collect personal data from children below the applicable minimum age. If we learn that a user is below the applicable minimum age, we will delete the account. Parents or guardians may contact support@chaticon.co.
We process personal data for the following purposes:
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing and operating the Service (chat, image generation, model routing) | Contract (Art. 6(1)(b)) |
| Processing payments and subscriptions | Contract |
| Managing your gem balance and entitlements | Contract |
| Binding web purchases to in-app accounts (funnelUserId mapping) | Contract |
| Improving the Service (aggregated, anonymized) | Legitimate interest (Art. 6(1)(f)) |
| Sending product updates and important notices | Contract / Consent |
| Marketing communications and promotional offers | Consent (Art. 6(1)(a)) |
| Advertising and audience targeting | Consent |
| Fraud prevention, abuse detection, content moderation | Legitimate interest |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
We work with the following categories of third-party service providers. Each provider has access only to data necessary to perform its function and is contractually obligated to protect your data.
Your prompts and conversation context are transmitted to the selected provider in order to generate a response. When you generate or edit an image, your prompt and — for photo editing — the photo you upload are transmitted to the image provider. Providers may use submitted content as described in their own privacy and usage policies.
These requests are sent from Chaticon's own servers rather than directly from your device. Your message content is passed through unchanged; we do not retain a copy beyond what is needed to deliver the response to you. If a provider rejects a request, we log a short extract of the provider's error response for diagnosis; that extract can include part of your request, and it is retained on the server-log schedule described in Section 8.
Cookie consent management may be provided by a third-party consent platform on the website.
We may disclose personal data to law enforcement, regulators, or other authorities when required by applicable law, subpoena, or court order.
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to this Policy.
We do not sell your personal data to third parties for monetary consideration. Sharing for advertising purposes (Section 4.4) does not constitute a sale under most jurisdictions but may be classified as "sharing" for cross-context behavioral advertising under certain laws (e.g., CCPA / CPRA). You may opt out of such sharing in your device settings or via our cookie consent banner.
We may use aggregated, anonymized prompt and response data to improve the Service, monitor routing quality, detect abuse, and develop new features. Aggregated and anonymized data does not constitute personal data under applicable data protection law.
5.1. The Company is established in the United States (New York). Your personal data may be transferred to and processed in countries outside your country of residence, including the United States, EU member states, and China (where the DeepSeek models offered in the model picker are operated).
5.2. Chat content reaches the AI model providers through OpenRouter, Inc., which acts as our processor; the individual model providers listed in Section 4.1 act as its sub-processors. Safeguards for those onward transfers are governed by our agreement with OpenRouter and by each provider's own privacy policy. For transfers from the EU/UK to the United States, China, or other countries without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (SCCs), the EU-U.S. Data Privacy Framework where applicable, or equivalent safeguards.
6.1. We use cookies on our website to:
6.2. You can manage cookies via the consent banner on first visit, or via your browser settings.
6.3. Mobile app uses Mobile Advertising ID (Apple IDFA), which you can limit via Apple's App Tracking Transparency prompt or in your device settings.
Under GDPR (EU), CCPA / CPRA (California), and other applicable laws, you have the right to:
| Right | What it means |
|---|---|
| Access | Request a copy of personal data we hold about you. |
| Rectification | Correct inaccurate or incomplete data. |
| Erasure | Request deletion of your account and personal data. |
| Restriction | Restrict processing in certain circumstances. |
| Portability | Receive your data in a structured, machine-readable format. |
| Object | Object to processing for marketing or based on legitimate interest. |
| Withdraw consent | Withdraw consent for processing based on consent. |
| Complain | Lodge a complaint with your local data protection authority. |
To exercise any right, contact support@chaticon.co. We will respond within 30 days (GDPR) or as required by local law.
You can delete your account directly in the app: Settings → Delete Account. Account deletion will:
Unsubscribe from marketing emails via the link at the bottom of each email, or in your account settings.
Deny tracking via Apple's App Tracking Transparency prompt, reset or limit your Advertising ID in your device settings, or use the cookie consent banner on the website.
8.1. We retain personal data only as long as necessary for the purposes described in this Policy or as required by law.
8.2. General retention periods:
9.1. We use industry-standard technical and organizational measures to protect your personal data:
9.2. Despite our measures, no internet transmission is 100% secure. You use the Service at your own risk.
9.3. If we become aware of a personal data breach affecting your rights, we will notify the relevant data protection authority and (where required) you, within 72 hours of becoming aware.
10.1. If you are a California resident, you have additional rights under CCPA / CPRA, including:
10.2. To exercise these rights, contact support@chaticon.co or use the "Do Not Sell or Share My Personal Information" link in our cookie consent banner.
We may update this Policy at any time. Material changes will be communicated via in-app notification, email, or website banner. Your continued use of the Service after a change constitutes acceptance.
For privacy questions or data subject requests:
Email: support@chaticon.co
Support: support.chaticon.co
The data controller is Alvin AI Studio LLC, 447 Broadway, 2nd Floor Suite 3007, New York, NY 10013, United States.
Our technical provider, ALFİ AI YAZILIM BİLGİ TEKNOLOJİLERİ REKLAMCILIK DANIŞMANLIK SANAYİ VE TİCARET ANONİM ŞİRKETİ ("ALFİ AI"), İçerenköy Mah. Topçu İbrahim Sk. Quick Tower No:8-10D, Ataşehir / İstanbul, Türkiye, acts as a data processor on our behalf in its capacity as the developer and operator of the app's technical infrastructure.