Last Updated: October 30, 2026

Thank you for using Chat Bot AI, operated by Mobile Cosmos LLC ("Company", "we", "us", or "our"). We are committed to protecting your privacy through a strict Privacy-First, Local-Only Conversation Architecture. If you have any questions or concerns about this Privacy Policy or our practices, please contact us at [email protected].

1. What Information Do We Collect?

We collect only the minimum technical data necessary to operate the app, manage token balances, verify Premium subscriptions, and prevent abuse:

• Anonymous Device & Profile Identifiers: When you launch the app, we assign an anonymous account linked to your device identifier (device_id / UDID), country/language code, and push notification token (notify_token). If you grant permission via iOS App Tracking Transparency (ATT) or Android settings, a profile identifier (profile_id) may also be used strictly to attribute "Share & Earn" referral rewards and preserve your account across reinstalls. If you decline tracking permission, the app continues to work normally using an anonymous Share ID.
• Non-Content AI Transaction Metadata: When you send a message to the AI, our servers record only non-content metadata: the AI provider's response reference ID (ai_id), conversation UUID, token counts (prompt tokens, completion tokens, total tokens), AI model identifier, whether a file/photo attachment was included, and timestamp. We never log or store the text of your prompts, the AI's replies, or your uploaded files in our database.
• In-App Purchase & Subscription Records: If you purchase a Premium subscription, payment processing is handled entirely by the Apple App Store or Google Play Store (and verified via Adapty). We do not collect or have access to your credit card, bank account, or billing address. We store only the non-sensitive transaction ID (trans_id), subscription status, price, and country code for accounting and entitlement verification.
• Content Moderation Reports: If you voluntarily report an inappropriate AI response using the in-app report button, we record the associated ai_id, report reason, optional notes you provide, and your anonymous user/device ID so our team can review and address the issue.

2. Device Permissions We Request & How They Are Used

Chat Bot AI requests the following device permissions strictly on an on-demand basis to enable specific user-initiated features:

• Microphone & Speech Recognition: Used only when you tap the microphone icon to convert your spoken voice into text prompts (Speech-to-Text). Audio is processed in real time for transcription and is never stored on our servers.
• Camera, Photo Library & Files (Premium Feature): Used only when a Premium subscriber chooses to capture or select a photo or document (PDF, TXT, CSV, JSON, MD, DOCX) to attach to a conversation. The selected image or document text is transmitted securely over HTTPS to process your AI request in memory and is immediately discarded after the response is returned.
• Push Notifications: Used to deliver service notifications. You can disable push notifications at any time in your device's system settings.

3. How Your Data Is Processed by Third-Party AI & Service Providers

In compliance with Apple App Store Guideline 5.1.2(i) and Google Play Data Safety requirements, we transparently disclose the third-party service providers that process data on our behalf:

Service Provider	Purpose	Data Processed
OpenAI API (and configured LLM providers)	Generating AI chat responses & analyzing attached photos/documents	Your current prompt, recent conversation context (stored locally on your device and sent with the request), and any attached image/document. Data sent via the OpenAI API is not used by OpenAI to train its models.
Apple App Store, Google Play Billing & Adapty	In-app subscription billing, receipt validation, and purchase restoration	Anonymous user/profile ID, subscription receipt, and transaction status.
Google Firebase (Messaging, Analytics, Crashlytics)	Push notifications, crash reporting, and app stability diagnostics	Push notification token, anonymous installation ID, crash logs, and aggregated app usage metrics.
Airbridge & Yandex AppMetrica	"Share & Earn" referral link attribution	Referral link parameters and device/install attribution metadata to credit bonus tokens when a friend installs the app.

We do not sell, rent, or trade your personal information to any third party, and we do not use any third-party advertising SDKs.

4. Data Retention & Security

All communication between the Chat Bot AI mobile app, our backend API, and AI providers is encrypted in transit using industry-standard HTTPS / TLS encryption.

• Conversation Content: Retained for 0 seconds on our servers (never stored in our database; stored only in local storage on your device until you clear it or uninstall the app).
• Anonymous Account & Non-Content Metadata: Retained only while your anonymous device account remains active to maintain your token balance, Premium status, and legal/abuse compliance records, or until you delete your account via the in-app deletion tool.

5. How to Review or Delete Your Account and Data

You can delete your data immediately at any time without contacting support:

• Clear Local Conversations: Open the app, go to Settings → Clear All Conversations (or delete individual chat threads from the drawer). This immediately removes your conversation history from your device.
• Delete Account & Server Data: Open the app, go to Settings → Delete Account & Data, and confirm. This permanently deletes your anonymous user record, token history, non-content AI transaction logs, and content reports from our servers, and clears all local data on your device.
• Delete by Email Request: You may also request data deletion or assistance by emailing [email protected].

6. Your Privacy Rights (GDPR, UK GDPR & CCPA/CPRA)

European Economic Area (EEA), United Kingdom & Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the right to request access to, rectification of, or erasure of your data, as well as the right to restrict or object to processing and the right to data portability. You also have the right to lodge a complaint with your local data protection supervisory authority.

California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• We do not collect sensitive personal information such as real names, physical addresses, social security numbers, biometric data, or precise GPS geolocation.
• We do not "sell" or "share" personal information for cross-context behavioral advertising.
• California residents have the right to know what categories of data are collected, the right to request deletion of their data (available instantaneously via Settings → Delete Account & Data), and the right to non-discrimination for exercising privacy rights.

7. Children's Privacy

Our Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal data, we will promptly delete such information.

8. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our app features, legal requirements, or store guidelines. The updated version will be indicated by the "Last Updated" date at the top of this page and will take effect as soon as it is published.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Company: Mobile Cosmos LLC
• Address: 30 N Gould St, Ste R, Sheridan, WY 82801, United States
• Email: [email protected]