Privacy Policy

The use of our Services involves the collection and processing of personal data. Some data is required to create an account (your email and information from linked accounts such as Google or Apple); others are collected only when you activate certain features. In particular:

Account Data — To access the app, you create an account through Google, Facebook, or Apple authentication. We process only your email address and essential information associated with the selected account necessary to create your profile. Account information can be updated at any time in the Profile section.

Use of the App — While using the app, you can interact with chatbots or create new ones. During chats you might voluntarily share personal data. We encourage you not to provide unnecessary information. Conversation data will be stored in our systems as outlined in this policy. Your messages and other data may also be used to optimise the chatbot experience for all users.

Notifications — The app sends push notifications only with your consent and may send in-app messages for service updates, system announcements, or policy changes.

Support and Assistance — Users can contact us via email at hello@chai.ml. We process only data voluntarily provided to respond to support requests.

Subscription Plans — The app offers paid subscription plans. For paid plans, we process data necessary to manage the subscription.

Usage Data — We automatically collect technical information related to your device and connection, such as IP address, access time, browser type, and operating system. We also use essential cookies and similar technologies to enable login and ensure proper functioning of the Services.

Data processing is carried out exclusively for the following purposes:

Account Registration and Management — To access the app you must create a personal account. We require only your email address and data from linked accounts. Without this information we cannot process your registration. Lawful basis: Art. 6(1)(b) GDPR / UK GDPR.

Use of the App — We process personal data provided during registration to enable you to interact with chatbots, create new chatbots, manage in-app purchases, and ensure proper functioning of the Services. Lawful basis: Art. 6(1)(b) GDPR / UK GDPR.

Model Improvement — We use personal data derived from in-app conversations to enhance AI models. Before use, we remove personal identifiers so that only the conversational content itself is used. Lawful basis: Art. 6(1)(f) GDPR / UK GDPR (legitimate interest).

Marketing and Advertisement — We use personal data to serve advertisements to free-subscription users, based on your consent. If you downloaded the app through an advertisement, we may share certain usage patterns with advertising partners for campaign attribution. Lawful basis: Art. 6(1)(a) and Art. 6(1)(f) GDPR / UK GDPR.

We may also process your data to (i) comply with legal requirements or orders from competent authorities (Art. 6(1)(c) GDPR / UK GDPR) and (ii) establish, exercise, or defend our rights before competent courts (Art. 6(1)(f) GDPR / UK GDPR).

Your personal data is accessible only by specifically authorised staff acting under the authority of the Data Controller. Data will also be shared with our suppliers involved in operating the app, as data processors, in accordance with Chai's instructions and security safeguards. Your data may also be disclosed to third parties to fulfil legal obligations or requests by competent authorities.

Data collected through your use of the app will not be processed for longer than necessary to achieve the purposes described above, and not exceeding the duration of the account and five (5) years following its deletion. A longer retention period may be necessary to enable Chai to defend and enforce its rights in legal proceedings or to comply with applicable laws.

Data collected by the app is processed and stored in the United States, where Chai has its registered office. Transfers to US data processors will be based, where applicable, on Standard Contractual Clauses adopted by the European Commission and the UK International Data Transfer Addendum issued by the Information Commissioner's Office under Art. 46 GDPR / UK GDPR, ensuring protection standards equivalent to those within the EEA and UK.

If you are a citizen of the EU or the UK, the following rights are available to you:

Access — You have the right to know whether your data is being processed and to receive a copy of that personal data.

Rectification — You have the right to request correction of any inaccurate personal data concerning you.

Erasure — You may request deletion of your data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed.

Restriction of Processing — You have the right to request suspension of data processing while accuracy is contested, or where you require data to establish a legal claim.

Data Portability — You may request to receive your personal data in a structured, commonly used, machine-readable format.

Objection — You may object to processing based on our legitimate interests. Processing will cease unless compelling legitimate grounds override your interests or the data is necessary for legal claims.

Withdrawal of Consent — You may withdraw previously given consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Complaint — You have the right to file a complaint with your local data protection authority.

To exercise your rights or request information regarding the processing of your data:

Chai Research Corp.
209 Hamilton Ave Ste 3, Palo Alto, CA 94301, U.S.A.
hello@chai-research.com
DPO: dpo@chai-research.com