Privacy Policy
Last updated: 2026-04-28 · PurrTalk v1.0
Introduction
PurrTalk ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our application to analyze relationship patterns from your imported LINE chat exports.
1. Information We Collect
Device Information:
- Device ID: A unique identifier randomly generated for your device on first launch (UUID v4). Used for authentication. Not tied to your Apple ID, name, email, or phone number.
- App version, language preference, and platform information.
- Push notification token (if you enable notifications) — used solely to deliver report-ready and Persona reply alerts.
Chat Data You Import:
- LINE chat text exports you select from the Files app are parsed locally in memory on your device.
- Analysis snapshots — relationship scores, archetype assignment, 5-dimensional metrics, archetype confidence, short chat excerpts used as evidence — stored on your device using SwiftData.
- Sampled chat excerpts — a small subset of your chat (typically ~50 messages) — sent to third-party AI services solely for analysis. The full chat file is never uploaded.
- Display names — the local labels you assign to chat participants. Stored on your device only; never sent to AI services.
Subscription and Usage Information:
- Subscription receipts (Apple originalTransactionId, productId) for entitlement validation.
- Daily quota counters (Free / Plus / Plus Max tier limits).
- App usage patterns and crash reports collected by iOS via MetricKit (opt-in through iOS Settings — Privacy & Security → Analytics & Improvements). In v1.0 these payloads are processed and stored locally on your device only (under Documents/diagnostics/, with iOS file protection, auto-purged after 30 days). They are not uploaded to our servers in v1.0.
Information We Do NOT Collect:
- No personal identification (your name, email, phone number, or Apple ID).
- No location tracking.
- No social media connections.
- No contact list, calendar, or photo library access.
- No biometric data (Face ID / Touch ID is not used).
- No advertising identifier (IDFA).
2. How We Use Your Information
We use collected information for the following purposes:
- Service Delivery: Analyze your imported chat to generate relationship reports, archetype matches, 5-dimensional scores, and AI Persona replies.
- Account Management: Manage your device-based account, daily quotas, and subscription entitlements.
- Notifications: Send push notifications when your report is ready or when Persona replies arrive (only if enabled).
- Service Improvement: Analyze aggregate usage patterns to improve app performance and feature quality.
- Customer Support: Respond to your inquiries and technical issues.
- Transaction Processing: Handle purchases through Apple In-App Purchase.
- Abuse Prevention: Rate-limit requests, reject forged transactions, enforce age gates.
We do not use your data for advertising, model training, profiling, or resale.
3. Data Storage and Security
On-device storage. Analysis snapshots and short chat excerpts live in SwiftData on your device. The SQLite file uses iOS File Protection (`completeUnlessOpen`) — hardware-backed encryption applied automatically while the device is locked. iOS platform protection is the security boundary; we do not layer additional field-level encryption on top.
Backend storage. Our backend stores only derived metrics (relationship scores, archetype identifier, confidence, sampling audit timestamps) — never raw chat text and never evidence quotes. Stripping happens before any database write. All data transmission uses HTTPS encryption.
In-memory processing. AI requests hold sampled chat in transient backend memory during the request only and are never persisted to long-term storage. Request bodies are not logged.
Edge cache (short-term). When an analysis finishes, the full result (which may include short chat excerpts used as evidence) is held in our backend's edge cache for up to 30 minutes solely to deliver it to your device, then auto-expires.
4. AI Processing and Third-Party Services
Important: Sampled chat text is shared with third-party cloud-based AI services for processing. By using AI features (analysis and Persona Chat), you explicitly consent to this data sharing.
- Sampled chat excerpts are transmitted to third-party cloud-based AI services that operate independently from PurrTalk.
- These third-party AI services process your data solely to generate the analysis results, archetype matches, and Persona replies you requested. They do not use your data for any other purpose, including AI model training (per their enterprise terms).
- We do not sell, license, or otherwise share your data with any party for marketing or advertising purposes.
- Third-party processors retain transmitted data only for limited periods consistent with their abuse-detection policies, then delete it.
- Our own backend never persists raw chat text — only derived metrics are stored long-term.
4.1 Chat Content Specific Disclosures
When you import a LINE chat export, the text contains messages exchanged between you and one or more chat partners. We treat this as sensitive personal data and disclose handling in detail:
Collection:
- We process the full chat file locally on your device to compute statistics (message counts, frequency, response gaps, etc.) and to select a representative sample of messages.
- The full chat file is never uploaded. Only the sampled subset (typically ~50 messages, selected to balance recency and representativeness) leaves your device.
- We do not extract biometric identifiers, do not perform sentiment analysis on the device, and do not link the chat content to any external identity.
No Long-Term Backend Retention:
- Sampled chat text is processed in transient backend memory only. It is never written to our long-term database.
- Our long-term database stores only derived metrics — relationship scores, archetype IDs, confidence values, and sampling audit timestamps. No chat content. No evidence quotes.
- The backend edge cache holds the full AI response for up to 30 minutes solely to deliver it to your device, then auto-expires.
Third-Party AI Processing:
- Sampled chat excerpts are transmitted to cloud-based AI services for the sole purpose of generating relationship analysis or Persona replies.
- These services process the data in isolated, encrypted environments. Per their enterprise terms, transmitted data is not used to train AI models.
- These services may temporarily retain transmitted data for limited periods (typically up to 55 days) for abuse detection, then automatically delete it.
Why We Share:
- Chat text must be shared with AI processing services because relationship analysis and Persona generation require natural-language understanding that runs on cloud AI infrastructure. This is a technical necessity — without sending sampled excerpts to AI services, the core functionality of the app cannot work.
What Happens to Your Chat Content:
- Your full LINE export → Parsed on your device → Sampled (~50 messages) → Sent to AI service → Processed into relationship metrics → Sampled text deleted by third party (per their terms) → Our backend edge cache auto-expires within 30 minutes → You receive only the analysis results on your device.
5. Data Sharing and Disclosure
We do not sell, rent, or share your personal information. However, we may disclose data in the following circumstances:
- Legal Requirements: If required by law, court order, or government request.
- Service Providers: With trusted providers who assist in app operations (under strict confidentiality agreements).
- Business Transfers: In case of merger, acquisition, or asset sale (you will be notified).
- Protection of Rights: To protect our rights, property, or safety, and that of our users.
6. Data Retention
- On-device analysis snapshots: Retained until you delete them individually or use "Delete All Data" in the Me tab. Free tier hides snapshots older than 90 days from the list (not physically deleted; visible again when you upgrade).
- Sampled chat excerpts (device): Same lifetime as the snapshot. Deleting a snapshot deletes associated parsed excerpts.
- Backend audit rows: Retained for 30 days, then auto-deleted. Contains no chat content — only derived metrics.
- Backend edge cache (full AI response): Auto-expires within 30 minutes; not used for any other purpose.
- Persona Chat / Counsel session transcripts: Stored on your device only when you opt in via Me → Privacy Corner ("Save Chat History"). Default is OFF — transcripts start empty and are forgotten when you leave. When ON, the transcript (your typed messages and AI replies) is written to SwiftData on your device, encrypted by iOS file protection. The transcript itself is never uploaded to our backend for storage. Note: regardless of the toggle, every Persona / Counsel turn still triggers a per-message AI request (your message + last 10 turns of context) to the third-party AI service per §4 — the toggle controls whether the *transcript* is replayable on your device, not whether AI inference happens. Delete individual sessions in Past Chats / Past Counsels, or wipe everything via "Delete All Data".
- Push notification token: Retained while your device ID is active. Deactivated when APNs marks invalid or when you use "Delete All Data".
- Subscription records: Retained as long as your subscription's original transaction is referenceable by Apple, for billing reconciliation and entitlement recovery.
7. Your Privacy Rights
You have the following rights regarding your data:
- Access: All your analysis data is in the app. Open the Me tab to view.
- Deletion: Tap "Delete All Data" in the Me tab to permanently erase all local data, Keychain-stored identifiers, and associated backend rows referencing your device ID. The action requires typing "DELETE" to confirm and cannot be undone.
- Consent withdrawal: Revoke AI processing consent in Me → Privacy Corner at any time. Past on-device analyses remain; new AI requests are blocked until you re-consent.
- Notifications: Enable or disable push notifications at any time in iOS Settings or in the app.
- Stop using: Uninstall the app. If you do not run "Delete All Data" first, the backend audit rows persist until their retention window elapses.
8. Push Notifications
- We use Apple Push Notification Service (APNs) to notify you when an analysis report is ready or when a Persona reply arrives.
- Notifications are optional and can be disabled in iOS Settings or in the app.
- We do not send promotional or marketing notifications.
- Notification tokens are stored securely and used only for delivering relevant updates.
9. Children's Privacy
- The App is rated 12+ on the App Store. You must be at least 13 years old to use it (verified by an in-app age gate at first launch), and the chat partner whose messages you import must also be at least 13.
- We do not knowingly collect data from children under 13.
- If we discover that a child under 13 has provided us with information, we will delete it immediately.
- Parents who believe their child has provided information should contact us for deletion.
10. Third-Party (Chat Partner) Consent — Important
PurrTalk analyzes conversations exported from LINE. Those conversations contain another person's messages. They have not consented to have their words processed by AI.
By importing a chat, you represent and warrant that:
1. You participated in the conversation.
2. You have either (a) obtained the other person's informed consent to analyze the conversation with an AI tool, or (b) are using the analysis solely for your own personal reflection in a jurisdiction and manner permitted by applicable law.
3. You will not share the analysis results, Persona Chat responses, or any AI-derived content in a way that identifies the other person without their permission.
4. You will not use Persona Chat to impersonate, defame, or harm the other person.
We cannot enforce the chat partner's rights. This responsibility is yours. If you are unsure whether a use is lawful, do not proceed.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to Know: Request information about data we collect, use, and share.
- Right to Delete: Request deletion of your personal information.
- Right to Opt-Out: We do not sell personal information.
- Non-Discrimination: We will not discriminate against you for exercising your rights.
12. Japan Personal Information Protection Act (APPI)
For users in Japan, we comply with the Act on the Protection of Personal Information ("APPI"):
- Purpose of use (Article 21): personal information is used for AI-powered chat analysis, Persona Chat, subscription management, abuse prevention, and service improvement — as detailed in §2.
- Outsourced processing (Article 27): we delegate processing to third-party cloud AI services, edge compute providers, and database hosting providers. All processors act under confidentiality and follow our instructions.
- Cross-border data transfer: data is transferred to data centers located in various countries, which may have different data protection laws. By using AI features you consent to these transfers.
- Disclosure and correction requests (Article 28): submit via Contact (§14). We respond within a reasonable period (typically 14 days).
- Purpose change: we will notify in-app before using your data for materially new purposes.
13. International Data Transfers
Your data may be stored and processed in data centers located in various countries, including but not limited to the United States. By using the App, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws. We take reasonable measures to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes through the App. Continued use after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
Email: support@giblee.app
We will respond to your inquiries within a reasonable timeframe (typically within 14 days).