Privacy Policy

Last updated: September 2025

I. INTRODUCTION

Elminster Technologies, Inc. (“we,” “us,” or “our”) takes your privacy seriously. This Privacy Policy explains what personal information we collect from or about users of the “ChatThat” mobile application (the “App”), how we use it, with whom we share it, and the choices you have. By installing or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the App.

“Personal information” (also called “personal data”) means information that identifies, relates to, describes, or could reasonably be linked with a particular consumer or device. This Policy applies to all users of the App.

II. WHAT WE COLLECT

A. Information you provide

• Account / Contact data (e.g., email, name) if you create an account, sign in, or contact support.
• User Content you submit to the App (e.g., prompts, messages, files) and AI-generated outputs returned to you.
• Purchase context (e.g., subscription status, product identifiers). Payment credentials are processed by Apple; we do not receive your full card number.

B. Information collected automatically

• Device & app data (e.g., device type, OS version, language, time zone, app version, performance metrics, crash logs).
• Usage data (e.g., session timestamps, screens viewed, in-app events, interactions with features and offers).
• Network data (e.g., IP address, carrier, general location derived from IP).
• Cookies / similar technologies in web views or linked pages where applicable.

C. Information from third parties

We may receive analytics, attribution, or anti-fraud signals (e.g., install source, campaign attribution, device signals) from service providers to help operate the App, understand performance, and prevent misuse.

III. HOW WE USE INFORMATION

• Provide, maintain, troubleshoot, and improve the App and its features.
• Authenticate users; sync purchases and subscriptions; provide support.
• Generate AI responses; deliver summaries and other outputs you request.
• Measure performance, detect outages, and enhance reliability and security.
• Prevent spam, fraud, violations of our Terms, or harmful activity.
• Where permitted, personalize content or ads and measure marketing efficacy.
• Comply with legal obligations and enforce our agreements.

IV. AI PROVIDERS & DATA HANDLING

To produce outputs, we route your prompts and necessary context to one or more AI providers (e.g., OpenAI, Anthropic, Google). These providers process data as our service providers. As of their published policies:

• OpenAI (API / business use): states it does not use business/API data for model training by default. See OpenAI’s enterprise privacy statements for details.
• Anthropic (API / commercial use): indicates API data is not used for training unless agreed otherwise; certain retention may apply for trust/safety and legal purposes.
• Google: processes data under its privacy policy when providing services (e.g., analytics or cloud features we may use).

Please review provider policies to understand their practices. We contractually require service providers to process personal information only for our documented purposes and with appropriate safeguards.

V. WHEN WE SHARE INFORMATION

We do not sell your personal information. We share information with:

• Service providers / processors that support the App (e.g., hosting, analytics/attribution, subscription management, customer support, AI processing).
• Legal / safety recipients where required by law or to protect users, our rights, or the App.
• Business transfers in connection with a merger, acquisition, or sale of assets (with reasonable notice where required).

Key Service Providers

We work with trusted third-party service providers to deliver and enhance our App functionality. These partners are carefully selected based on their ability to implement appropriate technical and organizational safeguards for personal data protection. While we require these providers to maintain security standards, we cannot guarantee the absolute security of information transmitted to third parties and are not liable for accidental loss or unauthorized access due to third-party failures.

We do not rent or sell your personal information. However, we may share certain data including device identifiers, usage analytics, and location information with third-party organizations that provide automated data processing services for the App. We do not control these third parties' tracking technologies or their specific implementation methods.

We may also share cookie data and similar information with advertising partners to enable targeted advertising that may be relevant to your interests.

Our App may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites or services, including their information handling practices or content.

We may disclose your personal information in the following circumstances:

• As required by applicable law or legal process
• When we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to government requests
• In connection with a merger, acquisition, or sale of assets, with appropriate notice provided through the App regarding any changes in ownership or data usage

VI. YOUR PRIVACY CHOICES

A. Device-level tracking controls (iOS)

On iPhone or iPad, go to Settings > Privacy & Security > Tracking to review or change whether apps may track your activity across other companies’ apps and websites. You can also turn off “Allow Apps to Request to Track.”

B. Interest-based advertising (industry opt-outs)

You can limit interest-based advertising from participating companies using industry tools. These choices are browser/device-specific and may reset if you clear cookies or change devices.

• DAA “YourAdChoices” tools to limit interest-based ads.

C. Email & in-app marketing

You can unsubscribe from marketing emails via the link in the message. Where supported, you can adjust in-app marketing preferences in settings.

VII. CALIFORNIA PRIVACY NOTICE (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, “CCPA/CPRA”) provides rights regarding your personal information, including the rights to:

• Know the categories and specific pieces of personal information we collect.
• Know the categories of sources and business/commercial purposes for collection.
• Know the categories of third parties with whom we share personal information.
• Request access, correction, and deletion (subject to exceptions).
• Opt out of “sale” or “sharing” of personal information (as defined by law).
• Limit use/disclosure of sensitive personal information (where applicable).
• Be free from discrimination for exercising your rights.

How to submit a request: Use our support form and include “California Privacy Request.” We will take reasonable steps to verify your identity (and authority for authorized agents) before responding. We will respond within the timelines required by law.

Do Not Sell or Share My Personal Information: Where applicable, use the in-app privacy choices or contact us to exercise opt-out rights. We do not knowingly sell personal information of minors under 16.

VIII. INTERNATIONAL DATA TRANSFERS

We operate globally. Your information may be processed in countries other than your own, including the United States. Where required, we implement appropriate safeguards for such transfers and rely on lawful transfer mechanisms.

IX. DATA RETENTION

We retain personal information for as long as needed to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements. AI providers and other processors may apply their own limited retention necessary for security, trust & safety, or legal compliance in line with their policies.

X. SECURITY

We use administrative, technical, and organizational measures designed to protect personal information. No system is 100% secure; if we become aware of a breach impacting your data, we will notify you and regulators as required by law.

XI. CHILDREN’S PRIVACY

The App is not directed to children and is not intended for individuals under 13 (or the age of digital consent where applicable). We do not knowingly collect personal information from children. If you believe a child provided information to us, please contact us.

XII. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be highlighted within the App or via other reasonable means.

XIII. CONTACT US

Questions or requests? Contact us via our support form.