Privacy Policy

1. Introduction

CC.AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services ("Service"). Please read this Privacy Policy carefully.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Account Information: Email address, username, display name, and profile information
• Age and Gender: Collected during onboarding for content filtering, safety purposes, and age verification (18+ requirement)
• Profile Data: Bio, avatar images, profile music, theme preferences, and user customization settings
• Authentication Data: Secure tokens for account access (JWT tokens, Firebase authentication)
• Subscription Information: Plan tier, subscription status, and billing records (if applicable)

2.2 Usage Data

We automatically collect information about how you use our Service:

• Chat Conversations: Messages and conversations with AI bots and other users
• Bot Interactions: Bots you create, edit, interact with, and share
• Story Sessions: Interactive story sessions, choices made, and story progress
• App Preferences: Theme settings, font preferences, NSFW content preferences, and other customization options
• Activity Data: Energy usage, level progression, experience points, login streaks, and daily rewards
• Social Interactions: Users you follow, users who follow you, blocked users, and social activity

2.3 Device Information

• Device Type: Mobile device information for app optimization and compatibility
• Push Notifications: Push token identifiers for delivering notifications
• Storage Data: Local app data stored on your device
• Country Code: For geoblocking and regional content restrictions

2.4 Content You Create

• User-Generated Content: Custom bots, bot personalities, scenarios, and descriptions
• Messages: Text messages sent to bots and other users (may be encrypted)
• Images: Generated images and uploaded media
• Stories: Interactive story content and character information

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our Service and core functionality
• Authenticate your account and manage user sessions securely
• Enable chat functionality with AI bots and other users
• Personalize your experience (themes, preferences, recommendations)
• Track your progress (levels, experience points, energy, achievements)
• Manage subscriptions and process payments (if applicable)
• Improve our Service and develop new features
• Ensure content safety, age-appropriate filtering, and moderation
• Send push notifications for messages and important updates
• Communicate with you about your account, support requests, and service updates
• Prevent fraud, abuse, and ensure platform security
• Comply with legal obligations and enforce our Terms of Service

4. Data Storage and Security

4.1 Local Storage

Some data is stored locally on your device using secure storage mechanisms. This includes cached content, preferences, and temporary data.

4.2 Server Storage

Account data, conversations, bot information, and user-generated content are stored on secure servers with appropriate access controls and encryption.

4.3 Encryption

User-to-user messages may be encrypted using AES-256-GCM encryption. We use secure key derivation (PBKDF2) and implement end-to-end encryption where technically feasible.

5. Data Sharing and Disclosure

We may share your information only in the following circumstances:

5.1 Service Providers

With trusted third-party services that help us operate our Service:

• Cloud Hosting: Server infrastructure and database hosting
• AI Services: OpenRouter and other AI providers for chat functionality
• Image Services: Image generation and storage services
• Analytics: Usage analytics and performance monitoring (anonymized data)
• Payment Processors: For subscription and payment processing (if applicable)
• Push Notifications: For delivering push notifications to your device

5.2 Legal Requirements

When required by law, court order, or to protect our rights, property, or safety, or that of our users or others.

5.3 Business Transfers

In connection with a merger, acquisition, or sale of assets, with notice to affected users.

5.4 Public Content

Content you mark as "public" (such as public bots) may be visible to other users and may be indexed by search engines.

6. Children's Privacy

Our Service includes:

• Age verification during account creation (18+ requirement)
• Content filtering based on age and preferences
• NSFW content controls and safety features
• Parental awareness of adult-oriented content

If you are a parent or guardian and believe your child under 18 has provided us with personal information, please contact us immediately at xfaizanjatt@gmail.com.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access

Request access to your personal data and information we hold about you.

7.2 Correction

Update or correct your information through the App settings or by contacting us. You can modify your profile, preferences, and account settings at any time.

7.3 Deletion

Request deletion of your account and associated data. You can delete your account through the App settings (Settings → Account → Delete account). See our Account Deletion Policy for details.

7.4 Data Export

Request a copy of your data in a portable format.

7.5 Opt-Out

Disable certain features, opt-out of push notifications, or adjust privacy settings through the App settings.

7.5 Clear Chat History

You can clear your chat history without deleting your account through Settings → Privacy → Clear all chat history.

To exercise these rights, contact us at: xfaizanjatt@gmail.com

8. Third-Party Services

Our Service integrates with third-party services for functionality:

• OpenRouter: AI chat functionality and model access
• Firebase: Authentication and push notifications
• Image Generation Services: For AI-generated images
• Cloud Storage: For media and content storage

We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies. These services have their own terms and privacy policies.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account:

• Your account is deactivated immediately
• Personal data is scheduled for deletion
• Full data purge completes within 30 days
• Some data may be retained longer for legal compliance (billing records, security logs)

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

11. Cookies and Tracking

Our Service may use cookies and similar tracking technologies to enhance your experience, analyze usage, and provide personalized content. You can control cookie preferences through your device settings.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date
• Sending email notifications for significant changes (if applicable)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Compliance

This Privacy Policy is designed to comply with:

• General Data Protection Regulation (GDPR) - European Union
• California Consumer Privacy Act (CCPA) - California, USA
• Children's Online Privacy Protection Act (COPPA) - United States
• Google Play Store Privacy Requirements
• Apple App Store Privacy Guidelines