Effective date: 08/15/26 Last updated: 08/15/26
Who We Are This Privacy Policy explains how Tanglu Chao ("we," "us," "our"), the developer of the AI Buddy mobile application (the "App"), collects, uses, and protects information when you use the App. If you have questions about this Policy, contact us at [email protected].
Data We Collect 2.1 Data Stored Locally on Your Device Your chat history, messages, AI responses, and app settings are stored only on your device. We do not have access to this data and do not store it on our servers. 2.2 Data Sent for AI Processing To generate responses, the text of your messages (and minimal technical parameters such as language or model settings) may be transmitted to third-party AI processing providers for the sole purpose of generating a response to your query. We do not knowingly transmit special categories of personal data (health, financial, or other sensitive information) unless you choose to enter it yourself in a message. We do not control how long third-party AI providers retain query data on their servers; please refer to the privacy terms of the specific provider(s) we use, available on request. 2.3 Analytics Data We collect de-identified, aggregated analytics (e.g., session length, feature usage, crash and error logs) through analytics services to help us maintain and improve the App. This data is not used to identify you individually. 2.4 Data We Do Not Collect We do not knowingly collect or request your name, physical address, government ID, health records, or financial account information through the App.
Legal Basis for Processing (EU/UK Users) Where the GDPR or UK GDPR applies, we process personal data on the following legal bases: Performance of a contract (Art. 6(1)(b)) — to provide the App's core functionality. Legitimate interests (Art. 6(1)(f)) — for analytics, security, and service improvement, balanced against your rights. Consent (Art. 6(1)(a)) — for any optional features that require it; you may withdraw consent at any time.
How We Use Data Operating and maintaining the App's functionality Generating AI responses to your queries Diagnosing technical errors and improving performance Automated moderation/filtering of unwanted or unsafe content Complying with legal obligations
Who We Share Data With Third-party AI processing providers, solely to generate responses to your queries. Analytics service providers, solely in de-identified, aggregate form. We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. Under the CCPA/CPRA, this means we do not "sell" or "share" personal information as those terms are defined by California law.
International Data Transfers Because our service providers may be located outside your country of residence (including the United States), your data may be transferred to and processed in countries with different data protection laws. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms to protect data transferred from the EU/UK.
Data Retention Local data (chats, history, settings) remains on your device until you delete it (via the App or by uninstalling it). Analytics data is retained by our analytics providers for the period set out in their own retention policies, after which it is deleted or fully de-identified.
Your Privacy Rights 8.1 EU/UK Users (GDPR / UK GDPR) You have the right to: Access the personal data we hold about you Request correction of inaccurate data Request erasure ("right to be forgotten") Restrict or object to processing Data portability Withdraw consent at any time (where processing is based on consent) Lodge a complaint with your local data protection supervisory authority 8.2 California Users (CCPA/CPRA) You have the right to: Know what personal information we collect, use, and disclose Delete personal information we hold about you Correct inaccurate personal information Opt out of the sale or sharing of personal information (note: we do not sell or share personal information) Non-discrimination for exercising your privacy rights 8.3 Other Jurisdictions If you reside in a jurisdiction with its own privacy law (e.g., Virginia, Colorado, Connecticut, Canada's PIPEDA, Brazil's LGPD, etc.), you may have similar rights of access, correction, deletion, and opt-out. Contact us to exercise these rights, and we will respond in accordance with applicable law. To exercise any of these rights, email [email protected]. We may need to verify your request before acting on it.
Children's Privacy The App is not intended for children under 13. We do not knowingly collect personal information from children under 13 (or the applicable minimum age in your jurisdiction, which may be as high as 16 under some EU member state laws). If you believe a child has provided us with personal information, contact us and we will take steps to delete it.
Security We use reasonable technical and organizational measures to protect the data we handle. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Do Not Track / Global Privacy Control Where technically feasible, we honor Global Privacy Control (GPC) signals as a valid request to opt out of sale/sharing under CCPA/CPRA. We currently do not respond to browser "Do Not Track" signals because there is no accepted industry standard for how to interpret them.
Changes to This Policy We may update this Privacy Policy from time to time. The updated version will be posted in the App Store listing and/or on our website, with the "Last updated" date revised accordingly. Continued use of the App after changes take effect constitutes acceptance of the revised Policy.
Contact Us Questions about this Privacy Policy: [email protected]