Privacy Policy
Last updated: March 2, 2026
Overview
Prosepal ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.
Information We Collect
Account Information
When you create an account, we collect your email address and authentication credentials. If you sign in with Apple or Google, we receive basic profile information they provide (such as your name and email address).
Message Generation Data
When you generate messages, we send your selected occasion, relationship type, tone preference, and any personal details you provide to our AI service. This data is processed in real-time to generate your message and is not stored on our servers.
Message History (Local Storage)
You may choose to save generated messages to your local history. This data is:
- Stored only on your device using encrypted storage
- Never uploaded to our servers
- Automatically deleted when you sign out
- Deleted when you uninstall the app
- Exportable via "Export My Data" in Settings
Usage Data
We collect usage statistics to improve our service, including generation counts and general app performance metrics. We do not track which specific occasions or messages you create.
Device Information
We collect device identifiers, operating system version, and app version for:
- Crash reporting and bug fixes
- Analytics to improve app performance
- Abuse prevention (see below)
Abuse Prevention Data
To prevent service abuse and ensure fair usage, we collect:
- Device identifiers to track free tier usage across app reinstalls
- Request timestamps for rate limiting
This data is used solely for service protection and is deleted when you delete your account.
Purchase History
If you subscribe to Prosepal Pro, we receive information about your subscription status from the Apple App Store (iOS) through our payment processor (RevenueCat). We do not receive or store your payment card details.
Apple Sign In Compliance
If you sign in with Apple, we securely store authentication tokens required to revoke your credentials when you delete your account, as required by Apple's guidelines. These tokens are encrypted and automatically deleted upon account deletion.
How We Use Your Information
- To provide and maintain our service
- To generate personalized messages using AI
- To process your subscription payments
- To prevent abuse and ensure fair usage
- To send important service updates
- To improve our app and user experience
Data Security
We implement industry-standard security measures to protect your data:
- All data transmission uses secure HTTPS connections
- Account credentials are encrypted
- Local message history uses platform-encrypted storage
- Sensitive data in logs is automatically redacted
- We detect and flag compromised (rooted/jailbroken) devices
Third-Party Services
We use the following third-party services, each with their own privacy policies:
- Supabase — Authentication and user management. Privacy Policy
- Google AI (Gemini) — Message generation. Terms
- RevenueCat — Subscription management. Privacy Policy
- Firebase Analytics — App usage analytics. Privacy Policy
- Firebase Crashlytics — Crash reporting. Privacy Policy
What We Don't Do
- We don't sell your data to third parties
- We don't store your generated messages on our servers
- We don't share your data for advertising purposes
- We don't use your data to train AI models
- We don't track which specific messages you create
Your Rights
You have the right to:
- Access your personal data
- Export your data (Settings → Export My Data)
- Delete your account and all associated data (Settings → Delete Account)
- Opt out of analytics (Settings → Analytics & Crash Reports toggle)
Data Retention
- Account data: Retained while your account is active; deleted within 30 days of account deletion
- Usage statistics: Retained for 12 months, then anonymized
- Rate limit logs: Automatically purged after 24 hours
- Local message history: Stored on your device only; deleted on sign-out or uninstall
Children's Privacy
Prosepal is not intended for children under 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
International Users (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you have additional rights:
- Right to Access — Request a copy of your personal data
- Right to Rectification — Request correction of inaccurate data
- Right to Erasure — Request deletion of your data ("right to be forgotten")
- Right to Portability — Request your data in a portable format (JSON export available)
- Right to Object — Object to processing of your data
- Right to Restrict Processing — Request limitation of data processing
To exercise these rights, contact us at jarryd@prosepal.app. We will respond within 30 days.
Legal basis for processing: We process your data based on (a) your consent, (b) contractual necessity to provide our service, and (c) legitimate interests in preventing abuse and improving our service.
California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it's used
- Request deletion of your personal information
- Opt-out of the sale of personal information (we do not sell your data)
- Non-discrimination for exercising your privacy rights
To exercise these rights, use the in-app settings or contact jarryd@prosepal.app.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on this page
- Updating the "Last updated" date
- Sending an in-app notification for significant changes
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
jarryd@prosepal.app