Privacy Policy

1. Information we process

• Account data: email address, hashed password, display name, profile image, and default language
• Google sign-in data: Google account identifier, verified email, name, and profile image URL
• Apple sign-in data: Apple account identifier, verified email or private relay address, and the name shared on first sign-in
• Service content: rooms, messages, attachments, reactions, custom emoji packs, invitations, translations, and learning cards
• Device and usage data: access times, browser and device details, error logs, and web push subscription keys
• Billing data: plan, provider, transaction identifiers, and subscription status. We do not store complete card numbers.
• Support data: ticket category, subject, message, account email, device type, and app version

2. Why we use it

We process information to authenticate and link accounts, deliver messages, provide cached translations and language-learning features, manage invitations, send notifications, verify subscriptions, answer support requests, prevent abuse, resolve incidents, and improve reliability.

3. Google and Apple sign-in data

Google sign-in requests only the openid, email, and profile scopes. Sign in with Apple requests only name and email, and supports Hide My Email. We use this data solely to sign you in, create or link your account, and display your profile. We do not sell sign-in data or use it for advertising.

4. Service providers

• Google for authentication and verified account details
• Apple for Sign in with Apple authentication and account details you choose to share
• OpenAI for message translation and language-learning results requested by users or room settings
• Browser push services for notifications on devices where you enable them
• jsDelivr for public emoji images when you select the Twemoji or OpenMoji display style
• Payple, RevenueCat, Apple App Store, and Google Play when you use their billing methods
• Email delivery infrastructure for verification codes and operational messages
• Slack, when you submit in-app support, to notify our private support workspace using the ticket content and relevant account and device context

We send only the information needed to provide each feature. These providers may process information in other countries under their policies and applicable law.

5. Retention and deletion

We retain account and conversation data while needed to provide the service and resolve disputes. Support tickets are retained as needed to answer the request, investigate issues, and resolve disputes. One-time verification and OAuth handoff codes expire or become invalid after use. Records required by law are isolated for the required period and then deleted. Contact us to request account or data deletion.

6. Security

We use encrypted transport, password hashing, access controls, short-lived authentication codes, OAuth state and nonce validation, and separate storage for operational secrets. No internet service can eliminate every risk; if we confirm an incident, we will take appropriate protective and notification steps.

7. Your choices and rights

You can update your profile and language, disable notifications in browser or device settings, and request access, correction, deletion, or restriction of your information. You can revoke PARROT CHAT access from your Google or Apple Account settings.

8. Children

PARROT CHAT is not directed to children under 14. If we learn that such information was collected without appropriate guardian consent, we will review and take necessary action.

9. Contact

Send privacy requests to admin@allvibe.ai. Material updates will be posted here with a new effective date.