Privacy Policy

Introduction

This Privacy Policy explains how Mychar.io ("we", "our", "us"), operated by Riser Studio Yazılım Reklam Teknolojileri Araştırma Geliştirme ve Pazarlama Ticaret A.Ş., located at İçerenköy Mah. Topçu İbrahim Sk. Quick Tower No:8-10D Ataşehir/İstanbul, Turkey, collects, processes, stores, and protects your personal information when you use our website, mobile applications, and related services (collectively, the "Services").

By accessing or using our Services, you confirm that you are at least 18 years of age and that you have reviewed and accepted this Privacy Policy. If you are under 18, you may not use our Services.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Modified" date. We encourage you to review this page regularly. For questions or concerns, contact us at info@mychar.io.

1. Data Controller

2024 Riser Studio Yazılım Reklam Teknolojileri Araştırma Geliştirme ve Pazarlama Ticaret A.Ş. acts as the data controller for the collection and processing of your personal data through the Services.

In the case of in-app purchases, responsibility for payment processing lies with the payment service provider. All payments within our iOS/iPadOS app are handled by Apple through its In-App Purchase system. Apple acts as the data controller for all financial transaction data, billing, and invoicing related to these purchases. We do not collect, process, or store any payment card details or billing information.

For information on how Apple handles your payment data, visit: https://www.apple.com/legal/privacy/

2. Definitions

3. Age Restriction

Our Services are intended solely for users who are 18 years of age or older. We do not knowingly collect Personal Data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will promptly delete it. If you believe a minor has provided us with personal information, please contact us at info@mychar.io.

4. What Data We Collect

4.1 Data You Provide

• Account Information: name, email address, date of birth
• Chat Content: messages sent to AI companions and conversation history
• Support Communications: messages sent to customer support

4.2 Data Collected Automatically

• Device Information: device type, operating system, browser type
• Network Information: IP address, approximate location (country/region)
• Usage Data: pages visited, features used, session duration
• Cookies: session and persistent cookies for functionality and analytics

4.3 Data from Third-Party Services

• Authentication data (e.g., Apple Sign-In)
• Advertising identifiers (IDFA) only with explicit user consent via App Tracking Transparency

5. How We Use Your Data

6. Third-Party AI Services & Data Sharing

6.1 AI Service Providers

• OpenAI - conversational AI and intent interpretation
• OpenRouter / Grok - alternative AI messaging models
• GetImage.ai - image generation
• FAL.ai - image and video generation
• UseAPI / Minimax - video generation pipeline
• ElevenLabs - AI voice generation

Only conversation content, prompts, and character context required for response generation are shared.

6.2 What We Do NOT Share

We never share:

• Email addresses or login credentials
• Date of birth
• Payment or billing information
• IP addresses or device identifiers

6.3 Third-Party Data Protection

All AI service providers are contractually required to:

• Process data only to deliver their service
• Use industry-standard security measures
• Not use data for model training without explicit consent
• Comply with GDPR and applicable laws

Third-party AI service providers retain data only for the minimum duration necessary to provide their services and in accordance with their respective privacy policies. We do not permit long-term storage or reuse of conversation content beyond what is required for service delivery.

7. AI Content Safety & Moderation

The Services are designed to prevent the generation, distribution, or facilitation of illegal, explicit, exploitative, or harmful content. We implement content moderation rules, safety filters, and automated safeguards to ensure compliance with applicable laws, platform policies, and the Apple App Store Review Guidelines.

Users are prohibited from using the Services to request or generate content involving minors, non-consensual acts, illegal activities, or any form of abuse or exploitation. Violations may result in account suspension or termination.

8. Analytics & Advertising

We use third-party analytics and advertising tools including Google Analytics 4, Meta Pixel, TikTok Pixel, Snapchat Pixel, Reddit Pixel, Hotjar, and Microsoft Clarity.

Advertising identifiers are only used with explicit user consent via App Tracking Transparency.

9. App Tracking Transparency

Tracking permission is requested via Apple's ATT framework. Denying permission does not limit app functionality.

Users may change tracking preferences at any time in device settings.

10. Cookies

We use session and persistent cookies for authentication, analytics, and functionality. Disabling cookies may affect certain features.

11. Email Marketing

We use Klaviyo for email communications. Users may unsubscribe at any time via email links or by contacting info@mychar.io.

12. Data Security

We use encryption, access controls, firewalls, and regular security assessments to protect Personal Data.

13. Data Retention & Deletion

• Account data is retained while the account is active
• Conversation history is stored until account deletion
• Account deletion removes all Personal Data immediately
• Aggregated analytics data may be retained indefinitely

Account deletion is available directly within the app without requiring additional steps or external communication.

14. Data for AI Improvement

We may analyze aggregated and anonymized interaction metrics to improve AI performance and safety.

Before any data is used for improvement purposes, all personally identifiable information is removed or irreversibly anonymized. This process ensures that such data cannot be linked back to an individual user under any circumstances.

15. Your Data Protection Rights

Depending on your location, you may have the right to:

• Access your Personal Data
• Request correction or deletion
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time

Requests may be made by contacting info@mychar.io. We respond in accordance with applicable laws.

Your data may be transferred to countries outside your residence, including Turkey and the United States. We ensure appropriate safeguards including Standard Contractual Clauses (SCCs) and data processing agreements with all providers.

Turkish users are protected under KVKK (Law No. 6698) and may exercise their rights by contacting info@mychar.io.

California residents have additional rights under CCPA, including the right to know, delete, and opt out. We do not sell Personal Data.

We may update this Privacy Policy at any time. Material changes will be notified through the app or website.

16. Contact

For privacy-related questions or requests, contact:

Email: info@mychar.io