Политика конфиденциальности OnlyKin

1. Scope of This Policy

This Privacy Policy applies to personal information we collect in connection with the Service, including information collected through the OnlyKin mobile apps for iOS and Android, the OnlyKin website at onlykin.ai, our application programming interfaces, and our customer support, marketing, and billing operations. It does not apply to third-party websites, services, or applications that may be linked to from or integrated with the Service. Use of those third parties is governed by their own privacy policies.

2. Information We Collect

We collect three categories of information: (a) information you provide directly to us, (b) information we collect automatically when you use the Service, and (c) information we receive from third parties.

2.1 Information You Provide

• Account information. When you create an account or sign in, we collect identifiers such as your email address, account ID, authentication-provider identifiers (for example, your Apple or Google account identifier), display name, and profile information.
• Profile information. Information you choose to add to your profile, such as display name, avatar image, biography, language, and content preferences.
• Characters and creative content. Any characters, personas, prompts, descriptions, tags, images, audio, or other content you create, upload, import, save, or make public on the Service.
• Chats and interactions. Conversation sessions, messages, model and persona selections, feedback on responses, engagement signals (such as likes, saves, and impressions), and interaction history necessary to provide ongoing AI conversations.
• Communications. Information you send to us through support channels, email, surveys, contests, or other communications, including the contents of those communications.
• Reports. Information you provide when you report objectionable content, abusive behavior, or other policy violations.

2.2 Information We Collect Automatically

• Device and technical data. Device model, operating system and version, app version, language and region, screen size, time zone, mobile carrier (where available), and similar device identifiers.
• Usage data. Pages and screens viewed, features used, characters viewed and interacted with, search queries, time spent in the Service, navigation paths, settings changes, and other event-level interactions with the Service.
• Log and diagnostic data. Application logs, crash reports, performance metrics, error stack traces, and similar diagnostic information.
• Network metadata. Approximate location inferred from your IP address (such as country or region), IP address itself for security and fraud-prevention purposes, and request metadata necessary to deliver the Service.
• Identifiers. Generated user identifiers, session identifiers, installation identifiers, and, on Apple devices where you have granted permission, the Identifier for Advertisers (IDFA). See Section 16 (App Tracking Transparency).
• Push notification tokens. Tokens issued by Apple Push Notification service or Firebase Cloud Messaging so we can deliver push notifications you have enabled.

2.3 Information from Third Parties

• Identity providers. If you sign in with Apple or Google, we receive limited account information from that provider (such as a unique provider ID, an email address you have authorized them to share, and a display name).
• App stores and payment processors. We receive purchase and subscription status, entitlement information, product identifiers, transaction identifiers, and other billing-related metadata from the Apple App Store, Google Play, RevenueCat, and Stripe for web purchases. We do not receive your full payment card number, bank account number, or other complete payment credentials.
• Analytics and infrastructure providers. We receive aggregated metrics and diagnostic data from third-party analytics, hosting, and infrastructure providers that help us operate the Service.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, secure, and maintain the Service, including AI chat, character creation, recommendations, search, and personalization.
• Process your subscriptions, credits, and other transactions, including managing renewals, entitlements, and customer support related to billing.
• Authenticate users, maintain account security, and prevent fraud, abuse, and other unauthorized or illegal activity.
• Personalize the Service, such as suggesting characters, prompts, or content based on your interests, preferences, and behavior.
• Communicate with you, including by sending transactional messages, security alerts, product updates, and (where permitted) marketing communications.
• Provide customer support and respond to your inquiries, feedback, and reports.
• Develop, test, debug, and improve the Service, including by performing internal analytics, measuring engagement, and understanding usage patterns.
• Enforce our Terms of Service, including by detecting policy violations, investigating abuse reports, and removing content or restricting accounts in accordance with our policies.
• Comply with applicable laws, regulations, and lawful legal process; protect the rights, property, or safety of OnlyKin, our users, or others; and exercise or defend legal claims.
• Where you have provided consent, measure the effectiveness of our marketing and improve our advertising campaigns (see Section 16 on App Tracking Transparency).

4. Legal Bases for Processing (EEA/UK/Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the legal bases on which we rely to process your personal information depend on the purpose of the processing and may include:

• Performance of a contract. Processing is necessary to provide the Service that you have requested and to comply with our obligations under the Terms of Service (for example, creating your account, processing your subscription, and delivering AI chat).
• Legitimate interests. We process certain data to support our legitimate interests in operating, securing, and improving the Service, preventing fraud and abuse, and conducting business analytics, where those interests are not overridden by your rights and freedoms.
• Consent. Where required by law, we ask for your consent before processing certain information, such as for certain analytics, marketing, or tracking activities, or before sending you marketing communications. You may withdraw your consent at any time.
• Compliance with legal obligations. Processing is necessary to comply with applicable laws, regulations, court orders, or lawful requests from government authorities.
• Protection of vital interests. In limited cases, we may process information to protect the vital interests of you or another person, such as to prevent imminent harm.

5. How We Share Your Information

We share personal information only as needed to operate the Service and as described below. We do not sell personal information for monetary consideration.

• Service providers. We share information with vendors and contractors who process information on our behalf to deliver the Service, including cloud hosting, databases, content delivery, push notifications, customer support, analytics, fraud prevention, security, and payments. These providers are bound by contractual confidentiality and data-processing obligations.
• AI model providers.To generate character responses, voices, or images, we send the relevant conversation context, character information, and prompts—and, where applicable, your inputs—to one or more third-party AI model providers and hosted gateways. These providers process your inputs to generate AI Output and may retain limited diagnostic logs in accordance with their own privacy practices. We do not share data with AI providers for the purpose of training their general-purpose models, except where you have explicitly consented.
• App stores and payment processors. When you purchase a Subscription, certain transaction information is shared between us and the relevant app store, payment processor, or subscription manager (Apple App Store, Google Play, RevenueCat, and Stripe for web purchases) to process the transaction, manage entitlements, and reconcile purchase analytics.
• Authentication providers. When you sign in with Apple, Google, or another identity provider, that provider shares limited account information with us to authenticate you.
• Other users. Information you choose to make public (such as published characters, public profile details, and other public content) is visible to other users of the Service and to visitors of public pages on our website.
• Legal and safety. We may disclose information if we believe in good faith that disclosure is necessary to comply with applicable laws, regulations, legal process, or governmental requests; to enforce our Terms of Service; to investigate fraud, security, or technical issues; to protect the rights, property, or safety of OnlyKin, our users, or others; or in connection with a court order, subpoena, or similar legal process.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be sold or transferred as part of that transaction.
• With your consent. We may share information for any other purpose disclosed to you with your consent.

6. Third-Party Services and SDKs

The Service uses the following third-party services and software development kits to operate, secure, and improve the Service. Each provider has its own privacy practices, which we encourage you to review.

• Supabase— authentication, database, real-time messaging, and storage.
• Firebase (Cloud Messaging and Core)by Google — push notifications and supporting services.
• Apple App Store and Sign in with Apple — iOS distribution, in-app purchases, and Apple account authentication.
• Google Play and Google Sign-In— Android distribution, in-app purchases, and Google account authentication.
• RevenueCat— in-app purchase and subscription management, plus optional cross-platform purchase reporting.
• Stripe(where applicable) — payment processing for purchases made through our website.
• Vercel— web hosting and content delivery.
• Third-party AI model providers and gateways — large-language-model inference for character chat and related generative features.

We may add, remove, or change service providers from time to time as we operate and improve the Service.

7. Cookies and Similar Technologies

On our websites, we and our service providers use cookies, local storage, pixels, and similar technologies to: (a) keep you signed in and remember your preferences; (b) understand how visitors use the Service so we can improve it; (c) detect and prevent fraud or abuse; and (d) measure the effectiveness of our marketing.

You can control cookies through your browser settings and, in jurisdictions where required, through a cookie consent banner we provide. Some features of the Service may not function properly if you disable cookies. Mobile apps use device identifiers and similar mechanisms instead of cookies for comparable purposes.

8. AI Processing and Model Training

To generate AI Output, we transmit the relevant conversation context, character information, and your prompts to one or more third-party AI model providers and hosted inference gateways. AI Output is generated automatically and may be stored as part of your chat history so you can continue conversations across sessions and devices.

Training. We do not use the contents of your private chats to train our own foundation models. We may use aggregated, de-identified, or anonymized data, your explicit feedback (such as thumbs-up or thumbs-down ratings), or content you have made public, to improve the Service, including safety classifiers, ranking algorithms, and product features. Where required by applicable law, we will seek your consent before using your personal information for such purposes.

Third-party providers. Our AI providers may retain limited diagnostic logs of inference requests in accordance with their own privacy policies. We use providers that contractually agree not to use your content to train their general-purpose models without your explicit consent.

9. Data Retention

We retain personal information for as long as needed to provide the Service, to comply with our legal and regulatory obligations, to resolve disputes, to enforce our agreements, and to maintain security. The specific retention period depends on the type of information and the purposes for which it is processed, including the following general principles:

• Account and profile information is retained for as long as your account is active and for a reasonable period thereafter for legal, security, and operational purposes.
• Chat history and User Content are retained until you delete them or until your account is deleted, subject to backup, log, and compliance retention periods.
• Transaction records (such as receipts and billing information) are retained for as long as required by tax, accounting, and consumer-protection laws.
• Security, fraud-prevention, abuse, and incident logs are retained as long as necessary to fulfill those purposes, typically not longer than two (2) years unless a longer period is required by law.

When personal information is no longer required, we will delete or anonymize it.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These safeguards include encryption in transit, access controls, least-privilege architecture, security monitoring, and routine reviews of our practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security of your information. You are responsible for safeguarding your account credentials and notifying us promptly of any suspected unauthorized access.

11. International Data Transfers

OnlyKin is operated from the United States, and our service providers may be located in the United States or in other countries. When we transfer personal information across borders, we take steps to ensure that the transfer complies with applicable laws and that your information remains protected. For transfers from the European Economic Area, the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or comparable mechanisms.

12. Your Privacy Rights (General)

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you and receive a copy in a portable format.
• Correct inaccurate or incomplete personal information.
• Delete personal information, subject to certain exceptions.
• Restrict or object to certain processing of your personal information.
• Withdraw consent where processing is based on consent (without affecting the lawfulness of processing before the withdrawal).
• Opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us at support@onlysearch.ai.
• Lodge a complaint with a supervisory authority.

To exercise your rights, please contact us at support@onlysearch.ai. We may need to verify your identity before responding to your request. We will respond within the time period required by applicable law.

13. Rights for Residents of the EEA, UK, and Switzerland

In addition to the rights listed above, residents of the European Economic Area, the United Kingdom, and Switzerland have rights under the General Data Protection Regulation and comparable laws, including the right to object to processing based on legitimate interests, the right to data portability, and the right to lodge a complaint with your local data protection authority. We act as a data controller with respect to personal information we collect through the Service.

14. Rights for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), provides you with specific rights regarding your personal information:

• Right to know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting that information, and the categories of third parties with whom we share it.
• Right to delete. You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
• Right to correct. You have the right to request correction of inaccurate personal information.
• Right to opt out of sale or sharing.We do not sell personal information for monetary consideration. To the extent that any of our analytics or advertising activities are considered “sharing” or “selling” under the CCPA, you have the right to opt out by emailing us at support@onlysearch.ai.
• Right to limit use of sensitive personal information. You have the right to limit our use and disclosure of certain sensitive personal information to purposes necessary to provide the Service.
• Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, please email support@onlysearch.ai. We may verify your identity by requiring you to authenticate to your account or by other reasonable means.

15. Other U.S. State Privacy Rights

Residents of certain other U.S. states (including, for example, Colorado, Connecticut, Virginia, Utah, Texas, and Oregon) may have rights similar to those described above under their respective state privacy laws, including rights to access, delete, correct, and opt out of certain processing. To exercise these rights, contact us at support@onlysearch.ai.

16. Children's Privacy

The Service is intended for adult audiences and is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at support@onlysearch.aiso we can delete the information as required by law. We comply with the Children's Online Privacy Protection Act (COPPA) and with comparable laws in other jurisdictions.

17. App Tracking Transparency (Apple Devices)

On Apple devices, our app uses Apple's App Tracking Transparency framework to ask for your permission before collecting data used to track you across apps and websites owned by other companies. If you grant permission, the app may access the device's Identifier for Advertisers (IDFA) and use limited data for personalized recommendations and to measure the performance of our marketing. If you decline, we will not use the IDFA for those purposes, and we will continue to provide the Service's core functionality without it.

You can change your tracking choice at any time in your iOS Settings under Privacy & Security → Tracking.

18. Account Deletion

You may request deletion of your OnlyKin account at any time at onlykin.ai/account/delete or by emailing support@onlysearch.ai from the email address associated with your account. We normally process verified deletion requests within thirty (30) days, except where we are required to retain limited records for legal, accounting, security, fraud-prevention, or dispute- resolution purposes. Deletion may be irreversible, and deleted content may not be recoverable.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. If we make material changes, we will provide reasonable notice (for example, by updating the “Last updated” date at the top of this Privacy Policy, by posting an in-app notice, or by emailing the address associated with your account). Your continued use of the Service after the changes take effect constitutes your acceptance of the updated Privacy Policy.

20. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, or to exercise your privacy rights, please contact us at:

OnlySearch AI LLC
Email: support@onlysearch.ai