# DonutChat Privacy Policy

**Last Updated:** June 6, 2026  
**Effective Date:** June 6, 2026

At DonutChat, our goal is to build a deeply personalized, helpful messaging companion. To do that, our systems learn from how you use the app to understand your preferences and context over time. We promise to be completely transparent about what we collect and why.

---

## 1. Information We Collect

### Things You Provide
*   **Account Basics:** Email address, username, display name, and profile picture.
*   **Your Chats:** Message text, photos, videos, voice notes, links, and poll responses.
*   **Voluntary Context:** Location data or calendar/contact integrations if you explicitly grant permission.

### Things Collected Automatically
*   **Tech Data:** Device type, operating system, IP address, and push notification tokens (so you actually get your messages).
*   **Usage Stats:** When you log in, feature usage, and message timestamps.

---

## 2. How We Use Your Data (The Core & The AI Engine)

Your information is kept secure and private. We use it strictly to operate the app and make DonutChat smarter for you:
*   **Running the App:** Delivering your messages, media, and notifications.
*   **Long-Term Personalization (Our AI Engine):** Our system securely analyzes your conversation history, shared links, and preferences. It uses this to build a localized understanding of your personal context so the app can provide hyper-helpful, relevant suggestions, summaries, and automated assistance.
*   **Model Training Guardrails:** While our internal systems analyze context to help *your* experience, we do not sell or share your raw conversation history with third-party AI companies to train public models.

---

## 3. The Guardrail

We value your trust above all else. **We do not sell your private information or hand over your identity to third parties.** Your data is processed inside DonutChat’s secure environment — and where trusted service providers help us run the app (see "How Data is Shared" below), they act only on our instructions, never for their own purposes.

---

## 4. How Data is Shared

*   **With Other Users:** The people you chat with can see your profile, messages, shared files, and location (if you choose to share it).
*   **With Service Providers:** We securely host data on trusted infrastructure (like Amazon Web Services) and process certain AI features through secure API partners. These partners may only process your data to provide the service — they are not permitted to use it for their own purposes, including training their models.
*   **For Legal Reasons:** We only share data with law enforcement when we are legally required to — for example, in response to a valid court order, subpoena, or other legally binding request.

---

## 5. Security & How Long We Keep Things

*   **Security:** We use industry-standard encryption in transit (HTTPS/TLS) and at rest to keep your data safe.
*   **Retention:** We keep your chat history and AI-context profile active so your app remains helpful. If you delete a specific message, it disappears from the app right away and is permanently removed from our production systems after a short recovery period (residual copies in our encrypted backups expire automatically within days). If you delete your account, your profile and identity data are removed after a 30-day grace period — but messages you already sent stay in their conversations (shown as from "Deleted User"), so other people's chat history stays intact.

---

## 6. Your Rights & Controls

No matter where you live, you have total control over your digital footprint:
*   **Edit or Download:** You can update your profile or request a download of your data.
*   **Clear Memory:** You can reset or clear the personal profile/memory our AI has built about your preferences by contacting us at help@donutchat.com.
*   **Delete Your Account:** You can delete your account at any time. After a 30-day grace period (so you can change your mind), your profile and identity data are permanently removed and your past messages are no longer linked to you — they remain in their conversations, attributed to "Deleted User". To remove a specific message everywhere, delete that message itself.

---

## 7. Children's Privacy
DonutChat is intended for users **aged 13 and older** (or the minimum age required in your country). If we discover we’ve accidentally collected data from someone younger, we will delete it promptly.

---

## 8. Regional Privacy Rights

Depending on where you live, local law gives you extra rights — and we honor them:
*   **European Economic Area, UK & Switzerland (GDPR):** You can access, correct, delete, restrict, or export your data, object to processing, and withdraw consent at any time. Our legal bases for processing are: providing the service you signed up for (contract), keeping the service safe and improving it (legitimate interests), and your consent for optional features.
*   **California (CCPA/CPRA):** You can ask what we collect, request deletion, and opt out of the "sale" or "sharing" of personal information. **We do not sell or share your personal information** as defined by the CCPA, and we will never discriminate against you for exercising your rights.

To exercise any of these rights, email us at help@donutchat.com.

---

## Contact Us
Got questions? Hit us up:  
**Email:** help@donutchat.com
