Legal

Privacy Policy

Last Updated: September 21, 2026

Sponteoai respects your privacy and is committed to protecting it. This policy describes the information we may collect when you use ChillScript, including the iOS and Android apps, website, and related services.

1. Information We Collect

Account Information

When you sign in, we collect the account identifiers and email address needed to authenticate you, sync your data, and send essential account or active-subscription messages. We send marketing email only when you choose to receive it, and you can unsubscribe at any time.

Notes and Text Content

Notes you save are stored securely so they can sync across devices. Text you intentionally submit to AI may be sent only for that requested action, such as rewriting, summarizing, translating, or running an AI Skill.

Audio Data

We process audio only when you actively record or transcribe. Raw audio is handled transiently for the active request and is not retained on our servers after processing is complete.

Device and Diagnostic Data

We collect device and compatibility information, and send sanitized crash reports to PostHog to find and fix stability problems. Reports include exception types, code call stacks, and app and operating system versions. Raw exception messages are removed before transmission. Limited diagnostic events may also be stored locally for debugging. We do not sell personal data or upload detailed behavioral tracking data to third-party advertising platforms.

Product Analytics

Our iOS and Android apps use PostHog to measure app launches, foreground and background activity, app versions, and general device information. A randomly generated identifier is used before sign-in; after sign-in, an internal account identifier links activity across your devices. Crash reports use these same identifiers so we can measure how many users are affected. We do not send note content, recordings, email addresses, or login links to PostHog. Session recording is disabled.

Advertising Attribution

Our iOS and Android apps use AppsFlyer to measure which advertising campaigns lead to app installs and subscriptions. AppsFlyer may process an AppsFlyer-generated identifier, device and app information, IP address, install or referral data, and campaign details. RevenueCat sends subscription lifecycle and revenue events to AppsFlyer so we can measure campaign performance. We do not send note content, recordings, email addresses, or login links for advertising attribution. The iOS app uses AppsFlyer's no-IDFA SDK variant and does not request App Tracking Transparency permission for this integration.

2. How We Use Information

• Authenticate your account and keep you signed in.
• Sync notes and topics across devices.
• Process AI features you intentionally request.
• Maintain performance, security, and compatibility.
• Understand app usage and improve the mobile experience.
• Measure app-install and subscription performance by advertising campaign.
• Send essential account and subscription communications.
• Send optional product news and offers when you have chosen to receive marketing email.

No Model Training: We and our third-party partners do not use your notes or recordings to train models.

3. AI Processing Disclosure

AI processing happens only when you intentionally use an AI feature. Voice transcription may send audio and technical parameters. Text AI features may send selected note text, prompt text, source text, or link-derived text needed to complete the specific request.

4. Third-Party Processors

ChillScript may send the minimum data needed for an active request to secure AI processors, including Google Gemini via Google Cloud, for transcription, summarization, note improvement, translation, and related AI tasks.

PostHog processes product analytics and crash diagnostic data in the United States. See the PostHog privacy policy.

AppsFlyer processes mobile attribution data and receives subscription events from RevenueCat for campaign measurement. See the AppsFlyer privacy policy and RevenueCat privacy policy.

Amazon Web Services processes email addresses and limited delivery metadata when Amazon Simple Email Service sends ChillScript account, subscription, or optional marketing messages. See the AWS privacy notice.

5. Data Retention and Security

• Raw audio is processed transiently and is not retained on server disk after processing.
• Local temporary recordings may remain on your device for crash recovery or pending transcription and are deleted after successful processing or within 7 days.
• Text notes remain stored until you delete them or delete your account.
• Data is encrypted in transit using TLS/SSL.

6. Your Rights and Control

You may edit or delete note content at any time. You can permanently delete your account in the app settings or use our account deletion page if you no longer have access to the app. You can also unsubscribe from marketing email using the link in any marketing message. Unsubscribing from marketing does not disable essential account, security, or active-subscription messages.

7. Children's Privacy

ChillScript is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

8. Contact

Questions about this policy? Contact us at support@chillnoteai.com.