Account Information

• Email and basic profile from your sign-in method (Google, Apple, or email)

Content You Provide

• Images, text, and files you upload for problem solving
• Notes, chats, and quiz or practice responses

Collected Automatically

• Device information (model, OS, app version)
• Usage data (features used, pages viewed)
• Crash and diagnostic data
• Mobile advertising identifiers (Apple IDFA, Google Advertising ID) — see "Tracking & Advertising"

Payment Information

• Subscription status and transaction records. Payments are processed by our payment providers; we do not store your full card details.

• Provide and improve our features (Solver, Visualizer, Chat, Cheatsheet, Report Writer, AI Notebook, and PDF Note)
• Process your requests and generate AI responses
• Process payments and manage your subscription
• Measure marketing performance and attribute installs
• Send service-related notifications
• Detect, prevent, and address fraud, abuse, and security issues

We and our partners use mobile advertising identifiers (Apple IDFA, Google Advertising ID) and similar technologies to attribute installs and measure how our marketing performs.

• On iOS, we ask for your permission through Apple's App Tracking Transparency prompt before accessing the IDFA or tracking you across other companies' apps and websites.
• On Android, you can reset or delete your Advertising ID in your device settings.

We do not sell your personal information for money. We may share limited identifiers and event data with the analytics and advertising partners listed below to measure and improve our marketing. You can opt out at any time through the App Tracking Transparency prompt, your device's ad settings, or by contacting us.

We work with trusted providers, each governed by its own privacy policy:

• Sign-in: Google, Apple
• Payments: Dodo Payments (Merchant of Record), RevenueCat, and Apple / Google in-app purchases
• Analytics: PostHog, Firebase (Google) Analytics
• Advertising: Meta, Google Ads
• Attribution: Airbridge
• Crash & diagnostics: Sentry
• Notifications: Firebase Cloud Messaging

We do not sell your personal information for money.

We share data only:

• With the service providers listed above to operate, secure, and improve the Service
• With analytics and advertising partners for measurement, using limited identifiers (you can opt out — see "Tracking & Advertising")
• When required by law or legal process, or to protect rights, safety, or property

• Account data: While your account is active, plus 90 days after deletion
• Your content: Until you delete it or close your account
• Analytics: Aggregated or anonymized after 24 months
• Security and diagnostic logs: Up to 90 days
• Payment records: Retained by our payment providers for up to 7 years for tax and legal compliance

GPAI is operated from South Korea. Your data may be processed in:

• South Korea — service hosting
• United States and other regions — analytics, attribution, advertising, crash reporting, and payment providers

We rely on appropriate safeguards, including encryption and contractual protections, for international transfers.

All users

• Access or delete your data in Account Settings
• Opt out of marketing emails
• Control device permissions (camera, microphone, notifications) and ad tracking (App Tracking Transparency on iOS, Advertising ID reset on Android)

EEA / UK (GDPR)

• Access, rectification, erasure, restriction, portability, and objection
• Withdraw consent for analytics and advertising at any time

California (CCPA / CPRA)

• Know, delete, correct, and opt out of the sharing of personal information
• Non-discrimination for exercising your rights

South Korea (PIPA)

• Access, correction, deletion, and suspension of processing

To exercise any right, email help@gpai.app or use Account Settings.

GPAI is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly. If you believe a child under 13 has created an account, contact help@gpai.app.

We protect your data with:

• Encryption in transit (HTTPS) and at rest
• Secure cloud infrastructure
• Access controls and monitoring
• Regular security reviews

No system is completely secure. Contact us immediately if you suspect unauthorized access.

We may update this policy. We will notify you of significant changes by email or in-app notice. Your continued use after the changes take effect constitutes acceptance.

Questions? Email help@gpai.app