Effective Date: October 20, 2025
Last Updated: October 20, 2025
Welcome to CharmBot ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our mobile application, CharmBot (the "App").
Developer Information:
Name: Brady Reed
Business Name: Arrington Mobile
Contact Email: arringtonmobile@gmail.com
By using CharmBot, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with our policies or practices, please do not use the App.
Message Content:
When you use CharmBot, you provide text messages and prompts to generate responses.
These messages are securely transmitted to our backend and OpenAI’s API for processing.
We do not retain or store your messages or conversation content on our servers. Messages are processed in real time and immediately discarded after generating a response.
Image Data:
If you upload an image for text extraction (OCR), it is temporarily transmitted to OCR.space for processing.
OCR.space may temporarily cache the image (typically deleted within 24 hours).
We do not retain or store your images.
User Preferences:
Preferences such as tone, response style, theme, or display settings are stored locally on your device only and never transmitted to our servers.
Device and App Information:
Device type, operating system version, and app version.
Limited diagnostics and crash data.
This information is used strictly for functionality and app improvement.
Usage Data:
Daily message count for free tier limits (stored locally).
Feature usage patterns (stored locally).
No personally identifiable data or behavioral tracking.
Subscription Information:
Subscription status and purchase history managed by RevenueCat and Apple App Store.
We do not have access to your payment details.
We do not collect or store:
Your name, email address, or contact information
User accounts or login credentials
Location or GPS data
Device photos, contacts, or calendar data
Social media profiles or identifiers
Browsing history or advertising identifiers
CharmBot is designed for anonymous use.
Response Generation: To generate AI-based responses using OpenAI’s GPT-5-nano API.
Text Extraction: To extract text from images via OCR.space.
Subscription Management: To verify subscriptions and entitlements through RevenueCat and Apple.
Usage Tracking: To enforce daily usage limits locally on your device.
To identify bugs, improve stability, and enhance performance.
To develop and optimize new features.
To comply with applicable laws, prevent fraud, and respond to lawful requests.
We only share data necessary to operate the App with trusted processors:
Purpose: Response generation
Data Shared: Message text
Retention: Retained up to 30 days for abuse monitoring, then deleted
Privacy Policy: https://openai.com/policies/privacy-policy
Location: United States
Purpose: Text extraction from uploaded images
Data Shared: Uploaded images (temporary cache up to 24 hours)
Privacy Policy: https://ocr.space/privacypolicy
Location: Germany (GDPR compliant)
Purpose: Subscription management
Data Shared: Device identifiers, subscription status, purchase transactions
Privacy Policy: https://www.revenuecat.com/privacy
Location: United States
Purpose: Payment processing and subscription billing
Privacy Policy: https://www.apple.com/legal/privacy/
Location: United States
Purpose: Hosting for secure API processing
Data Shared: Temporary message data (not retained)
Privacy Policy: https://railway.app/legal/privacy
Location: United States
We do not:
Sell or rent any personal information
Use data for targeted advertising
Retain or reuse message content for AI model training
We use industry-standard security measures to protect your information:
Encryption in Transit: All communications use TLS/SSL encryption.
Secure APIs: All third-party services use HTTPS.
Server Security: Hosted on secure Railway infrastructure.
No Persistent Storage: Message data is processed in-memory only.
Local Storage Security: Preferences stored using encrypted local storage.
While we implement strong safeguards, no method of transmission or storage is 100% secure. We cannot guarantee absolute protection against unauthorized access.
Message Content
Retention Period: None — messages are processed in real-time and immediately discarded
Storage Location: Not stored on any server
Uploaded Images
Retention Period: Up to 24 hours (processed via OCR.space)
Storage Location: Temporary cache only
User Preferences
Retention Period: Stored until you delete the app
Storage Location: Local device storage
Usage Data
Retention Period: Resets every 24 hours
Storage Location: Local device storage
Subscription Data
Retention Period: As required by Apple and RevenueCat
Storage Location: Managed by Apple and RevenueCat servers
Since CharmBot does not create user accounts or store personal data, your rights are simple and direct:
All data resides on your device. Delete the app to remove it completely.
You can stop using the App at any time.
Cancel subscriptions through the App Store.
Preferences can be viewed or exported manually from the App’s settings.
We do not sell personal data.
You have the right to know, delete, or opt-out of any data collection.
Exercise your rights by contacting arringtonmobile@gmail.com.
Right to access, rectification, restriction, deletion, and portability.
Right to object to processing or lodge a complaint with your Data Protection Authority.
Supervisory Authority Info: https://edpb.europa.eu/about-edpb/about-edpb/members_en
CharmBot is not intended for individuals under 18 years of age.
We do not knowingly collect information from minors. If you believe a child has provided data, contact us to have it deleted immediately.
Data may be processed in the United States and Germany by our subprocessors.
We rely on Standard Contractual Clauses and adequacy decisions for GDPR compliance.
We process your data under these lawful bases:
Consent (Art. 6(1)(a)) – When you submit a message or image.
Contract (Art. 6(1)(b)) – To provide app functionality.
Legal Obligation (Art. 6(1)(c)) – For financial and compliance requirements.
Legitimate Interests (Art. 6(1)(f)) – To ensure security and improve app performance.
CharmBot does not use cookies or third-party tracking.
We use secure local storage (AsyncStorage) solely to store your app preferences on your device.
We comply with all applicable U.S. privacy laws, including:
California Consumer Privacy Act (CCPA/CPRA)
Virginia Consumer Data Protection Act (VCDPA)
Colorado Privacy Act (CPA)
Utah Consumer Privacy Act (UCPA)
To exercise rights under these laws, contact us at arringtonmobile@gmail.com.
CharmBot does not track users or link data across other apps, websites, or devices.
We do not request Apple’s App Tracking Transparency (ATT) permission because we do not collect advertising identifiers.
If a data breach occurs affecting any user data, we will:
Notify affected users within 72 hours (as required by law).
Report the breach to relevant authorities.
Take immediate steps to mitigate any potential harm.
Note: Since we do not store message content, the risk of a data breach affecting user content is minimal.
We may update this Privacy Policy periodically. Changes take effect upon posting in the App and on our website.
For material updates, we will provide prominent in-app notice.
If you have any questions, concerns, or privacy requests, please contact:
Developer: Brady Reed
Business: Arrington Mobile
Email: arringtonmobile@gmail.com
We will respond to your inquiry within 30 days.
By using CharmBot, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of information as described herein.