This Privacy Policy explains how CPA Bay Private Media ("we", "us", "our") collects, uses, discloses, and protects information when you use Chhabi AI, our AI image generation and social sharing mobile application (the "App"). By creating an account or using the App, you agree to the collection and use of information as described in this policy.
When you create an account, we collect your phone number (used for OTP verification), and, if you provide them, your display name, email address, birth date, gender, and profile photo. If you sign in with Google or Apple, we receive the profile information those providers share with us.
We collect and store the content you create and share in the App, including:
Text prompts you submit to generate AI images, and any reference photos you upload
AI-generated images, and any images or posts you choose to publish publicly
Comments, likes, follows, saves, and other social interactions
Reports you file against posts, comments, or other user accounts, and the reason you select
We automatically collect certain technical information, including device identifiers, operating system and app version, IP address (used to derive general location), crash logs and diagnostics, and in-app analytics events (such as feature usage and screen views), collected via Firebase Analytics and Firebase Crashlytics.
If you are shown ads (free-tier users only — paid/subscribed users do not see ads), our advertising partner (Google Mobile Ads) may collect advertising identifiers and usage data to select and measure ads, subject to your device's ad-tracking permissions and settings.
If you purchase credits, the app store (Google Play or the Apple App Store) processes your payment directly — we do not receive or store your payment card details. We receive confirmation of the purchase (product, amount, transaction ID) to credit your account and maintain purchase records.
We use the information we collect to:
Create and manage your account, and verify your identity via OTP
Generate AI images from your prompts and reference photos, using our AI model provider(s)
Operate the public community feed, including posts, likes, comments, follows, and search
Screen prompts and generated content for policy violations, both automatically and, where a report or threshold is triggered, via human review
Respond to reports of objectionable content or accounts, and enforce our Terms of Use and content policies
Send push notifications you have not opted out of (e.g. new followers, likes, comments, re-creations)
Process credit purchases and maintain purchase/credit history
Diagnose technical issues, improve the App, and measure feature usage
Comply with legal obligations and enforce our Terms of Use
Prompts and reference images you submit are sent to our AI image-generation provider(s) solely to produce the requested output, and are automatically screened for policy-violating content (see Section 5) before and after generation. We keep a private history of your generations in your account so you can view and manage them; content is not made public unless you choose to publish it to the community feed. Because generative AI can occasionally produce unexpected or unintended output, every generated image can be flagged for review directly from the generation result screen, whether or not you choose to publish it — see Section 5.
Chhabi AI is a social app with a public community feed, so a meaningful part of what we collect and process is content other users create, publish, and interact with. To keep the community safe, the App provides the following in-app safety tools, available to every user:
Report a post — flag a public post (including your own AI-generated image, immediately after it is created) for review, with a reason (e.g. nudity, hate speech, violence, spam, child safety, harassment, copyright, impersonation, other)
Report a comment — flag any comment for review
Report a user — flag an account for review directly from that user's profile, from search results, or from a followers/following list
Block a user — immediately stop seeing a user's posts in your feed and remove any existing follow relationship between you
When you submit a report, we record the reported content or account, the reason selected, your account ID, and the time of the report. We use this information solely to review and enforce our content policies — it is not shared with the reported user, and is retained for as long as needed for moderation, audit, and legal-compliance purposes.
Content or accounts that receive a sufficient number of reports are automatically hidden from the public feed and from direct links pending review (the exact report threshold is configured server-side and may change over time to keep pace with community size). Our moderation team also reviews flagged content and accounts directly and may remove content, suspend, or permanently ban an account for violations of our Terms of Use, independent of the automated threshold. See our Terms of Use, Section "Content Moderation, Reporting & Enforcement," for the full policy.
If you believe content was removed or your account was actioned in error, contact us at parimal@cpabayx.com to request a review.
We do not sell your personal information. We share information only with:
Service providers who process data on our behalf, including Google Firebase (authentication, database, storage, cloud functions, analytics, crash reporting, push notifications, and remote configuration) and our AI image-generation provider(s)
Google Mobile Ads, for showing and measuring ads to non-paid users
Google Play and the Apple App Store, for processing in-app purchases
Other users, for the content you choose to make public (display name, profile photo, and any post, comment, or profile information you choose to share)
Law enforcement or regulators, where required by law, or to protect the safety of our users or the public — including responding to reports involving child safety
We retain account and content data for as long as your account is active. If you delete your account, we deactivate it immediately (soft-delete) and remove or anonymize personal data within a reasonable period thereafter, except where retention is required for legal, security, or fraud-prevention purposes (for example, records of reports, moderation actions, or purchases may be retained longer for audit and legal-compliance reasons).
You can edit or delete your profile information at any time from Settings > Edit Profile
You can delete your account at any time from Settings > Delete Account
You can turn push notifications on or off from Settings
You can make any post private at any time, removing it from the public feed
You can report or block any user, post, or comment as described in Section 5
Depending on where you live, you may have additional rights to access, correct, or delete your data — contact us at parimal@cpabayx.com to exercise these rights
Chhabi AI is not directed to children and requires users to be at least 13 years old (or the minimum age required in your country) to create an account. We do not knowingly collect personal information from children under this age. If we become aware that we have done so, we will delete that information and take appropriate action, which may include reporting to relevant authorities where required by law. Content depicting or endangering minors is prohibited under our Terms of Use and is subject to zero-tolerance removal and reporting — see Section 5.
We use industry-standard safeguards, including Firebase Authentication and Firestore security rules that restrict access to your data, to protect information from unauthorized access, alteration, or disclosure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Your information may be processed and stored in countries other than your own, including the United States, via our service providers' infrastructure. We take steps to ensure your information receives an adequate level of protection wherever it is processed.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above, and, where required by law, we will provide additional notice.
If you have questions about this Privacy Policy or how we handle your information, contact us at parimal@cpabayx.com.