Privacy Policy for OverSmart AI
Effective Date: September 30, 2026
--------------------------------------------------------------------------------
1. Introduction and Overview
OverSmart AI ("we", "our", or "us") is dedicated to safeguarding your privacy and ensuring complete transparency regarding how data is handled within our mobile application (OverSmart AI, com.oversmart.ai).
OverSmart AI is engineered with a local-first, Bring Your Own Key (BYOK) architecture. We do not require account creation, user registration, passwords, or mandatory cloud logins to use our creator and AI tools. This Privacy Policy outlines our data handling practices in strict compliance with Google Play Developer Program Policies, Google Play Data Safety guidelines, the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
By installing, accessing, or using OverSmart AI, you acknowledge and agree to the data collection, processing, and storage practices described in this document.
--------------------------------------------------------------------------------
2. Information We Collect and How It Is Handled
Because OverSmart AI operates primarily on a local-first architecture without user accounts, data collection is strictly confined to what is required for core app functionality, subscription validation, and advertising for non-subscribed users.
2.1 Information Stored Locally on Your Device
- API Keys and Credentials: When you configure API keys for third-party AI providers (including Google Gemini, OpenRouter, Groq, DeepSeek, Hugging Face, Cerebras, SambaNova, Mistral, ElevenLabs, or Custom Endpoints), these keys are stored exclusively on your device using operating system secure storage (Android EncryptedSharedPreferences via flutter secure storage). Your private API keys are never sent to, collected by, or stored on OverSmart AI developer servers.
- Prompts and Generated Content: All text prompts, scripts, video titles, SEO tags, descriptions, hashtags, and ideas generated using the application are stored locally in the on-device database (Hive). We do not record, intercept, or inspect your prompts or results on any remote server.
- Application Preferences: Settings such as your preferred AI model, active provider, search engine preference, theme settings, and tool configurations remain locally saved on your device.
2.2 Automatically Processed Device and Operational Data
- Device Identifier (ANDROID ID): We access your device operating system identifier (ANDROID ID) solely to determine subscription entitlement (for example, verifying whether an active Remove Ads purchase exists) without requiring you to register a personal account. This identifier is processed locally and is never sold or shared with unauthorized entities.
- Advertising Identifiers (Google Advertising ID / GAID): For users on the free tier who have not purchased the Remove Ads upgrade, our application serves advertisements managed by Google AdMob. Google AdMob automatically processes device advertising identifiers (such as the Google Advertising ID), IP address, general network information, and ad interaction metrics (impressions, clicks) to serve relevant advertisements.
- In-App Purchase Tokens (Google Play Billing): When you purchase or manage a subscription inside the app, transaction tokens and purchase statuses are processed directly and securely by Google Play Billing. OverSmart AI never collects, accesses, or stores your credit card numbers, banking credentials, or personal billing details.
2.3 Information We Do Not Collect
In compliance with Google Play Data Safety standards, we state unequivocally that OverSmart AI DOES NOT collect, store, or transmit:
- Personal identification data such as legal names, physical home addresses, phone numbers, or passwords.
- User account profiles or social media login credentials.
- Precise geographic location (GPS) information.
- Device contacts, SMS logs, camera feeds, or microphone recordings without your explicit interaction and permission.
- Biometric, medical, or financial account credentials.
--------------------------------------------------------------------------------
3. How AI Providers and Direct Client Architecture Work
OverSmart AI operates as a client tool that connects directly from your mobile device to chosen third-party AI platforms via secure HTTPS and TLS encryption.
1. Direct Device-to-Provider Communication: When you initiate a generation request, the prompt and your configured credentials are sent directly from your device to the API endpoint of the provider you selected (such as Google Gemini, Groq, DeepSeek, or OpenRouter).
2. No Intermediary Developer Server: OverSmart AI does not route your AI requests through an intermediate proxy or server owned by OverSmart AI, eliminating third-party data interception.
3. Provider Privacy Policies: All external generation requests are governed by the respective privacy policies of each AI service provider:
- Google Gemini: https://policies.google.com/privacy
- OpenRouter: https://openrouter.ai/privacy
- Groq: https://groq.com/privacy-policy
- DeepSeek: https://www.deepseek.com/privacy
- Hugging Face: https://huggingface.co/privacy
- Cerebras: https://cerebras.ai/privacy-policy
- SambaNova: https://sambanova.ai/privacy-policy
- Mistral AI: https://mistral.ai/terms/
- ElevenLabs: https://elevenlabs.io/privacy
--------------------------------------------------------------------------------
4. Third-Party Services and Advertising Disclosures
We integrate verified third-party software development kits (SDKs) strictly to support app functionality, payment verification, and ad delivery:
4.1 Google AdMob and Advertising Privacy
- Data Processed: Google Advertising ID (GAID), IP address, device specifications, ad impressions, and ad click interactions.
- Purpose: To display banner, interstitial, and rewarded advertisements in the free tier of the application.
- GDPR and Consent Management (Google UMP SDK): For users located in the European Economic Area (EEA), the United Kingdom, or Switzerland, a certified User Messaging Platform (UMP) consent form is presented upon first launch. Users can choose personalized ads, non-personalized ads, or manage partner preferences at any time.
- Opting Out of Targeted Ads: Users can modify their advertising preferences inside the app under Settings -> Legal -> Ad Consent, or via Android device settings under Settings -> Google -> Ads -> Reset advertising ID or Delete advertising ID.
- Remove Ads Subscription: Users who purchase the optional Remove Ads subscription will have all advertising modules disabled, and no advertising trackers are invoked during an active subscription period.
- Google Privacy Policy: https://policies.google.com/privacy
- Google Partner Data Usage: https://policies.google.com/technologies/partner-sites
4.2 Google Play Store and In-App Purchases
- Data Processed: Purchase validation tokens and active subscription status.
- Purpose: Verifying the monthly Remove Ads subscription. All financial transactions and payment card data are processed exclusively by Google Play Billing.
- Google Play Privacy Policy: https://policies.google.com/privacy
4.3 Social Media and Public Platform Tools (YouTube, Facebook, Instagram, TikTok)
OverSmart AI includes specialized tools designed to assist content creators:
- YouTube Public Metadata: Our app uses public YouTube autocomplete and public metadata to suggest video tags, titles, and trending ideas. We do not use Google account login, do not access private channels or watch history, and do not transmit any private user metadata to external servers. Use of YouTube features complies with YouTube Terms of Service (https://www.youtube.com/t/terms) and Google Privacy Policy.
- YouTube Download Restriction: In accordance with Google Play Store Policies and YouTube Terms of Service, OverSmart AI strictly prohibits and programmatically blocks downloading or saving media from YouTube.
- Facebook, Instagram, and TikTok Tools: Content generation tools for these platforms assist creators in formulating captions, hooks, and hashtags using algorithmic patterns. The app does not integrate platform logins, does not access private social profiles, and cannot post on your behalf.
--------------------------------------------------------------------------------
5. Data Retention, User Control, and Permanent Data Deletion
In strict compliance with Google Play User Data and Data Deletion policies, OverSmart AI ensures you have total autonomy over all stored data:
5.1 Data Retention
- Local Information: All locally saved items (API keys, generation history, custom templates, and settings) remain on your device until you choose to delete them or uninstall the application.
- Advertising Records: Advertising metrics collected by Google AdMob are managed directly by Google according to their independent data retention schedules.
5.2 How to Delete Your Data
Because OverSmart AI stores your prompts, history, API keys, and settings locally rather than in remote cloud accounts, you can permanently wipe all of your data at any time using any of the following methods:
1. In-App Deletion: Open OverSmart AI and navigate to Settings -> Legal -> Delete My Data. This permanently purges all local databases, history logs, and secure key stores immediately.
2. Device App Settings: Open Android Settings -> Apps -> OverSmart AI -> Storage and Cache -> Clear Storage. This action immediately erases all local application data and cached files.
3. Uninstall the Application: Removing OverSmart AI from your mobile device automatically purges all locally stored data, configurations, and encrypted keys from device storage.
4. Reset Advertising ID: You can reset or delete your advertising identifier at any time via Android Settings -> Google -> Ads -> Reset advertising ID.
If you require assistance regarding data deletion or privacy verification, contact our support team at drillmovies@gmail.com. We respond to all inquiries within 24 to 48 hours.
--------------------------------------------------------------------------------
6. Children's Privacy (COPPA Compliance)
OverSmart AI is designed and marketed for content creators, digital marketers, and media professionals. The application is not directed at children under the age of 13. We do not knowingly collect, solicit, or store personal information from children under 13. If a parent or guardian discovers that a child under 13 has provided personal details or used the application without consent, please contact us at drillmovies@gmail.com, and we will take immediate measures to ensure all corresponding local data is permanently cleared.
--------------------------------------------------------------------------------
7. AI-Generated Content and Content Safety Policies
In alignment with Google Play AI-Generated Content (AIGC) standards:
- AI Content Transparency: All outputs produced by the application are labeled as AI-generated. Users must review, fact-check, and edit outputs for appropriateness, copyright adherence, and accuracy before publishing on third-party platforms.
- Safety Filtering: The application incorporates prompt safeguards and moderation protocols to prevent the creation of hate speech, violent content, harassment, sexually explicit material, deception, or unlawful actions.
- Reporting Objectionable Content: If you encounter harmful, abusive, or policy-violating responses generated by an AI model in the app, please report the incident to drillmovies@gmail.com for prompt analysis and prompt adjustment.
--------------------------------------------------------------------------------
8. Web Browser and Authorized Media Policy
OverSmart AI includes an optional built-in browser tool designed for web research and authorized public media viewing:
1. User Responsibility: The browser allows users to browse the web and save publicly available, copyright-free, Creative Commons, or user-authorized content for offline reference.
2. Copyright Prohibition: Downloading or distributing copyrighted movies, television shows, commercial music, or paywalled content without the copyright owner's explicit authorization is strictly prohibited.
3. YouTube Restriction: Downloading any media from YouTube or its affiliate domains is strictly blocked by app architecture.
4. Browser Privacy: The browser allows users to wipe browsing cache, cookies, and history on demand or automatically upon closing the app via Settings.
--------------------------------------------------------------------------------
9. Modifications to This Privacy Policy
We may periodically revise this Privacy Policy to reflect software improvements, regulatory changes, or updated SDK requirements. Any modifications will be updated directly within this document, and the Effective Date will be adjusted accordingly. Continued use of OverSmart AI following policy updates represents acceptance of the revised terms.
--------------------------------------------------------------------------------
10. Contact Information and Developer Support
For any questions, privacy inquiries, copyright notifications, or data assistance concerning OverSmart AI, please contact our support team:
- Support Email: drillmovies@gmail.com
- Developer: OverSmart AI
- Response Time: Within 24 HOUR - 7 business days.
--------------------------------------------------------------------------------
11. Google Play Console Data Safety Mapping Reference
For the purpose of Google Play Console Data Safety review:
Data Category: Device or other IDs
- Data Type: Device ID (ANDROID ID)
- Collected or Shared: Collected (Processed Locally)
- Purpose: App functionality and subscription verification
- Required or Optional: Required for entitlement check
Data Category: Device or other IDs
- Data Type: Advertising ID (GAID)
- Collected or Shared: Collected and Shared (with Google AdMob)
- Purpose: Advertising and analytics for free-tier users
- Required or Optional: Required for ad delivery (Opt-out available)
Data Category: App Activity
- Data Type: Ad interaction data (clicks, impressions)
- Collected or Shared: Collected and Shared (with Google AdMob)
- Purpose: Advertising delivery and measurement
- Required or Optional: Required for ad delivery
Data Category: Financial Info
- Data Type: Purchase history and tokens
- Collected or Shared: Collected and Shared (with Google Play Billing)
- Purpose: In-app purchase verification (Remove Ads subscription)
- Required or Optional: Required for subscribers
Data Category: App Info and Performance
- Data Type: Crash diagnostics and stability logs
- Collected or Shared: Collected locally / via Android platform
- Purpose: Stability, performance improvements, and bug fixes
- Required or Optional: Optional / System level
Core Declarations:
- Encryption in Transit: All remote communication (AI APIs, AdMob, Google Play) uses secure HTTPS and TLS encryption.
- No Mandatory User Account: No cloud user registration or password is required to use the application.
- Independent Data Deletion: Complete on-device data deletion is provided via in-app settings, system storage clearing, or uninstallation.
- No Sale of Personal Data: OverSmart AI does not sell, license, or trade user personal data to any third party.