Privacy Policy
- AI Conversation does not require you to create an account, and we do not ask for your name, email, or other personal identity details to use the app.
- The messages you type are sent to a third-party AI provider so the app can generate a reply — this is the core function of the app.
- We do not sell your data, and we do not use it for advertising or cross-app tracking.
- Basic diagnostic and usage information may be collected to keep the app stable and improve it.
- You can stop all data processing at any time by not sending messages and by uninstalling the app.
1. Who we are
AI Conversation is a mobile application for iOS that lets you chat with an artificial-intelligence assistant. The app is developed and published by EXO Studio, based in Hanoi, Vietnam. In this policy, "we", "us", and "our" refer to EXO Studio, and "you" refers to the person using the app.
This Privacy Policy explains what information the app handles, why, and what choices and rights you have. It applies only to the AI Conversation app and not to any third-party website, product, or service that the app may reference or connect to.
2. Information we collect
We aim to collect as little information as possible. You do not need to register an account or provide your identity to use AI Conversation.
2.1 Information you provide
The main information the app handles is the content of your conversations — the messages, questions, and prompts you type in order to receive a reply from the AI assistant. You choose what to include in these messages, so please avoid entering sensitive personal information that you would not want processed by an AI service.
2.2 Information collected automatically
To keep the app working reliably, we may receive limited technical and diagnostic information, such as app version, device type and operating-system version, basic usage events (for example, that a feature was opened), and crash or error reports. This information is used for stability and improvement and is not used to identify you personally.
2.3 What we do not collect
We do not require your name, email address, phone number, or contacts. We do not use advertising identifiers for targeted advertising, and we do not track your activity across other companies' apps or websites.
3. How data is processed
When you send a message in AI Conversation, the text of that message is transmitted over an encrypted connection to a third-party AI model provider. The provider processes the text and returns a generated response, which the app then displays to you. This exchange is the essential function of the app — without it, the assistant cannot answer.
Diagnostic and usage information, where collected, is processed to detect and fix problems, understand which features are used, and improve the overall experience. Processing is limited to these purposes and to what is necessary to operate the app.
4. How we use information
The table below summarizes each category of data, why we process it, and the legal basis under the EU/UK General Data Protection Regulation (GDPR).
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Conversation content (messages you type) | To send your input to the AI provider and return a generated reply — the core service you request. | Performance of a contract (Art. 6(1)(b)); consent where required (Art. 6(1)(a)). |
| Device and app information | To ensure compatibility, deliver the service correctly, and troubleshoot issues. | Legitimate interests (Art. 6(1)(f)) in operating a functioning app. |
| Usage and diagnostic events | To measure feature usage, maintain stability, and improve the app. | Legitimate interests (Art. 6(1)(f)); consent where required. |
| Crash and error reports | To identify, diagnose, and fix technical problems. | Legitimate interests (Art. 6(1)(f)) in a reliable, secure service. |
5. Service providers
We rely on trusted third parties to deliver the app's functionality. In particular, a third-party AI model provider processes your message content in order to generate responses. We also use standard platform infrastructure — including Apple's App Store for distribution — and may use analytics or crash-reporting tools to keep the app stable.
These providers act on our behalf under agreements that limit their use of the information to the services they provide to us. Their handling of data is also governed by their own privacy policies. We do not authorize them to use your conversation content to identify or advertise to you.
6. Data sharing
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in these limited situations:
- With service providers, such as the AI model provider, strictly to operate the features you use;
- For legal reasons, when we believe in good faith that disclosure is required by applicable law, regulation, legal process, or a valid governmental request;
- To protect rights and safety, where necessary to prevent fraud, abuse, security incidents, or harm to any person; and
- In a business transfer, if EXO Studio is involved in a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this policy.
7. Data retention
We keep information only as long as needed for the purposes described here. Conversation content is processed to produce a reply and is retained by service providers according to their own retention practices. Diagnostic and usage information is generally kept only as long as necessary to maintain and improve the app, and is then deleted or aggregated so it no longer identifies any device.
Any conversation history stored to make the app usable is kept on your device and is removed when you delete the relevant content or uninstall the app.
8. Data security
We use reasonable technical and organizational measures to protect information, including encryption of data in transit between the app and the AI provider. While we work to safeguard your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use the app responsibly and avoid entering highly sensitive information into your messages.
9. Device permissions
AI Conversation requests only the access it needs to function. The table below explains the permissions the app may request and why. You can review and change these permissions at any time in your device's Settings.
| Permission | Why it is used | Required? |
|---|---|---|
| Network / Internet access | To send your messages to the AI provider and receive replies. The app cannot generate responses without a connection. | Yes |
| Notifications (if enabled) | To deliver optional alerts, such as reminders or updates about the app. | No — optional |
If a permission is not listed here, the app does not request it. We do not access your camera, microphone, contacts, precise location, or photo library unless a future feature explicitly asks for it and you grant permission.
10. Children's privacy
AI Conversation is not directed to children under the age of 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided information through the app, please contact us so we can take appropriate action, including deleting the information where required.
11. Your rights (GDPR & CCPA)
Depending on where you live, you may have rights over your personal information. Because AI Conversation does not require an account and collects minimal identifying data, some rights may have limited practical effect, but we will always honor valid requests to the extent the law requires and the information is available.
11.1 If you are in the European Economic Area or the United Kingdom (GDPR)
You may have the right to access, correct, or delete your personal data; to restrict or object to processing; to data portability; and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.
11.2 If you are in California (CCPA/CPRA)
You may have the right to know what personal information is collected and how it is used, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.
11.3 How to exercise your rights
To make a request, contact us using the details in the Contact us section. We may need to verify your request before acting on it, and we will respond within the timeframes required by applicable law.
12. International transfers
We are based in Vietnam, and our service providers may process information in other countries, including outside your own. These countries may have data-protection laws that differ from those where you live. Where such transfers occur, we take steps to ensure your information receives an appropriate level of protection consistent with applicable law, for example by relying on providers that offer suitable safeguards.
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in the app, our practices, or legal requirements. When we do, we will revise the "Last updated" date above. If changes are significant, we will provide a more prominent notice within the app or through the App Store listing. Your continued use of AI Conversation after an update means you accept the revised policy.
14. Contact us
If you have questions, concerns, or requests about this Privacy Policy or your information, please contact us:
- EXO Studio — Hanoi, Vietnam
- Email: exostudio.feedback@gmail.com
We will do our best to respond to your inquiry promptly.