1. Who we are
Company: CyberFlex
Contact: support@qwinai.app
2. Information we collect
We collect the following categories of information:
- Device and account identifiers - Android ID (SSAID), hashed device fingerprints, device model/brand/manufacturer/hardware, screen resolution, OS version, CPU cores, RAM, app version, locale, timezone, and integrity/attestation signals.
- Content you provide - prompts, messages, files, images, audio, and OCR documents you submit for processing. We process this content to provide responses and apply content-safety checks. Recoverable generation jobs can store submitted conversation messages, responses, reasoning, and attachments temporarily on our servers. Optional personalization stores memories and conversation summaries with your device-linked account. Reports you choose to submit can include the prompt, response, and an image preview.
- Usage and diagnostics - feature usage, token and credit consumption, timestamps, subscription state, and error/performance data.
- Advertising data - mobile advertising identifiers, ad consent preferences, and ad interaction signals (if you use ad-supported features).
- Push notifications - push notification tokens.
- Location data - approximate location from IP-based lookup, and device location if you grant permissions (used for location context, search, and weather).
- Payment and subscription data - purchase tokens, product IDs, order IDs, and subscription status from your app store. We do not store your full payment card details.
3. How we use information
- Provide supported AI chat, image, text-extraction, OCR, and document features. Some audio, video, and attachment formats remain unavailable while safety verification is incomplete.
- Process requests and deliver responses.
- Enforce usage limits, prevent fraud, and secure accounts.
- Manage subscriptions, restore purchases, and issue entitlements.
- Show ads (free tier) and honor your ad preferences.
- Provide web search and weather results when requested.
- Improve performance, reliability, and security.
4. How we share information
We share information with service providers and partners to operate the App:
- AI generation and processing: OpenRouter and the model providers selected for your request; AIMLAPI for supported OCR processing. Your submitted content and relevant optional memories are sent for the requested processing.
- Content safety: Google Cloud Vertex AI (Gemini) and Google Vision receive text or image content needed to assess safety before delivery. Reports are reviewed through restricted administrative tools.
- Hosting: Google Cloud hosts our backend and database.
- Analytics, diagnostics, and push: Google Firebase provides analytics, Crashlytics, and messaging in Google Play builds. Huawei push services may be used in the Huawei store build.
- Advertising: Google AdMob and mediation partners, including Meta and Yandex/AppMetrica, process advertising data in ad-supported features under applicable consent choices. Huawei advertising services may be used in the Huawei store build. Advertising identifiers are not used by our device-account or entitlement system.
- Search and weather: Google search services and OpenWeather receive information needed for the feature requested.
- Approximate location: IPinfo, ipapi.co, and ip-api.com may receive your network IP when approximate location is requested. City-level context may be sent with location-related requests.
- Payments: Google Play or Huawei AppGallery processes payment details. We receive purchase identifiers and entitlement status, not your full card number.
We do not sell personal information for money. Use Ad privacy options in Settings to review available advertising choices. Processing providers have their own privacy and retention policies; contact us for assistance with a data request concerning a provider.
5. Data retention and deletion
- On your device: chats, generated content, and imported files remain in app-controlled storage until you delete them, clear app data, or complete in-app account deletion. Files you separately export to shared storage or another app remain under your control.
- Generation recovery: server job records can contain full request messages, outputs, reasoning, and progress. They normally become eligible for automated cleanup 24 hours after their last update. Active work, cleanup outages, or specifically configured operational retention may extend this period. In-memory request and result caches have shorter expiry periods.
- Uploaded temporary files: files in our upload directory normally become eligible for cleanup after one hour. Extracted content may also be part of a recovery job.
- Personalization: optional saved memories remain until you delete them. Conversation summaries remain while the feature is enabled; disabling history, clearing summaries, deleting a chat, or deleting the account removes the relevant summaries.
- Reports: report text and optional image evidence are retained for restricted moderation review. They currently have no automatic time-based expiry and are included in deletion of associated account data unless retention is required for a legitimate legal or safety purpose.
- Account, purchase, usage, and security records: retained while needed to operate the service, restore purchases, prevent fraud, and meet legal obligations. Long-inactive accounts without active subscriptions may be removed by our inactivity process.
- After account deletion: associated active database records are removed. Minimal hashed anti-abuse identifiers are retained for the deletion cooldown, normally up to 30 days, then expire. Deletion does not cancel an app-store subscription; manage cancellation in your store account.
- Providers and backups: processing providers and any infrastructure backups follow their applicable retention and deletion procedures. Contact our privacy address for assistance; we do not promise immediate erasure from every provider or backup.
6. Your choices and rights
- Manage app permissions (camera, microphone, storage, location) in device settings.
- Opt out of personalized ads in the App settings.
- Use Settings > Delete Account in the app to delete associated server data and clear local app data. You can also delete individual chats and manage optional personalization in Settings.
- If you cannot use the app or need help with a privacy or deletion request, email support@qwinai.app. A Device ID is not required to start a request. Provide available account or purchase information if known; we may request appropriate ownership verification before deletion.
- Residents of certain regions (EU/UK/CA) may have additional rights which we honor where applicable.
7. Security
We use HTTPS and technical safeguards to protect data in transit and at rest where supported.
8. International transfers
Your data may be processed in countries other than your own depending on service providers and hosting.
9. Changes to this policy
We may update this policy from time to time. We will update the effective date above.
10. Contact
support@qwinai.app