# Privacy Policy

**Last Updated: March 4, 2026**

## Introduction

This Privacy Policy describes how your personal information is collected, used, and shared when you use the COMPA.ai app ("the App"). COMPA.ai is a recovery companion app that handles **sensitive health-related information** including addiction recovery data. We are deeply committed to protecting your privacy.

## Information We Collect

### Information You Provide

- **First Name**: If you choose to share your name with the AI companions, it is stored locally on your device. Your first name is also sent to our AI service to personalize responses (see "AI Conversations" below).
- **Sobriety Date**: Your sobriety start date is stored locally on your device only.
- **Chat Messages**: Conversations with AI companions (Jennifer, Bob, Marcus, Alex, and Maria) are stored locally on your device.
- **Journal Entries**: Diary entries are stored locally on your device.
- **Trigger Selections**: Your craving trigger tracking data is stored locally on your device.
- **Budget Data**: Financial tracking entries are stored locally on your device.
- **Expense Data**: Expense categories, individual expense items, and amounts are stored locally on your device.
- **Personal Details Shared with Companions**: If you mention personal details during conversations — such as family members' names, hobbies, work, or life events — these may be remembered locally on your device so companions can provide more personalized support in future conversations. This data is never sent to any server.
- **Session Memory**: After each conversation, a brief summary is saved locally on your device — including the companion used, topics discussed, dominant emotion, and message count. This helps companions recall previous conversations and grow closer to you over time. Session memory data is never sent to any server.
- **MP3 Files**: Audio files you import are stored in the app's local documents folder on your device.
- **Language Preference**: Your selected language (English or Spanish) is stored locally on your device.

### Information Collected Automatically

**None.** This app does not automatically collect analytics, crash reports, device identifiers, or any other data from your device.

### Device Permissions

The App may request the following permissions:

- **Notifications**: Used to send morning motivation messages, evening reflection prompts, companion check-in reminders, and session milestone celebrations. All notifications are scheduled and triggered locally on your device — no remote push notification servers are involved. Morning messages arrive at a random time between 10:00–10:59 AM, and evening reflections arrive in the evening. The App may learn your preferred chat times to send reminders at the most helpful moments.
- **Background Audio**: Used to continue music playback when the App is in the background.
- **Microphone**: Required only if you use voice chat with AI companions. Your voice audio is used only for speech recognition (see "Third-Party Services" below) and is not used for text-to-speech generation. We do not record or store your audio.
- **Speech Recognition**: Used to convert your voice to text when speaking to AI companions. Speech recognition is processed by Apple's on-device Speech framework.
- **Widgets (Home Screen & Lock Screen)**: The App provides widgets that display your sobriety streak, days sober, and companion information on your Home Screen or Lock Screen. This data is read from shared on-device storage (App Groups) and is never transmitted to any server.

### Information Processed by Third Parties

- **AI Conversations**: When you chat with AI companions, your messages, conversation history (last 6 messages), first name (if provided), and general emotional context (e.g., "user seems anxious") are sent to our secure server to generate responses. The emotional context is derived on-device using Apple's built-in NaturalLanguage framework and keyword analysis — no audio or biometric data is used. Messages and context are processed in real-time and **immediately discarded** — we do not store your conversations on our servers.
- **Voice Synthesis**: When text-to-speech is enabled, the AI companion's text response is sent to ElevenLabs through our Supabase server to generate spoken audio. This feature is included with all subscription tiers. The text is processed in real-time and is not stored. No user voice data is sent to ElevenLabs — only the AI's text output.

## Sensitive Health Information

This App handles information related to addiction recovery, including sobriety dates, substance use indicators, craving triggers, mood data, emotional state analysis, personal memories shared with companions, and journal entries about recovery. We treat all of this as **sensitive health information**:

- All health-related data is stored **exclusively on your device**
- Health data is **never transmitted** to any server (except AI chat messages, which are immediately discarded after generating a response)
- Health data is **never sold, shared, or used for advertising**

## How We Use Your Information

We use the information solely to:

- Provide and maintain the App's functionality
- Generate personalized AI companion responses
- Generate AI companion voice responses (when realistic voice is enabled)
- Display your sobriety progress and milestones
- Send local notifications for daily journal prompts and companion check-ins

## Data Storage

**All personal recovery data is stored locally on your device.** Specifically:

| Data | Storage Location |
|------|-----------------|
| Sobriety dates | UserDefaults (on device) |
| AI chat history | UserDefaults (on device) |
| Journal entries | UserDefaults (on device) |
| Trigger tracking | UserDefaults (on device) |
| Budget data | UserDefaults (on device) |
| Expense categories & items | UserDefaults (on device) |
| First name | UserDefaults (on device) |
| Language preference | UserDefaults (on device) |
| Mood tracking | UserDefaults (on device) |
| Emotional state analysis | UserDefaults (on device) |
| Session memory (topics, emotions, message count) | UserDefaults (on device) |
| Companion relationship stage | UserDefaults (on device) |
| Personal memory (names, hobbies, family) | UserDefaults (on device) |
| Conversation highlights | UserDefaults (on device) |
| Companion rapport level | UserDefaults (on device) |
| Preferred chat time | UserDefaults (on device) |
| Last active companion | UserDefaults (on device) |
| Widget display data | App Group shared storage (on device) |
| MP3 files | App Documents folder (on device) |

**Note on Backups**: Data stored on your device may be included in iCloud or local iTunes/Finder backups according to your device's backup settings. These backups are managed by Apple and are subject to [Apple's Privacy Policy](https://www.apple.com/privacy/).

## In-App Purchases

COMPA.ai subscriptions (Starter, Basic, Plus, and Premium tiers) are processed entirely by Apple through StoreKit. We do not collect or have access to your payment information (credit card numbers, billing address, etc.). Subscription status is verified locally on your device through Apple's transaction system. Please refer to [Apple's Privacy Policy](https://www.apple.com/privacy/) for how Apple handles payment data.

## Third-Party Services

The App uses the following third-party services:

| Service | Purpose | Data Sent |
|---------|---------|-----------|
| **Supabase** | Secure API routing for AI chat and voice synthesis | Chat messages and first name for AI (processed in real-time, not stored) |
| **DeepSeek** | AI language model processing | Chat messages (processed in real-time, not stored) |
| **ElevenLabs** | AI voice synthesis (all subscription tiers) | AI companion text responses for voice generation (processed in real-time, not stored). No user audio or personal data is sent. |
| **Apple StoreKit** | Subscription management | Managed entirely by Apple |
| **Apple Speech Framework** | On-device speech recognition | Voice audio processed locally on device by Apple |
| **Apple NaturalLanguage Framework** | On-device sentiment analysis | Message text processed locally on device by Apple. No data transmitted. |
| **NanaBanana AI** | AI-generated companion scene images (used as chat backgrounds) | No user data sent. Images were generated during development and bundled into the app. |

These services have their own privacy policies:
- [Supabase Privacy Policy](https://supabase.com/privacy)
- [DeepSeek Privacy Policy](https://www.deepseek.com/privacy)
- [ElevenLabs Privacy Policy](https://elevenlabs.io/privacy)
- [Apple Privacy Policy](https://www.apple.com/privacy/)

## Data Sharing

We do **not** sell, trade, or transfer your personal information to third parties. Your data stays on your device except:

- AI chat messages and your first name (if provided) are transmitted to generate AI responses and are **immediately discarded** after processing
- AI companion text responses are transmitted to ElevenLabs for voice synthesis when text-to-speech is enabled (included with all subscription tiers), and are **immediately discarded** after audio is generated

## Community Features & User Safety

Community features (forum posting, direct messaging) are **not currently available** in the App. The App does not require an account and does not support user-to-user communication at this time. If community features are introduced in the future, this Privacy Policy will be updated accordingly.

## Data Security

- All data on your device is stored using Apple's secure sandboxed storage mechanisms
- AI chat messages and voice synthesis requests are encrypted in transit using HTTPS/TLS
- The DeepSeek and ElevenLabs API keys are stored server-side (Supabase Edge Functions) and are never exposed to the client app
- No personal recovery data is stored on our servers

## Children's Privacy

The App is not intended for use by children under the age of 17 due to its subject matter (addiction recovery). We do not knowingly collect personal information from children.

## Your Rights

You have the right to:

- **Delete All Data**: Clear all data by deleting the App from your device
- **Delete Specific Data**: Use in-app reset/delete options for individual features (clear chat history, delete diary entries, etc.)
- **Revoke Data Consent**: Revoke AI data-sharing consent at any time within the app, which will disable AI chat features while keeping all other features available
- **Revoke Permissions**: Revoke microphone, speech recognition, or notification access at any time through iOS Settings → COMPA.ai
- **Opt Out of Name Sharing**: You can choose not to provide your name to AI companions
- **Clear Personal Memory**: Companion memories of your personal details are stored on your device and can be cleared by deleting the App or clearing chat history
- **Full Control**: All recovery data is on your device — you have complete control over it at all times

## Data Portability

Since all recovery data is stored locally on your device, it is included in your standard iCloud or iTunes/Finder backups. The App does not currently offer a standalone data export feature.

## Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last Updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

## Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

**Email**: normaldude99@yahoo.com

---

## Compliance

This App complies with:
- Apple App Store Guidelines (including Guidelines 5.1.1 and 5.1.2 — Data Collection, Storage, and Use)
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)

---

*By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.*