Privacy Policy
Last Updated: March 30, 2026
1. Information We Collect
We collect your email address and profile information (name, profile image) through social login (Apple, Google) for authentication. We also collect device information (device model, OS version, unique device identifiers) and usage data (feature usage, session duration) for service improvement.
2. Conversation Data
Your conversations with AI characters are stored on our servers to provide the service, maintain conversation history, and enable character memory features. Conversation data may contain personal information that you voluntarily include in your messages. We recommend not sharing sensitive personal information (financial details, government IDs, passwords) in conversations.
3. AI Training & Content Usage
Conversation data and your activity within CariChat may be used to improve the quality of our AI services. This includes training and fine-tuning AI models to provide better, more natural character responses. All data used for training is anonymized and aggregated — no individual conversations are identifiable. Your personal information (email, profile) is never used for AI training purposes.
If you wish to opt out of AI training usage, please contact us at contact@plotlab.ai with the subject line "AI Training Opt-Out" and we will exclude your data from future training processes.
4. Data Storage & Security
Your data is stored securely on cloud database servers located in Australia. Media assets are stored on a separate cloud storage service. We implement industry-standard security measures including encryption in transit (TLS) and at rest to protect your information.
5. Third-Party Service Providers
We use third-party service providers to operate CariChat, including:
AI Service Providers: For character conversations and content generation. Conversation prompts are sent to external AI servers for processing.
Cloud Database & Authentication Providers: For data storage and user account management.
Cloud Storage Providers: For storage of media assets including AI-generated images and character portraits.
Analytics Providers: For anonymous usage analytics (screen views, feature usage, session duration).
Deep Linking Service Providers: For app deep linking and referral tracking. These services may collect device identifiers, IP addresses, and referral metadata to attribute link clicks and app installs.
Apple App Store / Google Play Store: For payment processing of subscriptions and in-app purchases.
We do not collect, store, or have access to your payment card details. Each provider processes data in accordance with their own privacy policies and data processing agreements.
6. Your Rights
You have the right to access, correct, or delete your personal data at any time. You may request deletion of your conversation history or your entire account. To exercise these rights, contact us at contact@plotlab.ai. We will respond to your request within 30 days.
7. Data Retention
Your data is retained for as long as your account is active. Upon account deletion, personal data and conversation history are permanently deleted within 30 days, except where retention is required by law.
8. Cookies & Analytics
We use analytics services to understand how users interact with our Service. These may collect anonymous usage patterns such as screen views, feature usage, and session duration. Analytics do not collect personal information beyond what is described in Section 1. You can manage or disable analytics data collection through your device settings.
9. Legal Basis for Processing
We process your data based on: (a) the performance of our contract with you (providing the CariChat service), (b) your consent (where applicable, such as for marketing communications), and (c) our legitimate interests (such as improving our services and ensuring security).
10. Children's Privacy
CariChat is not intended for children under the age of 13 (or under 16 in the European Economic Area and the United Kingdom). We do not knowingly collect personal information from children under these age thresholds. If we discover that a child under the applicable age has provided us with personal information, we will promptly delete such data. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at contact@plotlab.ai.
11. Automated Decision-Making
CariChat uses automated systems for content safety filtering (detecting and blocking inappropriate text and image prompts), AI-generated content moderation, and spam/abuse detection. These automated decisions may affect your ability to publish content or use certain features. You have the right to request human review of any automated decision that significantly affects you. To request a review, contact us at contact@plotlab.ai.
12. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay and no later than 72 hours after becoming aware of the breach, where feasible. Notification will be made via email and/or in-app notification, and will include the nature of the breach, likely consequences, and measures taken to address it. We will also notify the relevant supervisory authorities as required by applicable law.
13. Additional Rights for Specific Regions
California Residents (CCPA/CPRA): You have the right to: know what personal information we collect and how it is used; request deletion of your personal information; opt out of the sale or sharing of personal information; correct inaccurate personal information; and not be discriminated against for exercising these rights. CariChat does not sell your personal information. To exercise your rights, contact us at contact@plotlab.ai.
European Economic Area and United Kingdom (GDPR): In addition to the rights described in Section 6, you may have the right to data portability and to lodge a complaint with your local data protection authority.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through a notice within the Service. Your continued use of CariChat after changes constitutes acceptance of the updated policy.
Addendum for Korean Users (국내 이용자를 위한 안내)
1. Chief Privacy Officer (개인정보보호 책임자)
Name: Dahye Lee (Representative Director)
Contact: contact@plotlab.ai
Role: Responsible for handling user data inquiries and complaints.
2. International Data Transfer (개인정보의 국외 이전)
To provide the service, user data is stored and processed on servers located outside of Korea.
Destination: Australia / United States
Purpose: Cloud infrastructure, database hosting, AI model serving, media asset storage
Retention: Until membership withdrawal or request for deletion
Legal Basis: Performance of service contract (PIPA Article 28-8)
Re-transfer: No re-transfer to third countries is conducted
3. Purpose of Collection (수집 항목 및 목적)
Items: Email address, Name (Nickname), Profile Image URL (via Social Login)
Purpose: User identification, Account management, Service provision
Payment Data: Processed via Apple App Store / Google Play Store. We do not store payment card numbers.
4. Retention Period (보유 및 이용 기간)
Data is destroyed immediately upon withdrawal.
Exceptions: Transaction logs are kept for 5 years as required by Korean Tax Law (Electronic Commerce Consumer Protection Act).
Contact
For privacy-related inquiries, please contact us at contact@plotlab.ai