How your data is handled and protected.

Service refers to the ExtraAI mobile application operated by ExtraAI.

Personal Data means data about a living individual who can be identified from that data (or from that and other information either in our possession or likely to come into our possession).

Usage Data is data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Cookies are small files stored on your device (computer or mobile device).

Data Controller means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed.

Data Processors (or Service Providers) means any natural or legal person who processes the data on behalf of the Data Controller.

Data Subject is any living individual who is the subject of Personal Data.

User is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.

We collect information you provide directly to us when you register, use our services, or contact support.

Personal Information: First and last name, email address, birth date (to verify age requirements), country and region/state, account credentials (managed securely via Clerk).

Automatically Collected Information: Usage Data (interactions, features used, session duration), Device Information (device type, OS version, unique device ID), Location when in use (city and region for profile setup, only when you grant permission in the app), Approximate location derived from IP address for regional settings, Purchase History (managed securely via Apple App Store and RevenueCat).

We use the collected information for the following purposes:

• To provide, maintain, and improve the Application

• To process transactions and manage your subscription

• To personalize your experience and deliver relevant content

• To communicate with you (e.g., support, updates, security alerts)

• To process your text, audio, and image inputs through AI models to generate responses

We do not sell your personal data. We share your information only with trusted third-party service providers necessary to operate our Application:

• Authentication: Clerk (clerk.com/privacy)

• Payments & Subscriptions: Apple App Store and RevenueCat (revenuecat.com/privacy)

• Infrastructure & Hosting: Vercel, Expo, and our cloud database providers

• AI Providers: OpenAI, Anthropic, Google (Gemini), Microsoft Azure OpenAI, and Google Firebase AI Logic. Prompts, chat attachments, voice audio, and camera frames you submit may be sent to these providers to generate AI responses.

We may also disclose information if required by law, to enforce our terms, or to protect our rights or the safety of others.

If you are a resident of the European Economic Area (EEA), you have specific rights regarding your personal data under the GDPR:

• Right to Access: Request copies of your personal data.

• Right to Rectification: Request correction of inaccurate data.

• Right to Erasure ("Right to be Forgotten"): Request deletion of your data.

• Right to Restrict Processing: Request limitation on how we process your data.

• Right to Data Portability: Request transfer of your data to another organization.

To exercise these rights, please contact us at contact@extraai.ai or use the account deletion features within the Application settings.

Retention: We retain your personal information only for as long as your account is active or as needed to provide you services, comply with legal obligations, resolve disputes, and enforce our agreements.

Security: We implement industry-standard security measures, including encryption and secure authentication, to protect your data. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Our Application is not directed to users under the age of 16 (see our Terms of Service). We do not knowingly collect personal information from anyone under 16. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us immediately so we can delete such data.