1. Introduction
DetectiveL AI (“we”, “our”, or “us”) is committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it and who we share it with when you use the DetectiveL AI apps for iPhone, iPad and Android, and the website at detectivel.app (together, the “Service”).
We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and other applicable data protection laws. We never sell your personal data.
2. Data We Collect
Account information (only if you sign in)
- Email address, and your name if your sign-in provider shares it
- Sign-in provider data (Google or Apple sign-in)
- Account creation date and your plan
You can use the Service, and buy a subscription, without an account. In that case we hold no email for you and your purchase is tied to an anonymous purchase identifier only.
Conversation data
- Messages you send to DetectiveL AI
- Screenshots and images you upload for analysis
- Videos and audio (including recordings you capture in-app) uploaded for analysis
- The responses generated by the AI
- Conversation timestamps and session identifiers, and the topics you choose in onboarding
- The “People” you add (a name or nickname and the notes you keep about them), so the AI can remember context across conversations
Purchase data
- Your subscription status, plan, price and currency, store country, and store transaction identifiers, as reported by Apple, Google or our web checkout provider
- We never see or store your card number or bank details. Payments are handled by Apple, Google or the checkout provider.
Device and usage data
- A random installation identifier we generate (stored only as a hash), your platform, app version, language and time zone
- If you allow notifications: your device's push notification token, used only to send you notifications (for example, that a payment didn't go through), and which of our notifications reached your device or were opened
- Product events: screens viewed, reads completed, paywall views, purchase attempts and results, notification and sign-in prompts, and technical performance timings such as reply speed and the size of each request
- IP address, used for security, rate limiting and abuse prevention, and shared with our purchase-management provider
- Crash and error reports
Advertising identifiers (with your permission)
- On iOS, the advertising identifier (IDFA) only if you allow tracking in Apple's App Tracking Transparency prompt; on Android, the Google advertising ID
- The anonymous app-instance identifiers created by the Meta and TikTok advertising SDKs
3. How We Use Your Data
- To provide the Service: your conversation text and media are processed by an AI model to generate the reply
- To personalize it: conversation memory, the People you add, your language and your onboarding topics
- To manage your subscription, free allowance and fair-use limits, and to restore purchases across your devices
- To measure and improve the product using our own event data
- To measure our advertising: which ads lead to installs, sign-ups, trials and purchases (see section 5)
- To send account emails such as a welcome note, a follow-up and, occasionally, a request for feedback or an offer. Every email has an unsubscribe link, and we send no marketing without a way to opt out.
- To answer store refund requests (see section 6)
- To secure the Service, prevent abuse and fraud, and comply with the law
We do not sell your personal data. We do not use your conversations to train AI models. Anthropic, our AI provider, does not use API data to train its models under its commercial terms.
4. Who We Share Data With
We use the following providers to run the Service. Each receives only what it needs for its job:
- Anthropic (AI processing, USA): your conversation text, the People context, and any images, screenshots, video or audio you upload are sent to Anthropic's API (Claude) to generate the reply. Screenshots may also go through a separate automated check that reads only the layout of the chat (who said what). This happens only after you accept the in-app consent on first use.
- Supabase (database, authentication and file storage, hosted on AWS in the USA): your account, conversations, uploads and product events.
- Vercel (hosting, USA): serves the app and website.
- RevenueCat (purchase management): receives your purchases and subscription status from Apple and Google, your anonymous purchase identifier or account identifier, device and IP information, and the advertising identifiers above so that subscription revenue can be attributed to ads.
- Apple App Store and Google Play (payments): process your payment under their own privacy policies. If you ask Apple for a refund, see section 6.
- Whop (web checkout on detectivel.app): if you subscribe or buy the book on the web, Whop and its payment processor handle your payment and receive your name and email.
- Meta (Facebook) and TikTok (advertising measurement): their SDKs in the app, and our servers, report app installs, app opens, sign-ups, trial starts, qualified trials and purchases, together with the advertising identifiers above and, for sign-ups and purchases, a hashed (SHA-256) version of your email. This lets us know which ads work. It never includes your conversations.
- ElevenLabs (text-to-speech, USA): the text of a reply you ask to hear aloud.
- Sentry (error monitoring): technical error reports, your account identifier when you are signed in, and at most a very short technical excerpt of the message that caused an error.
- Resend (email delivery): your email address and the content of the emails we send you.
- Apple Push Notification service and Google Firebase Cloud Messaging (notification delivery): your device's push token and the text of the notification being delivered.
- Google and Apple (sign-in): when you sign in with Google or Apple, they share your email and, if you allow it, your name with us.
Most of these providers are in the United States. Where required, transfers are covered by standard contractual clauses or equivalent safeguards.
5. Advertising Measurement and Your Choices
We advertise on Meta and TikTok and measure whether those ads lead to installs and purchases. We do not show ads inside the Service and do not use advertising cookies on the website.
- iOS: the advertising identifier is used only if you allow it in the App Tracking Transparency prompt. You can change this any time in Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your advertising ID in Settings → Google → Ads.
- Meta and TikTok also offer ad-preference controls in their own apps.
6. Refund Requests
If you ask Apple for a refund of an App Store purchase, we share information about that purchase and your use of the Service with Apple (for example, whether the subscription was delivered and how much you used it) so that Apple can decide your request. Our Terms describe this consent.
7. Data Retention
- Account data and conversations are kept while your account exists and deleted when you delete your account. Without an account, your conversations are stored on your device and in our database against your anonymous identifier.
- Uploaded screenshots, images, video and audio are deleted with your conversations.
- Purchase records are kept for as long as accounting and tax law require.
- Product event data is kept in pseudonymous form for analysis; when you delete your account it is unlinked from you.
- Backups may retain data for up to 30 days after deletion.
8. Your Rights (GDPR & CCPA)
Depending on where you live, you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your account and all associated data: in the app under Settings, or at detectivel.app/delete-account
- Export your conversation history
- Restrict or object to certain processing, and opt out of marketing emails at any time
To exercise any of these rights, email us at detectivelceo@gmail.com. We respond within 30 days.
9. Security
Data travels encrypted (TLS) and is stored with access controls. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.
10. Cookies and Local Storage
The website uses only essential cookies for sign-in and session management. The apps store settings, your conversations and usage counters locally on your device. We do not use advertising or tracking cookies.
11. Children's Privacy
The Service is not intended for anyone under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at detectivelceo@gmail.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will note the date at the top and, for significant changes, tell you in the Service or by email. Continued use after a change means you accept the updated policy.