Privacy Policy

1. Introduction

This Privacy Policy governs how personal data is processed by DuneMind Technology L.L.C-FZ in connection with the ChatwithX mobile application and the chatwithx.app website.

We take your privacy seriously. This document explains, in plain language, what data we collect, why we process it, who we share it with, and the rights you have under applicable laws. By using our service, you agree to the practices described in this policy.

2. Data We Collect

To provide the service, we collect the following categories of data: account information (email address, username and language preference), device information (device model, operating-system version, app version and anonymous device identifier), in-app activity (screens visited and interaction metrics) and conversation content (messages you exchange with AI personas in the app).

ChatwithX is currently offered free of charge; we do not collect payment or billing information. Your conversation content is sent to our AI provider so we can deliver the service, and it is associated with your account so it can be redisplayed in your app.

Your chat content, text transcripts generated during voice conversations, and your profile information used to personalize responses (such as name, age, interests, goals, and similar profile data) are sent to our AI provider OpenAI (OpenAI, L.L.C., USA) in order to generate AI responses. Per OpenAI API terms of use, this data is not used to train OpenAI's models. During voice conversations, your voice does not leave your device; speech is converted to text on-device, and only the text transcript is transmitted to our servers and then to OpenAI.

3. How We Use Your Data

We use the data we collect to provide the service, generate AI responses, manage your account, detect and prevent abuse and security incidents, improve the product, and comply with our legal obligations.

Our lawful bases for processing are: performance of the service contract, our legitimate interest in providing a secure and functional product, your explicit consent where applicable, and compliance with legal obligations. We do not use your conversation content to serve you targeted advertising, and we do not share your conversations to train third-party AI models.

4. Data Sharing and Third Parties

To operate the service we rely on the following categories of vendors: OpenAI (OpenAI, L.L.C., USA) for generating chat responses — data sent: user messages, voice transcripts, and profile information for personalization (name, age, interests, goals). OpenAI's privacy policy: https://openai.com/policies/privacy-policy. Cloud and infrastructure providers that host our data and application, anonymous analytics and crash-reporting tools used to monitor stability and performance, and communication tools used for customer support and email.

These vendors process data only on our instructions and for the purposes we define, and they are contractually required to apply appropriate security and confidentiality measures. We do not sell or rent your personal data to third parties for advertising. Where we are legally required to do so (e.g. by a court order or statutory obligation), we may share data with the competent authorities.

5. Data Retention

We keep your account data for as long as your account is active. Chat history is retained until you delete it from within the app or close your account. Technical logs (operational logs and crash reports) are kept for up to 12 months. When you delete your account, your personal data — including supporting system backups — is permanently deleted within 30 days.

Where applicable law requires a longer retention period (e.g. abuse records or mandatory reporting obligations), the relevant data is kept only for the duration of that obligation.

6. Your Rights

Under applicable data-protection laws (including the GDPR, the Turkish Data Protection Law No. 6698 / KVKK and the UAE Personal Data Protection Law — PDPL), you have the right to access, correct, request deletion of, restrict the processing of, object to the processing of, and port your data in a machine-readable format.

You can delete your account and your data via chatwithx.app/delete-account/ or by writing to support@chatwithx.app. For any other request, you can contact the same email address. After verifying your identity, we respond to your request within 30 days at the latest. If you are not satisfied with our response, you have the right to lodge a complaint with the data-protection authority in your country of residence.

7. Children's Privacy

ChatwithX is not intended for children under 13, and we do not knowingly collect data from users under 13. A higher age threshold applies in some jurisdictions (for example 16 in the European Union, and parental or legal-guardian consent is required in Türkiye). If we become aware that we have processed data about a child under 13, we permanently delete the account and associated data without delay. If you believe your child has provided us with data, please write to support@chatwithx.app.

8. Security

We apply industry-standard measures to protect your data against unauthorized access, alteration and loss: TLS encryption for all traffic between client and server, database-level encryption, role-based access controls, the principle of least privilege, strong authentication, and regular security reviews.

We acknowledge that no system is completely secure. In the event of a security incident affecting your data, we will notify the competent supervisory authorities and affected users within the timeframes required by applicable law.

9. International Data Transfers

DuneMind Technology L.L.C-FZ is established in the United Arab Emirates (Meydan Free Zone, Dubai). Our vendors (cloud hosting, our AI provider OpenAI, analytics and support tools) may process your data in the European Union, the United States, the United Arab Emirates and other jurisdictions. Our AI provider OpenAI processes data in the United States. Standard Contractual Clauses (SCC) apply for transfers from the EU.

For cross-border transfers, we rely on Standard Contractual Clauses (SCCs) for EU transfers, additional safeguards, and explicit consent mechanisms where required under KVKK and PDPL. These safeguards are designed to ensure a level of protection equivalent to the one we provide locally.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we notify you in the app or via your registered email address. The updated policy takes effect on the date on which it is published on this page. You can check the "Last updated" date at the top of this page to confirm which version is current.

11. Contact Us

For any questions, requests or complaints regarding this policy or the processing of your personal data, please contact us:

DuneMind Technology L.L.C-FZ
Meydan Free Zone, Dubai, UAE
support@chatwithx.app