We design our applications to function with as little personal data as possible. We do not sell personal information and we run no advertising profiles. Most data our applications create remains on your own device. Where we do process data — a crash report, an aggregated usage count, an email you send us — this document sets out exactly what, why, for how long, and how to have it erased.
1. Who we are
This policy is issued by CHAT GPT LTD (“we”, “us”, “our”), a private company limited by shares, registered in Scotland under company number SC866955, with its registered office at 44A West Hendersons Wynd, Dundee, Scotland DD1 5BT. For the purposes of the UK GDPR and the EU GDPR we are the data controller in respect of the personal data described in this policy.
It applies to this website (chatgptltd.site) and to every application published by CHAT GPT LTD, unless an individual application presents its own privacy notice, in which case that notice prevails for that application.
Enquiries, requests and complaints may be sent to info@chatgptltd.site.
2. Data we process
2.1 Data you provide
- Contact details and correspondence. Your name, email address and the content of any message you send us.
- Account credentials. Where an application offers accounts, typically an email address and an authentication identifier. Passwords are never stored in plain text. Where sign-in is delegated to Apple, Google or a comparable provider, we receive only the identifier that provider issues.
- Content you create. Notes, images, preferences and similar material. Unless a feature expressly synchronises or shares it, this remains on your device or within your own Apple or Google cloud account, which we cannot access.
2.2 Data collected automatically
- Diagnostics and crash reports. Device model, operating system version, application version and the technical state of the application at the point of failure.
- Aggregated usage analytics. Non-identifying counts such as which screens are opened or which features are used, to inform development priorities.
- Entitlement status. Whether a purchase or subscription is active. Payment is processed by Apple or Google; we never receive card numbers, bank details or billing addresses.
- Server logs. Our hosting provider records IP address, user agent and requested paths for security, diagnostics and abuse prevention.
2.3 Data we do not collect
We do not collect precise location, contacts, health data, biometric identifiers or the contents of your communications, and we do not construct advertising profiles. Where an application requires a device permission such as camera or photo library access, it is requested at the point of use, used solely for the feature requested, and may be declined.
3. Purposes and legal bases
| Purpose | Data used | Legal basis |
|---|---|---|
| Providing the application and its features | Account data, in-app content, entitlement status | Performance of a contract |
| Responding to support enquiries | Contact details, correspondence | Contract / legitimate interests |
| Diagnosing and correcting defects | Diagnostics, crash reports | Legitimate interests |
| Understanding feature usage | Aggregated analytics | Consent, where required |
| Preventing fraud and abuse | Server logs, entitlement status | Legitimate interests |
| Meeting accounting and tax obligations | Transaction records | Legal obligation |
Where processing relies on consent, you may withdraw it at any time through your device settings, the application’s settings, or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
4. Disclosure to third parties
We do not sell personal data, and we do not share it for cross-context behavioural advertising. We disclose data only to processors acting on our documented instructions under written agreements:
| Recipient | Function |
|---|---|
| Apple Inc. | Application distribution, payment processing, authentication, iCloud storage of user content |
| Google LLC (including Firebase) | Application distribution, payment processing, website hosting, crash reporting and analytics |
| Email service provider | Receipt and handling of correspondence |
We may also disclose personal data where required by law, a court order or a valid request from a competent authority; where necessary to establish, exercise or defend legal claims; or where necessary to protect the vital interests of any person. In the event of a merger, acquisition or transfer of assets, data may transfer to the acquiring entity, which would remain bound by this policy.
5. Retention
| Category | Retention period |
|---|---|
| Support correspondence | Up to 24 months from the close of the enquiry |
| Account data | Life of the account; deleted within 30 days of a valid erasure request |
| Crash and diagnostic data | Up to 90 days |
| Aggregated analytics | Indefinite — no longer identifies any individual |
| Transaction and accounting records | 6 years, as required by UK tax legislation |
6. Security
Data in transit is protected by TLS. Access to production systems is restricted to personnel who require it and is protected by multi-factor authentication. We deliberately limit the volume of personal data we hold, which remains the most effective safeguard available. No system can be guaranteed secure; in the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner’s Office within the periods prescribed by law.
7. Your rights
Subject to the conditions set out in applicable law, you have the right to access your personal data, to have inaccurate data rectified, to request erasure, to restrict or object to processing, to data portability, and to withdraw consent at any time.
Requests should be sent to info@chatgptltd.site. We respond within 30 days and do not charge a fee. We may request information reasonably necessary to verify your identity before acting. For erasure specifically, see Data & Account Deletion.
United Kingdom and EEA. If you are dissatisfied with our handling of a request, you may lodge a complaint with the Information Commissioner’s Office (ico.org.uk) or with your local supervisory authority.
California. Residents of California have the right to know, delete and correct personal information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as defined by the CCPA/CPRA, and have not done so in the preceding twelve months.
8. Children
Our applications are not directed to children under 13, or under 16 where local law prescribes that age, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will delete it without undue delay. Further detail is set out in our Children’s Privacy statement.
9. International transfers
Our processors may process personal data outside the United Kingdom and the EEA, including in the United States. Where they do, transfers are made under an applicable adequacy decision, or under the UK International Data Transfer Addendum or EU Standard Contractual Clauses, supported by technical measures including encryption in transit and at rest, so that the data continues to receive an essentially equivalent level of protection.
10. Third-party services
Our applications and website may link to services we do not operate, including the App Store and Google Play. Their processing is governed by their own privacy notices. Activity conducted within the App Store or Google Play, including payment, is governed by Apple’s or Google’s privacy policy rather than this one.
11. Changes to this policy
We may amend this policy from time to time. The effective date at the head of this page identifies the current version. Where a change is material, we will provide notice in the application or by email before it takes effect. Continued use of our services following the effective date constitutes acceptance of the amended policy.
12. Contact
CHAT GPT LTD
Registered in Scotland, company number SC866955
Registered office: 44A West Hendersons Wynd, Dundee, Scotland DD1 5BT
Email: info@chatgptltd.site
We aim to acknowledge privacy enquiries within two business days and to resolve formal requests within 30 days.