Privacy Policy

Cycle Chat
Last Reviewed: September 2, 2026

Welcome to Cycle Chat. This Privacy Policy describes how Hasanudin ("Cycle Chat," "we," "our," or "us") collects, handles, stores, shares, and protects information about you when you use our mobile application, website, and related services (collectively, "the Platform"). We are committed to handling your data responsibly and transparently.

By accessing or continuing to use the Platform, you confirm that you have read and understood this Policy. If you do not agree with our practices as described here, please discontinue use immediately. Unless otherwise defined, capitalized terms used herein carry the same meanings assigned to them in our Terms of Use.

Chapter One: Information We Gather

Section 1.1 Biometric Image Data

Certain features of the Platform allow you to upload photographs or visual media that may include human facial features ("Biometric Data"). This Biometric Data is processed solely to enable AI-powered functionality such as avatar creation, image refinement, and related visual processing capabilities.

When you submit an image containing facial features, our systems may transiently examine visual elements within the image to fulfill your requested AI operation. This may involve detecting facial positioning, contours, expressions, and similar characteristics necessary to produce AI-generated results. Such examination is conducted exclusively to support the feature you invoked and is never performed for identity verification, authentication, or recognition purposes.

Specifically, Cycle Chat does not: (a) identify individuals from uploaded imagery; (b) conduct facial recognition or biometric authentication; (c) compare photographs across different users; or (d) create or maintain persistent biometric databases, facial templates, or similar lasting identifiers. Depending on the particular feature, image processing may occur locally on your device or through encrypted cloud infrastructure operated by Cycle Chat or its vetted technology partners. All such processing incorporates appropriate technical and organizational safeguards against unauthorized access, use, or disclosure.

We do not employ Biometric Data for advertising personalization, user profiling, or commercial purposes unrelated to the Platform's core functionality unless you provide separate, explicit authorization.

Section 1.2 Information You Provide Directly

We collect personal information that you voluntarily furnish when you register for an account, request information about our products or services, participate in Platform activities, or otherwise communicate with us. This may include:

•
Contact details provided during registration or when reaching out to our support team;
•
Optional account preferences you choose to share, such as language settings;
•
Transactional data necessary to fulfill your requests, including name, billing address, shipping address, email address, telephone number, and payment instrument details when you make purchases through the Platform.

Section 1.3 Automatically Gathered Information

When you interact with the Platform, certain technical information is collected automatically through standard logging mechanisms and analytics systems:

•
Mobile Device Information: We capture device identifiers (such as mobile device ID, model, and manufacturer), operating system version, system configuration, browser type and version, hardware model, Internet service provider or mobile carrier, and Internet Protocol (IP) address. If you use our mobile application, we may also collect information about your phone network, mobile operating system platform, device type, unique device identifier, and which Platform features you access.
•
Push Notifications: We may request permission to send you push notifications regarding your account or specific Platform features. You may disable these at any time through your device settings.
•
Log and Usage Data: Our servers automatically record diagnostic, usage, and performance information when you access the Platform. This may include IP address, device information, browser settings, timestamps associated with your activities, pages and files viewed, search queries, actions taken, system events, error reports, and hardware settings.
•
Device-Level Data: We collect information about the computer, mobile phone, tablet, or other device you use to access the Platform, including IP address, device and application identification numbers, location (where permitted), browser type, hardware model, carrier, operating system, and system configuration.

Section 1.4 Information from External Sources

We may receive information about you from third-party sources:

•
Authentication Partners: If you access the Platform using a third-party login service (such as Apple ID or Google), we may receive limited profile or authentication-related information from that service, depending on the permissions you grant. This may include your name, profile picture, gender, and birthday, which are made available to us through the platform's APIs.
•
Marketing Analytics Partners: We may receive data from third-party partners to evaluate marketing campaign effectiveness, track user acquisition channels, and detect potentially fraudulent activities.
•
Analytics Providers: We receive aggregated analytics information from third-party providers to help us optimize user interactions and Platform performance.
•
Third-Party Tracking: Some third-party services integrated into the Platform may use tracking technologies to gather information about user interactions and device activity. Such technologies operate under their own privacy policies, and we bear no responsibility for their independent data collection practices.

Section 1.5 AI Conversation Data

The Platform provides AI-powered conversational, assistant, and content generation capabilities. When you utilize these features, your prompts, text submissions, uploaded materials, and associated interactions are processed by our systems and, where necessary, transmitted to external AI model providers for response generation. The categories of data transmitted for this purpose may include your conversation text and prompts, character definitions and persona materials, and any images or files you choose to upload within a chat. Before your data is first transmitted to a third-party AI provider, the App will display a dedicated notice identifying the categories of data involved and requesting your explicit consent; if you decline, AI-powered conversational features will not be available to you. We do not intentionally use conversation content for advertising profiling or behavioral targeting.

Chapter Two: How We Use Your Information

The information we collect serves the following purposes:

•
To facilitate account creation, authentication, and ongoing management of your user account;
•
To deliver the services you have requested and fulfill our contractual obligations to you;
•
To improve Platform functionality, reliability, and user experience through analysis of usage patterns and device performance metrics;
•
To respond to your support requests, inquiries, and complaints;
•
To conduct analytics on Platform usage and advertising campaign performance;
•
To present advertisements and recommendations, where necessary with your consent, or based on our legitimate interests where consent is not required;
•
To protect vital interests, such as preventing harm to individuals;
•
To enforce our terms, policies, and agreements;
•
To deliver AI functionality you request, without using conversation content for user profiling unless separately disclosed.

Chapter Three: Sharing and Disclosure of Information

We handle your data with strict confidentiality. Information is not disclosed to third parties except in the following circumstances:

Section 3.1 AI Infrastructure Providers

By using AI-related features, you acknowledge that your submissions may be processed by third-party AI infrastructure providers (such as OpenAI, Google, Anthropic, or similar entities) solely for generating outputs and supporting Platform functionality. These providers handle information according to their own privacy policies and applicable data protection laws. We do not use your conversation content to train third-party foundation models unless you have given separate, explicit consent. We do not share your Biometric Data with any third-party AI providers.

Section 3.2 Service Providers and Vendors

We engage trusted third parties to perform specific functions on our behalf. These may include infrastructure and operations providers, business services, safety and security providers, content moderation services, legal counsel, fraud prevention specialists, and marketing and advertising services. These parties access personal data only to the extent necessary to perform their designated functions.

Section 3.3 Corporate Affiliates

We may share personal data with affiliated companies to help us develop, maintain, and provide the Platform, manage customer relationships, and deliver supporting services.

Section 3.4 Advertising Partners

The Platform is supported in part by advertising. We may share certain information with advertising partners to deliver relevant advertisements and measure campaign effectiveness.

Section 3.5 Non-Personal Information

We may share aggregated, anonymized, or otherwise de-identified information with interested third parties to help them understand usage patterns or conduct independent research.

Section 3.6 Legal and Security Obligations

We may disclose your personal information when reasonably necessary to: comply with valid legal process (subpoenas, warrants, court orders); respond to requests from public authorities; comply with applicable laws and regulations; enforce our policies and agreements; protect our legal rights and legitimate interests; safeguard the security and integrity of the Platform; or protect the rights, property, or safety of users, employees, partners, affiliates, or other individuals.

Section 3.7 Corporate Transactions

If we are involved in a merger, acquisition, bankruptcy, reorganization, partnership, asset sale, or similar transaction, your information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

Section 3.8 Law Enforcement Notification

If we are compelled to disclose your personal information to law enforcement, public agencies, or other governmental bodies, we will endeavor to notify you in advance unless prohibited by the requesting agency or applicable law.

Section 3.9 Safety Review of Reported Content

When content is reported through our in-app reporting tools, the reported material — including, where applicable, the full text of the reported AI reply that is automatically attached to the report — is processed by our automated safety systems and may be reviewed by our safety team or by content moderation service providers acting on our behalf, solely for the purposes of investigating the report, enforcing our Terms of Use and Child Safety Policy, protecting users, and complying with applicable law.

Chapter Four: External Links

The Platform may contain links to third-party applications, websites, or services. We are not responsible for the privacy practices, content, or security of these external destinations. We encourage you to review the privacy policies of any third-party sites you visit before providing personal information.

Some companies may use data they collect to serve interest-based advertisements, including on platforms not affiliated with Cycle Chat. We do not control these practices.

Chapter Five: Third-Party Software Development Kits

The Platform incorporates third-party software development kits (SDKs) and related services to enhance functionality and user experience. These SDKs may collect, store, or process certain data, such as usage metrics, device information, and location data, in accordance with their own privacy policies.

Examples of SDKs we may integrate include analytics tools, advertising networks, and social media connectivity services. While we carefully vet our third-party partners, we are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any integrated third-party services. A current list of third-party SDKs is available at: https://www.cycleai.ai/third-party-sdk.

Chapter Six: Protections for Young Users

The Platform is not directed at children, and we do not knowingly solicit data from or market to individuals below the age of eighteen (18). By using the Platform, you represent that you are an adult.

If we discover that we have inadvertently collected personal information from a child without appropriate consent, we will terminate the associated account and take reasonable steps to promptly delete such information from our systems. Parents or guardians who believe their child may have provided information without consent should contact us at [email protected].

Chapter Seven: Information Security

Protecting your privacy and personal information is of paramount importance to us. We process personal information to implement and strengthen security measures, combat spam, malware, and malicious activities, detect security risks, and verify user identity to prevent unauthorized account access.

Access to user information is restricted to employees, contractors, agents, and third-party service providers who require such access to deliver, operate, develop, maintain, support, and optimize the Platform experience. We employ password protection, access logging, and system monitoring to safeguard the confidentiality and integrity of all user information.

Due to the inherent characteristics of the Internet and related technologies, we cannot guarantee absolute protection against loss, misuse, or unauthorized alteration of information under our control.

Chapter Eight: Data Retention Practices

Biometric Data uploaded for AI processing is generally handled on a temporary basis and deleted after the requested processing operation is completed, unless temporary retention is necessary for technical, security, or legal compliance reasons.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable laws and regulations. Personal data is typically retained for the duration of your active relationship with us plus one hundred eighty (180) days following termination. Once the applicable retention period expires, we take appropriate measures to securely delete or anonymize your data so that it can no longer identify you.

Unless you request earlier deletion, we may retain certain information as necessary to provide the Platform, comply with legal obligations, resolve disputes, enforce our agreements, and support legitimate business or security purposes. Partners with whom we collaborate may retain data for different, potentially longer periods, over which we do not exercise control.

Chapter Nine: Cross-Border Data Transfers

Your information may be transferred to, stored on, and processed by servers located outside your country or region of residence, where data protection standards may differ from those in your jurisdiction. By using the Platform, you acknowledge and consent to such international transfers as described in this Policy. We implement appropriate safeguards to protect your information during such transfers.

Chapter Ten: Your Privacy Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

•
Right to Information: You have the right to receive clear, accessible information about how we collect, use, and process your personal information.
•
Right of Access: You may request confirmation of whether we are processing your personal data and, if so, access to that data.
•
Right to Rectification: You may request correction of any inaccurate or outdated personal information we hold about you.
•
Right to Erasure: You may request deletion of your personal information where permitted by applicable law. We may retain limited information where necessary for legal, security, or legitimate business purposes.
•
Right to Restrict Processing: You may request limitation of processing in certain circumstances, such as when you contest the accuracy of your data.
•
Right to Opt Out: Where permitted by law, you may request that your information not be shared or used for certain advertising or data-sharing activities.
•
Right to Data Portability: You may request a copy of your personal information in a commonly used, machine-readable format and, where technically feasible, request transfer to another service provider.
•
Right to Object: You may object to certain types of processing based on legitimate interests or other applicable legal grounds.
•
Right to Complain: You may submit a complaint to a competent data protection authority regarding our handling of your personal information.
•
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting processing carried out prior to withdrawal.
•
Right to Posthumous Instructions: You may provide instructions regarding the retention, deletion, or handling of your personal information after your death, where recognized by applicable law.

To exercise any of these rights, or if you have questions about your privacy rights, please contact us at [email protected].

Chapter Eleven: Account Deletion

You may delete your account directly from within the Cycle Chat application or through our official website. Account deletion is irreversible, and we cannot restore your account or data once the process is complete.

Deleting your account will result in the following: removal of your account from the Platform; permanent erasure of your message history and chat records; disassociation of certain log data from your identifying information through replacement of account identifiers with anonymous substitutes; and retention of limited information where necessary for legal compliance, terms enforcement, or harm prevention.

If you have active auto-renewable subscriptions, billing may continue through the applicable payment platform (Apple App Store or Google Play) in accordance with their policies, even after your Cycle Chat account is deleted. We strongly recommend canceling all subscriptions before deleting your account.

Chapter Twelve: Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. When changes are made, we will revise the "Last Reviewed" date at the top of this document. Material changes to our information handling practices will be communicated to you through in-app notifications or email, where applicable.

We encourage you to review this Policy periodically. By continuing to use the Platform after changes are posted, you consent to the updated Policy. If you do not agree with the changes, you have the right to discontinue use of the Platform.

Chapter Thirteen: Contact Information

If you have any questions, concerns, or comments about this Privacy Policy, or if you wish to exercise any of your privacy rights, please contact us at: Email: [email protected]. For child safety matters, you may also contact our designated Child Safety Point of Contact at the same address with the subject line "Child Safety" (see our Child Safety Policy for details).