1. Introduction
Welcome to Hey, Sash!, operated by P/E Fokina Anastasiia. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS application for creating carousel posts.

2. Information We Collect
2.1 Information You Provide

• Account Information: Name, email address (when creating an account)
• Content: Text, images, and carousel designs you create
• Usage Data: How you interact with our app features

2.2 Automatically Collected Information

• Device Information: iOS version, device model, unique device identifiers
• App Usage: Features used, time spent, crash reports
• Analytics: Firebase Analytics data to improve user experience

3. How We Use Your Information
We use your information to:

• Provide and maintain our carousel creation service
• Generate AI-powered content suggestions by sending your text and voice recordings to third-party AI services (see Section 4.1)
• Improve app functionality and user experience
• Process in-app purchases and subscriptions
• Provide customer support
• Send important updates about the service, newsletters, and promotional communications (with your consent)

Legal Basis for Processing (GDPR): We process your personal data based on: (a) your consent for marketing communications; (b) contractual necessity to provide our services; (c) legitimate interests to improve our app and prevent fraud.

4. Information Sharing
We do not sell, trade, or rent your personal information. We may share information only in these limited circumstances:

• Service Providers: Third-party services that help us operate the app (OpenAI, OpenRouter, Google, Firebase, RevenueCat, Apple, Customer.io for email communications). See Section 4.1 for details on AI service providers.
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger or acquisition

4.1 Third-Party AI Services
To provide AI-powered content generation and voice transcription, 
the app sends user-provided data to the following third-party services:

• OpenRouter (OpenRouter, Inc.) — an API aggregator that routes text generation requests to AI model providers. Your text input is sent through OpenRouter to Google Gemini for carousel content generation.
• Google (Google LLC) — processes text content via Gemini API (accessed through OpenRouter) to generate carousel slides.
• OpenAI (OpenAI, L.L.C.) — voice recordings are sent directly to OpenAI Whisper API for transcription. Text input is also sent to OpenAI Moderation API for content safety checks.

What data is sent:

• Text you type or paste into the app — to OpenRouter/Google (for generation) and OpenAI (for moderation)
• Voice recordings you make — to OpenAI (for transcription)

What data is NOT sent:

• Your account information (name, email)
• Your photos or images
• Your device information

These services process your data solely to fulfill your request and return generated content. The app requests your explicit consent before sending any data to these services.

For more information:

• OpenRouter Privacy Policy: https://openrouter.ai/privacy
• Google Privacy Policy: https://policies.google.com/privacy
• OpenAI Privacy Policy: https://openai.com/privacy

5. Data Security
We implement appropriate security measures to protect your information:

• Encrypted data transmission
• Secure cloud storage
• Regular security assessments
• Limited access to personal data

6. Your Rights
You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Opt-out of marketing communications
• Data portability (export your content)

6.1 EU Residents (GDPR)
If you are located in the European Union, you have additional rights under GDPR:

• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

6.2 California Residents (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your rights

7. Children's Privacy
Our app is not intended for children under 13. We do not knowingly collect personal information from children under 13.

8. International Users
Your information may be transferred to and processed in countries other than your own, including the United States, where our servers are located.

9. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete your personal information within 30 days.

10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes through the app or via email at least 30 days before the changes take effect.

11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Operator: P/E Anastasiia Fokina
Identification Number: 305593621

• Email: support@heysash.ai
• Website: heysash.ai/support
• Mailing Address: Tbilisi, Georgia

For EU residents, you may also contact our Data Protection Officer at: dpo@heysash.ai