RenuuAI Privacy Policy

Effective: May 4, 2026

This Privacy Policy describes how RenuuAI (“RenuuAI,” “we,” “our,” or “us”) collects, uses, discloses, and protects information about you when you use our websites, applications, and related services (collectively, the Services).

We designed RenuuAI to prioritize privacy and anonymity. This policy aims to be clear about what we do—and don’t do—with your data.

1) Who We Are & Scope

• Controller: RenuuAI (U.S.-based).
• Contact: [email protected]
• Territory: We make the Services available in the United States only. All data is processed and stored in the United States. Certain state restrictions apply (see Location Controls below).
• Age: You must be 18 or older to use the Services.

This policy applies to information we process about you when you access or use the Services or interact with us (e.g., by email).

2) Information We Collect

We collect the categories of information below. We do not collect phone numbers or payment card details at this time.

A. Information You Provide

• Account Information: Email address (required). Optional nickname you choose to be addressed by in chats. Today, the nickname is stored in an encrypted profile field that is not intended to be admin‑readable and is not currently editable.
• Chat Content (User Content): Prompts, messages, responses, reflections, ratings, and other information you send to or receive from the AI, including during chat, discovery sessions, guided sessions, check-ins, and open sessions. This information may include relationship details relevant to infidelity recovery—e.g., what happened, timeline/duration, whether an affair was emotional and/or physical, and the people involved. Depending on what you choose to share, Chat Content may include personal information and sensitive personal information.
• AI Processing Context: To provide personalized AI coaching, we may process your chat messages together with related conversation history, AI responses, recovery roadmap/session context, check-in responses and ratings, relationship role selection, and optional nickname if provided.
• Communications: Content of messages you send us (e.g., support emails) and associated contact details.
• Other Submissions: Feedback, account deletion requests, and any other information you choose to provide.
• Relationship Role Information: At sign-up, you may be asked to identify your role in relation to an affair or relationship betrayal (e.g., betrayed partner, unfaithful partner, or similar classifications). This information is used to personalize your experience and tailor AI-generated guidance.

B. Information Collected Automatically

• Approximate Location (State & Country): Derived from your IP address at sign-up and stored in your account records to enforce eligibility and geographic restrictions. We do not collect or store precise GPS location.
• Service Logs and Usage Data: Dates/times of sign-up, sign-in, and chat session start/end events; basic technical events needed to operate the Service; and simple in-app usage data, such as page or screen views and button clicks. While your account is active, this usage data may be associated with your user account so we can understand how users interact with the Services, troubleshoot issues, improve usability, and maintain security. We do not use this usage data for third-party advertising or cross-site tracking.
• Account Deletion Metadata: If you delete your account, we retain a limited deletion record containing your internal user ID, account creation timestamp, deletion timestamp, deletion reason, and deletion status. We do not store your email address in this deletion record.

No tracking for advertising: We do not use third‑party advertising cookies, analytics or cross‑site tracking pixels. We collect and process this usage data through RenuuAI’s own internal, proprietary systems. We do not use third-party analytics or tracking tool to collect or analyze in-app usage data. Usage data does not leave the RenuuAI app or our controlled systems for analytics purposes, and we do not disclose, sell, share, transfer, or otherwise make usage data available to any third party for analytics, advertising, profiling, or cross-site tracking.

3) How We Use Information

We use information to:

• Provide and maintain the Services, including responding to your requests and providing AI chat functionality.
• Personalize your experience (e.g., using your optional nickname in chats).
• Enforce eligibility rules, such as state and age restrictions.
• Operate, secure, and troubleshoot the Services; prevent fraud, abuse, or misuse.
• Understand and improve how users interact with the Services, including by analyzing simple usage data such as page or screen views and button clicks.
• Comply with law and protect our rights, users, and the public.
• Research and improve the Services by using aggregated or de‑identified data (which we keep in that form and do not attempt to re‑identify, except as required by law).
• Tailor AI interactions and recovery pathways based on relationship role selection (e.g., betrayed or unfaithful partner).
• Process Chat Content and related context through third-party artificial intelligence service providers to generate AI responses, operate chat and guided-session features, personalize the Service, maintain security, prevent abuse, and troubleshoot technical issues.
• Process and document account deletion requests, including confirming that deletion was completed and understanding aggregate account-retention patterns.

AI Processing: To generate responses and operate chat, discovery, guided-session, check-in, and open-session features, we send certain information to OpenAI, LLC, our third-party AI service provider. The information sent to OpenAI may include your chat prompts and messages, AI responses, relevant conversation context or history, recovery roadmap/session context, check-in responses and ratings, relationship role selection, and optional nickname if provided. We do not send your email address with chat content.

OpenAI processes this information to provide AI responses and for safety, security, and abuse-prevention purposes. We do not permit OpenAI to use your API data to train its models. Because RenuuAI does not currently have Zero Data Retention enabled with OpenAI, OpenAI may retain prompts, responses, and related metadata for up to 30 days for abuse monitoring unless a shorter approved retention setting applies. Some OpenAI API features may also store application state depending on how the request is configured. We configure our OpenAI API usage to limit retention where supported and consistent with providing the Services.

4) Location Controls & Restricted States

To comply with state restrictions, we derive your state and country from your IP address at sign‑up. If your state is restricted, the Service may be blocked. We may store your state and country in your account to avoid repeated checks. We do not collect precise location.

5) Disclosing Information

We do not sell your personal information or share it for cross‑context behavioral advertising. We may disclose information only in the situations below:

• Service Providers (Processors): We use third-party providers to operate, secure, and support the Services, such as infrastructure hosting and storage, AI processing, email/support communications, and IP geolocation to determine state/country. For AI processing, we use OpenAI, LLC. We may disclose to OpenAI the categories of information described in the AI Processing section above so OpenAI can generate AI responses and support safety, security, and abuse-prevention functions.

  We use OpenAI under its applicable business/API terms and data-processing terms, including OpenAI’s Services Agreement and Data Processing Addendum where applicable. These terms include commitments regarding processing on customer instructions, confidentiality, security measures, subprocessors, data subject requests, personal data breaches, and data retention. We rely on these terms and commitments to provide protections for personal information processed on our behalf that are intended to be consistent with this Privacy Policy and applicable App Store Review Guidelines. We do not permit OpenAI to use RenuuAI API data to train its models.

• Business Transactions: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be disclosed and transferred as part of that transaction.
• Legal, Safety, and Security: Where required by law or to protect rights, safety, and security (including detecting and preventing fraud or misuse).
• Affiliates: If RenuuAI later forms affiliates, we may share information with them consistent with this policy.
• Limited Internal Access: Certain non-content account metadata—such as account email address, relationship role selection, and stored state/country—may be accessible to authorized RenuuAI personnel with administrative privileges for operational, security, compliance, or support purposes.

We do not provide features for sharing your chats with other users or external apps.

Usage data is not disclosed to third-party analytics providers. Our in-app usage data collection is internal and proprietary, and we do not send usage data to 3d party analytics, advertising, or tracking service.

6) Retention

We retain information for as long as necessary to provide the Services and for legitimate purposes such as security, troubleshooting, and legal compliance. Today:

• Account and chat data are retained unless and until you request deletion of your account (see Your Rights & Choices). Simple usage data associated with your account, such as page or screen views and button clicks, is de-identified when your account is deleted and may be retained in de-identified form for analytics, security, troubleshooting, and Service improvement. We do not attempt to re-identify de-identified usage data, except as required by law.
• OpenAI API Retention: Information sent to OpenAI for AI processing may be retained by OpenAI for up to 30 days in abuse-monitoring logs unless a shorter approved retention setting applies. Some OpenAI API features may also retain application state depending on how the request is configured. RenuuAI does not currently have Zero Data Retention enabled with OpenAI.
• When you delete your account through the app, we delete your RenuuAI account and associated personal data from our active systems, including your authentication account, whether you created the account using email, Google, Apple, or another supported sign-in method.
• After account deletion, we retain a limited deletion record containing your internal user ID, account creation timestamp, deletion timestamp, deletion reason, and deletion status. We use this record for security, compliance, support, and aggregate retention analysis. We do not retain your email address in this deletion record.
• We do not currently support deletion of individual chat sessions because session content may be interwoven with longer-term support plans and personalization context.
• Backups: We do not currently maintain backups. If this changes, we will update this policy and disclose typical backup retention windows.

When we delete data, we aim to do so securely. Some technical artifacts (e.g., logs) may persist for a short time where necessary and permitted by law. De-identified usage data retained after account deletion is no longer associated with your account, email address, chat content, or other direct identifiers.

7) Your Rights & Choices

Depending on where you live, you may have certain statutory rights in relation to your Personal Data. For example, you may have the right to:

• Access your Personal Data and information relating to how it is processed.
• Delete your Personal Data from our records.
• Update or correct your Personal Data.
• Restrict how we process your Personal Data.
• Withdraw your consent—where we rely on consent as the legal basis for processing at any time.
• Object to how we process your Personal Data.
• Lodge a complaint with your local data protection authority.

You can delete your account directly in the app from your account settings. Account deletion removes your RenuuAI account and associated personal data from our active systems, subject to limited records we retain for security, compliance, support, and legal purposes as described in Retention above. Account deletion removes or de-identifies personal information associated with your account, subject to legal, security, and operational exceptions described in this Policy. De-identified usage data may remain after account deletion because it is no longer associated with an identifiable user.

If you used Sign in with Apple, account deletion will also disconnect your RenuuAI account from that sign-in method where supported by Apple’s account-deletion requirements.

Do Not Sell/Share: We do not sell personal information or share it for targeted advertising.

8) Security

We employ administrative, organizational, and technical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or destruction, including:

• Encryption of data in transit and at rest;
• Additional application‑level encryption of message strings in our databases;
• Passwords stored only as salted, hashed digests using industry‑standard algorithms;
• Access controls and layered infrastructure security.

Chat content is stored as encrypted application‑level strings. Internal admin tools do not display plaintext chat messages; an administrator would see only encrypted data. While decryption is technically possible, it would require specific, non‑routine code‑level steps under strict controls. We do not use human reviewers to read individual chat content in the ordinary course of business.

Although RenuuAI limits ordinary internal access to chat content, chat content and related context sent to OpenAI are processed by OpenAI as our third-party AI service provider as described in this Privacy Policy.

9) Service Availability & Data Residency

All personal information is processed and stored in the United States. We do not offer cross-border data transfers or localized hosting outside the U.S. at this time.

10) Children

The Services are not directed to individuals under 18. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has created an account, we will delete the account and associated data.

11) State Privacy Disclosures (U.S.)

Depending on your state, you may have additional rights to know, access, delete, correct, opt out of targeted advertising, and not be discriminated against for exercising these rights. We do not sell personal information or process it for targeted advertising. To exercise state‑law rights, contact [email protected]. We may need to verify your identity and may deny requests where an exemption applies. Appeals can be submitted to the same email.

12) Changes to This Policy

We may update this Privacy Policy from time to time. The updated policy will be posted with a new Effective Date. When required by law, we will provide additional notice.

13) Contact Us

Please contact us at [email protected] if you have any questions or concerns not already addressed in this Privacy Policy.