Privacy Policy — GoGo AI

GoGoMinds Software Inc. ("we", "us", or "our") operates the GoGo AI application and related services (collectively, the "Service"). This Privacy Policy describes the personal data we collect, how we use it, and the choices available to you.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and generate a random account identifier. This information is used solely for authentication and to enable cross-device synchronisation.

1.2 Chat and Notes

All chat and note content is stored locally on your device. If you enable cloud sync, your content is encrypted on your device prior to transmission to our servers. We store only the encrypted data and cannot access or read your message content. If cloud sync is not enabled, no content leaves your device.

1.3 Voice Data

When you use an on-device speech engine, all audio remains on your device. When you select a cloud-based speech provider, audio is transmitted directly from your device to the provider you have chosen. We do not receive, process, or store any audio recordings.

1.4 Billing and Usage

We collect subscription status, credit balance, and aggregated daily usage totals for the purposes of billing and credit accounting. We do not collect or store payment card numbers or other financial instrument data. All payment processing is handled by Apple, Google, or our third-party subscription management provider.

1.5 Device and Technical Information

We collect your operating system, app version, and IP address. IP addresses are used for routing and security purposes and are not logged persistently. Sensitive credentials, including API keys, are stored in your platform's secure storage facility and are not transmitted to our servers.

1.6 Location (Optional)

Location data is not collected automatically. If you explicitly enable location sharing in the application settings, we may derive a coarse geographic region from your IP address. Precise location data is collected only if you separately grant device-level location permission. You may disable location sharing at any time.

2. Data in Transit to Third-Party Providers

When you use a cloud-based AI model, your prompts and any necessary context are transmitted directly from your device to the provider you have selected, using your own API credentials, encrypted in transit. Each provider is an independent third party governed by its own terms and privacy policies. Your contractual relationship for AI services is with the provider, not with us. We recommend that you review the applicable provider's terms before use.

When you use a local (on-device) model, no message content leaves your device.

We do not receive, store, or have access to your prompts, API keys, or AI-generated responses.

3. Purpose of Processing

We process personal data for the following purposes:

Provision of the Service, including chat, notes, voice, and cross-device synchronisation.
Billing, credit accounting, and subscription management.
Security, fraud prevention, and technical diagnostics.
Compliance with applicable legal obligations.

We do not use your data for advertising, behavioural profiling, or sale to third parties.

4. Legal Basis for Processing

Contractual necessity — processing required to provide the Service to you.
Legitimate interest — security, debugging, and aggregated usage analytics, where such interests are not overridden by your rights.
Consent — for optional features such as location sharing, which may be withdrawn at any time through the application settings.
Legal obligation — retention of financial records as required by applicable law.

5. Data Retention

Local data — retained on your device until you delete it.
Cloud data — retained for the duration of your account. Following account deletion, personal data is retained for up to 365 days to facilitate recovery and satisfy legal obligations, after which it is permanently deleted.
Financial records — retained for the period required by applicable law.

To request deletion of your account and associated data, contact [email protected].

6. Your Rights

Subject to applicable law, you may have rights of access, rectification, erasure, objection, restriction of processing, data portability, and withdrawal of consent. We will not discriminate against you for exercising any of these rights.

To exercise any right, contact [email protected]. We will respond within the timeframe required by applicable law.

EU and UK residents may lodge a complaint with their local data protection supervisory authority. Canadian residents may contact the Office of the Privacy Commissioner of Canada.

7. Children

The Service is not directed to children under the age of 13 in the United States (where COPPA applies) or under the age of 16 in the European Union and United Kingdom (unless a lower age is permitted by local law, but never below 13). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us and we will delete it promptly.

8. Security

All data in transit is encrypted using TLS. Chat content is encrypted on your device prior to synchronisation with our servers, ensuring that we cannot access it in readable form. API keys and other credentials are stored in platform-provided secure storage. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. We encourage the use of strong, unique passwords.

9. International Data Transfers

GoGoMinds Software Inc. is incorporated in Canada. Our cloud infrastructure is hosted primarily in the United States. Your personal data may be transferred to and processed in jurisdictions outside your country of residence, including the United States, where data protection laws may differ. Where required by applicable law, we rely on appropriate safeguards to protect transferred data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of the Service following the posting of changes constitutes your acceptance of those changes.

11. Contact

For questions or requests relating to this Privacy Policy or your personal data, contact us at [email protected].