# Semantika — Privacy Policy

_Last updated: [DATE]. Controller: [COMPANY NAME, ADDRESS, ORG NUMBER].
Contact: [support@semantika.app]._

Semantika is built to know as little about you as possible. This policy
describes exactly what we process, why, and what we never do.

## What we store

| Data                                                        | Purpose                                     | Kept until                             |
| ----------------------------------------------------------- | ------------------------------------------- | -------------------------------------- |
| Email address and sign-in provider (Apple, Google or email) | Your account                                | Account deletion                       |
| Subscription status (`free`/`active`)                       | Unlocking Premium                           | Account deletion                       |
| Message counters and their reset date                       | Free-tier limits and abuse prevention       | Account deletion                       |
| A random device identifier (guests only)                    | Letting you chat before creating an account | Removed when you delete the app's data |

That is the complete list. We do not collect names, birthdays, locations,
contacts, photos, advertising identifiers, or analytics profiles.

## Your conversations

- Conversations are **never stored on our servers**. They live in your
  app's memory and disappear when you close the conversation.
- To generate each reply, the current conversation is transmitted over
  encrypted connections to our AI provider, **OpenAI** (acting as a data
  processor), and processed transiently. Under OpenAI's API terms, API data
  is **not used to train their models**.
- We never use your conversations for advertising, profiling, or training
  of any kind.
- Error logs never contain message content.

## Payments

Purchases are handled entirely by Apple (App Store) or Google (Google
Play). We never see your card details — only a receipt that we verify with
the store and your resulting subscription status.

## Legal bases (GDPR)

- **Performance of contract** — providing the service you signed up for.
- **Legitimate interest** — preventing abuse of the free tier.

## Your rights

You can access, correct, export, or erase your data at any time. Deleting
your account (**Account → Delete account** in the app) permanently removes
everything in the table above. Cancel an active subscription in your App
Store or Google Play settings — deleting the account does not cancel the
store subscription. For anything else, contact [support@semantika.app].
You may also lodge a complaint with your supervisory authority (in Sweden:
IMY).

## Security

All traffic is encrypted (HTTPS). Authentication uses AWS Cognito.
Databases are encrypted at rest and unreachable from the public internet.

## Changes

If this policy changes materially, we will note it in the app before the
change takes effect.