Privacy Policy

1. Introduction

Welcome to Nyata AI. We are committed to protecting your privacy and personal data. This Privacy Policy explains how Nyata Ltd ("we", "us", or "our") collects, uses, and safeguards your information when you use our AI companion application designed to help Bristol residents access community services, support resources, and local information.

2. Information We Collect

We collect the following types of information to provide and improve our service:

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Profile Information: Optional profile details you choose to provide
• Chat Conversations: Messages you send to our AI characters to provide personalized responses and improve service quality
• Feedback: Any feedback, questions, or support requests you submit

2.2 Information Automatically Collected

• Usage Data: How you interact with the app, features used, conversation frequency, and session duration
• Device Information: Device type, operating system, app version, and unique device identifiers
• Location Data: Approximate location (city/region) to provide relevant Bristol-specific information (with your permission)
• Analytics: App performance, crash reports, and usage patterns to improve user experience

2.3 Information from Third Parties

• Authentication Services: If you sign in with Apple, Google, or other OAuth providers, we receive basic profile information
• Payment Information: When using our API services, payment data is processed by our payment provider (we do not store full card details)

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Provide AI-powered conversations and responses
• Deliver personalized Bristol community service information
• Remember your conversation history and preferences
• Maintain and improve AI character personalities

3.2 Service Improvement

• Analyze usage patterns to enhance features
• Train and improve AI models (in anonymized form)
• Identify and fix technical issues
• Develop new features based on user needs

3.3 Communication

• Send service updates and announcements
• Respond to your inquiries and support requests
• Send notifications about Bristol community events (if you opt-in)
• Provide information about API usage and billing

3.4 Safety and Security

• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations
• Enforce our Terms of Service
• Protect user safety and wellbeing

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers who help us operate our service:

• Cloud Hosting: Data storage and server infrastructure
• Analytics Providers: App usage and performance monitoring
• Payment Processors: For API subscription billing
• Email Services: To send transactional emails

All service providers are contractually bound to protect your data and may only use it for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of Nyata, our users, or the public
• Prevent fraud, security issues, or technical problems

4.3 Business Transfers

If Nyata Ltd is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict access controls limit who can view your data
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff are trained on data protection principles
• Incident Response: Procedures to address potential data breaches

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

6.1 Right of Access

You can request a copy of the personal data we hold about you.

6.2 Right to Rectification

You can ask us to correct inaccurate or incomplete data.

6.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data in certain circumstances.

6.4 Right to Restriction of Processing

You can request that we limit how we use your data.

6.5 Right to Data Portability

You can receive your data in a structured, commonly used format and transmit it to another service.

6.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing.

6.7 Rights Related to Automated Decision-Making

While we use AI to provide responses, you have the right to request human review of automated decisions that significantly affect you.

6.8 Right to Complain

If you're not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for 90 days after deletion
• Chat History: Retained while your account is active; you can delete conversations at any time
• Usage Analytics: Aggregated and anonymized data may be retained indefinitely
• Legal Requirements: Some data may be retained longer to comply with legal obligations

8. Children's Privacy

Nyata AI is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we discover that we have collected data from a child under 13, we will delete it immediately.

For users aged 13-18, we recommend parental guidance when using the app. Parents or guardians can contact us to review, delete, or limit collection of their child's information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will notify you via email or in-app notification
• Your continued use of Nyata AI after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: