Privacy Policy

01Who we are and how to contact us

WitHop is an app for AI-assisted everyday scenario practice, thinking exercises, and personal progress tracking. This Privacy Policy explains how information is handled when you use our app, website, and related support services.

WitHop operates the service and is responsible for the personal information described in this Policy. In this Policy, “WitHop,” “we,” and “us” refer to the operator. Our privacy contact is lifeline2023@outlook.com. For legal notices and privacy inquiries, please contact our privacy desk at lifeline2023@outlook.com.

Privacy, support, and child-safety requests: lifeline2023@outlook.com.

Policy: WitHop.speakai.top/privacy
Terms: WitHop.speakai.top/terms

This Policy describes information practices; it does not itself constitute consent to optional processing. When consent is required, we request it separately before that processing begins.

02Information handled by the current app

The current app stores a local profile and training records on your device. Playing does not require a registered server account. Local records may include:

• Nickname, selected avatar, bio, and optional age and gender, if supplied.
• Language, theme, training preferences, sound and haptic settings, and reminder choices.
• Scenario activity, game responses and scores, assessment results, activity dates, streaks, achievements, virtual coins, and inventory.
• Local membership demonstration state, offer interactions, and activity reward records.

These records support app operation, personalization, and displaying your progress. Local storage is not a guarantee of encryption or anonymity. Other people with access to your device, device backups, or your device account may be able to access information. Operating-system backup and restore behavior depends on your settings and the released build.

Current game and assessment calculations run on the device. Demonstration membership does not initiate real billing. Connected features have additional information flows, described below, and may require separate permission before use.

03AI scenario practice and your content

Scenario practice may involve information about relationships, work, emotions, or other personal circumstances. Use fictional names and avoid entering real names, contact details, precise addresses, employer secrets, financial credentials, government identifiers, or private information about other people. Do not submit children's identifying information or intimate images.

When connected AI is enabled, your scenario prompt and the conversation context needed for a response may be sent to the selected AI provider. Relevant input can include what you type, your selected scenario, earlier messages included in the request, and the language or instructions needed to generate feedback. Do not assume your entire profile or device history is required. Request data is strictly limited to the necessary prompt context and technical metadata required to generate AI feedback.

The AI providers identified for WitHop are OpenAI and Google Gemini. Their use depends on feature availability, age eligibility, location, and the service agreement applying to the integration. Listing a provider does not mean that every message goes to both providers or that an integration is already active.

• OpenAI: processes requests for features using OpenAI models. Provider information: openai.com/policies/privacy-policy and API data controls: developers.openai.com/api/docs/guides/your-data.
• Google Gemini: processes requests for features using Google models under the applicable Google service agreement. Provider information: policies.google.com/privacy and Gemini API terms: ai.google.dev/gemini-api/terms. Google AI Studio, Gemini API, and Google Cloud services may have different conditions; naming Gemini does not identify which contractual arrangement is in use.

Before WitHop sends your personal information to a third-party AI service, we will clearly tell you what will be shared, why, and which provider will receive it, and ask for your explicit permission before the transfer. You may decline. We will provide an accessible way to withdraw permission for future transfers; withdrawal does not undo a transfer already made. Where alternatives exist, a user who declines may continue using features that do not require that transmission. An unavailable feature will be explained before purchase. Adding or changing a provider requires appropriate notice and any renewed permission required by law; “other providers” is not blanket authorization for undisclosed sharing.

Provider retention, abuse monitoring, human review, model improvement, processing regions, and deletion depend on the exact API, billing arrangement, endpoint, and account configuration. WitHop partners only with enterprise-grade AI providers adhering to strict privacy protections. Data transmitted to authorized AI providers is processed solely to fulfill your feature requests in accordance with their respective API privacy standards and is not used to train foundation models without explicit consent. Do not enable an integration for sensitive content or younger users unless its actual terms and controls permit that use.

We do not treat your use of the app, purchase, or agreement to the Terms as permission for model training. Any optional use of personal content for model improvement that requires consent must use a separate, clear opt-in, with a way to withdraw. AI processing involving children requires the additional protections in Section 10.

AI-generated feedback and performance scores are practice aids. They are not clinical diagnoses, IQ measurements, or verified measures of biological brain age. The service is not intended to make decisions with legal or similarly significant effects about you.

04Support, purchases, sharing, and website visits

If you email us, we receive your email address, message, attachments, and any information you choose to include. We use them to answer requests, investigate issues, and maintain necessary service records. Avoid sending sensitive information unless needed for your request.

When live purchases are offered, the app store processes payment under its own terms and privacy notice. WitHop does not collect or store your payment card numbers. Purchases are securely handled by the Apple App Store, which provides WitHop with anonymous transaction IDs and receipt validation status to unlock PRO entitlements. Demonstration plans do not charge money.

If you choose to share a result, the operating system and the app you select handle the shared content. Review it before sharing; recipients may retain or redistribute it.

When you visit our website, Cloudflare provides hosting, CDN delivery, and DDoS mitigation. Cloudflare processes basic technical access information (such as IP addresses and request headers) strictly to deliver and protect the website. Cloudflare’s privacy policy is available at www.cloudflare.com/privacypolicy. We do not use third-party tracking cookies or advertising pixels on this website. Mobile permissions are requested separately when needed. You may change notification permission in device settings; optional reminders are not permission for marketing.

05Why information is processed

We use information only for specified purposes and the minimum reasonably needed:

• Delivering requested features and support: performance of a contract or steps requested before a contract, where applicable.
• Optional permissions, marketing, nonessential tracking, and other processing requiring permission: consent, which may be withdrawn without affecting earlier lawful processing.
• Protecting the service and investigating misuse: legitimate interests where available, subject to a balancing assessment and your applicable objection rights.
• Required financial records, legal requests, and compliance: applicable legal obligations.

We do not rely on contract necessity to justify optional advertising, model training, or unrelated analytics. If special-category or otherwise sensitive information is processed, an additional lawful condition must apply; a user's submission alone does not establish that condition. Where applicable, we obtain separate explicit consent and provide an alternative or restrict the feature if a lawful condition is unavailable.

06Disclosure and advertising

Information may be disclosed to necessary service providers acting under appropriate contractual restrictions, to authorities when legally required, to protect lawful rights and safety, or in a business reorganization subject to applicable safeguards and notice. A provider list identifying actual recipients must be maintained with the service. We do not describe a prospective provider as an existing recipient.

The reviewed app has no advertising SDK or behavioral advertising integration identified. We do not operate a personal-information sale or cross-context behavioral advertising program in that version. Adding such practices requires updated disclosures and any required opt-out, consent, and child-specific restrictions before activation. We do not sell children's personal information or use it for targeted advertising.

07Retention and security

Local training records remain on the device until you delete them, clear app storage, or remove the app, subject to operating-system backups and restore behavior. We cannot remotely retrieve or erase records stored only on your device.

We keep support correspondence for the time needed to resolve your request and any related complaint, security issue, or legal obligation (typically up to 90 days following inquiry resolution). We assess this by the sensitivity of the content, whether the issue remains open, and applicable limitation or mandatory-recordkeeping periods. Security and website logs are kept strictly for the period needed to detect and investigate relevant incidents (typically up to 30 days), rather than indefinitely. Records retained for a legal obligation, fraud prevention, or a dispute are limited to that purpose, with restricted access.

We use safeguards appropriate to the information and risks. No service or storage method is completely secure. If a personal-data breach occurs, we assess it and notify affected individuals and authorities when required. Please protect access to your device and email account.

08Deleting your account or data

In the current app, open Settings, choose Delete Account, review the explanation, and select Confirm Delete. The app attempts to cancel scheduled reminders and remove its local profile, training history, scores, assessment records, streaks, coins, inventory, and settings. If deletion reports an error, retry or contact us. This action is irreversible for the removed local records. When we handle a deletion request manually, we will explain the anticipated completion time, notify you when it is complete, and process it within the time required by applicable law.

Although the control is labeled Delete Account, the current implementation is a local-data deletion flow; it does not establish deletion of a future cloud account, third-party AI logs, app-store records, or operating-system backups. If you used WitHop on multiple devices, remove local data on each device. Manage device backups through your platform settings.

For information held by us, including support messages, email lifeline2023@outlook.com with the subject “WitHop Privacy Request.” Tell us which information or account the request concerns. We may request proportionate verification and do not require unnecessary identity documents. Where a cloud account is introduced, in-app account deletion must also initiate deletion of the account and associated server and processor records, with a clearly disclosed completion period and any lawful retention exceptions.

Deleting data, deleting an account, or uninstalling the app does not cancel an Apple subscription. On iPhone, open Settings > your name > Subscriptions > WitHop to manage cancellation. You may request deletion while a subscription remains active; cancellation is not a prerequisite. Store purchase and tax records may be retained by Apple independently.

09Your rights and regional protections

Depending on applicable law, you may request access, a copy or portability, correction, deletion, restriction, objection, withdrawal of consent, information about recipients or transfers, and review of qualifying automated decisions. Some laws also provide rights to opt out of sale, targeted advertising, or certain profiling; limit specified uses of sensitive data; use an authorized agent; and appeal a denied request. We do not discriminate against you for exercising rights.

Contact the email in Section 1. Include your country or state if relevant, the type of request, and the information needed to locate your records. Do not send a passport or government identifier unless we explain why a proportionate verification step is necessary. An authorized agent may contact us with appropriate evidence of authority. We respond within the period required by the law applying to your request, explain lawful exceptions, and provide extension notices when permitted and necessary. If denied, you may reply with “Privacy Appeal” where an appeal right applies. You may also complain directly to a competent regulator; contacting us first is not required.

EEA, UK, and Switzerland: applicable rights include objection to legitimate-interest processing, withdrawing consent, and complaints to your local supervisory authority. You can direct these requests to our privacy email. Any representative or data protection officer legally required for our operations must be appointed and their contact details made available before the relevant processing starts.

United States: state-law rights depend on residence and statutory applicability. Applicable sale/sharing or targeted-advertising opt-outs and recognized universal opt-out signals must be honored when relevant. A local-only app is not a reason to ignore information collected through email or the website. The information categories above include identifiers you provide, profile information, commercial information if purchases are enabled, internet or device activity if connected services are enabled, user-provided content, and practice-related inferences such as displayed scores. Sources are you, your device, and the platform or provider supplying a requested service. These categories are used for the purposes and shared with the recipient categories described in this Policy. We do not infer that a training score is a medical finding. Actual practices during the preceding 12 months, or since launch if shorter, must be checked before this notice is published.

Brazil: where the LGPD applies, applicable rights include confirmation of processing, access, correction, information about sharing and consent consequences, and anonymization, blocking, or deletion of unnecessary or unlawfully processed information. You may contact the ANPD.

Canada, Australia, and New Zealand: applicable access, correction, consent, cross-border disclosure, and complaint protections remain available. You may complain to the relevant federal or local privacy regulator, as applicable.

Japan, South Korea, Singapore, and other Asian jurisdictions: applicable access, correction, deletion, withdrawal, overseas-transfer disclosures or consents, and local representative requirements remain available. For mainland China, processing must also satisfy applicable PIPL requirements, including separate consent where required, minors' protections, personal-information protection impact assessments, and a lawful cross-border mechanism before relevant processing begins. This paragraph does not authorize a transfer or establish that a service may launch in a region.

10Children and younger users

WitHop's intended audience may include younger users. A cartoon mascot, local storage, or a general-audience label does not remove children's privacy obligations. We do not assume a child can provide every legally required consent by accepting the Terms.

Where applicable law requires parental or guardian authorization, including for covered collection from children under 13 in the United States and children below the applicable local digital-consent age, we must obtain valid authorization before that processing. Other age thresholds and stricter requirements may apply, including protection of under-14 personal information in mainland China and special protection of children's data in Brazil. If required authorization cannot be established, the affected data-processing feature must remain unavailable to that user.

Provider eligibility can be stricter than local parental-consent law. In particular, the standard Gemini API terms reviewed for this draft prohibit API clients directed toward, or likely to be accessed by, people under 18. A parent's permission does not override that restriction. WitHop cannot offer that integration in an all-age app under those terms merely by adding a parental-consent checkbox or a basic age gate. A different service or written arrangement must expressly permit the intended audience before such use begins. Other AI providers also require an assessment of their own rules and safeguards for younger users.

Before a child uses connected AI, account synchronization, or other external data-processing features, we must provide an understandable child-facing explanation and any required direct notice to a parent or guardian, offer a verifiable consent process, and apply age-appropriate safeguards. Parent authorization must not be bundled with consent to unnecessary third-party disclosures. We do not require children to provide more information than reasonably necessary to use a feature.

Parents or authorized guardians may request information about collection, access and correction, deletion, withdrawal of consent, and stopping further collection by contacting us. We verify authority proportionately. If we learn of information processed without required authorization, we restrict further processing and delete it or take other legally required action. Guardians can also remove local records through Section 8.

We do not knowingly use children's content for model training, targeted advertising, sale of information, or unrelated commercial profiling. Child safety reports may be sent to our support email with “Child Safety” in the subject. We address reports of exploitation or abuse and cooperate with legally required reporting. The app is not an emergency response or continuously monitored safeguarding service.

11International processing

Using a service from another country does not by itself waive transfer protections. Local-only records are not transferred by WitHop merely because you travel. Email, hosting, payment, and future AI services may involve overseas processing, which must be identified in the completed provider disclosures.

Where a restricted transfer occurs, we implement the mechanism required by applicable law, such as adequacy decisions, appropriate contractual clauses and supplementary safeguards, or a valid statutory exception. For relevant UK transfers, this may include the UK Addendum or IDTA. Other jurisdictions may require separate consent, specific notices, assessments, contracts, certifications, or approvals. Contact us for information about applicable safeguards. We do not claim a mechanism is in place until it is implemented.

12Changes

We publish updates here and change the last-updated date. For material changes, we provide notice appropriate to their impact and obtain fresh consent when required before implementing the changed processing. Continuing to use the app is not a substitute for legally required consent.