Your data, in your file.

01Overview — the short version.

Real talk, no dark patterns:

• We don't sell your personal information. Ever. Not to advertisers, not to data brokers, not to anyone.
• We don't use your chats, photos, or saved items to train AI models. Your conversations are yours.
• Connected services use standard OAuth. We never see your Spotify, Google, or other passwords.
• Conversations, photos, and saved facts are encrypted at rest and transmitted over TLS.
• You can delete your account and all associated data in one tap from inside the app.

02Information we collect.

We collect only what we need to make the four agents useful for you. The categories below describe what is collected, how it's collected, and why.

03How we use it.

We use the information described above only for these purposes:

• Deliver the product. Run the four agents, route your messages, fetch live flights and hotels, surface studios near you, generate playlists, and remember your preferences across conversations.
• Personalize results. Use the facts you've shared (your color season, your travel budget, your dietary notes) so answers actually fit you. You can view and edit every fact on your "About You" screen.
• Operate connected services. Use scoped OAuth tokens to read or write to services you've connected — e.g., to create a Spotify playlist or check your Google Calendar availability.
• Keep the app secure and reliable. Detect abuse, prevent fraud, debug crashes, and improve performance.
• Communicate with you. Send transactional messages (sign-in, billing, security), respond to support, and — only with your consent — send product updates.
• Comply with the law. Meet our legal, regulatory, and tax obligations.

04Legal basis (EU / UK users).

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under the following lawful bases:

• Performance of a contract — to provide the Staitmint service you've signed up for.
• Your consent — for optional features such as connecting third‑party services, processing photos, or receiving marketing email. You may withdraw consent at any time.
• Legitimate interests — to keep the service secure, prevent abuse, and improve performance, balanced against your rights.
• Legal obligation — to comply with applicable laws and lawful requests.

05Third‑party services.

To return real results — actual flights, actual playlists, actual studios — Staitmint integrates with the services below. Each is governed by its own privacy policy. We share with each provider only the minimum data needed to deliver the feature you've requested.

You can disconnect any third‑party service from Settings → Connections at any time. Disconnecting revokes our access and removes related cached data.

06iOS permissions & tracking.

Staitmint requests system permissions only when a feature actually needs them, and only the minimum scope to deliver that feature. You may grant, deny, or revoke each permission anytime in iOS Settings → Staitmint. Denying a permission disables the specific feature that uses it but does not otherwise limit the app.

07Subscriptions & billing.

Staitmint offers a free tier and an optional Staitmint Pro subscription. Subscriptions are sold and processed by Apple (App Store) or Google (Play Store) — Staitmint never sees, stores, or transmits your full payment card details, billing address, or CVV.

• Auto‑renewal. Subscriptions renew automatically at the end of each billing period at the then‑current price unless auto‑renewal is turned off at least 24 hours before the renewal date in your App Store or Play Store account settings.
• Cancellation. Cancel anytime in your App Store or Play Store subscription settings. Your subscription remains active until the end of the paid period; we do not pro‑rate refunds for unused time, and we do not retain billing‑method access after cancellation.
• Free trials. If a free trial is offered, it converts to a paid subscription at the end of the trial unless you cancel before the trial ends. The cancellation deadline is shown at purchase.
• Refunds. All refund decisions are handled by Apple or Google under their respective policies. Staitmint can direct you to the right help article but cannot issue store refunds directly.
• What Staitmint receives. A subscription receipt and an entitlement status (e.g., active, in trial, expired, billing retry). We do not receive the card number, expiry date, CVV, billing address, or any other payment instrument.
• Price or term changes. We will notify you in‑app and by email before any price increase or material change to subscription terms takes effect, and you may cancel before the change applies.

08Sharing & disclosure.

We share personal information only in these specific cases:

• With service providers who help us operate Staitmint, under written data‑protection agreements that prohibit using your data for any other purpose.
• With services you've connected, but only as needed to fulfill the action you've asked for (e.g., creating a playlist in your Spotify account).
• For legal reasons — to comply with applicable law, valid legal process, or enforceable government request, and to protect the rights, property, or safety of Staitmint, our users, or the public.
• In a business transfer — if Staitmint is involved in a merger, acquisition, or asset sale, your data may be transferred subject to the protections in this policy. We will notify you of any change in ownership or material change in how your data is handled.

09AI & model training.

Staitmint uses large language models and vision models to power the four agents. Here's how that works in plain language:

• Your conversations and photos are not used to train our models or any third‑party model. We contractually require our AI providers not to retain or train on your inputs.
• Personalization is not training. The facts the assistant remembers about you (your color season, your travel preferences) are stored in your account so future answers fit you. They are not used to modify any model.
• Aggregate, anonymized analytics (e.g., "what percent of users open the Travel agent in a session") may be used to improve the product. These cannot identify you.

10Data retention.

We keep your personal information only as long as we need it for the purposes described above:

• Account & conversation data — kept while your account is active. You may delete individual chats, individual saved facts, or your entire account at any time from inside the app.
• Photos & uploads — kept while saved in your library. Deleted items are permanently removed from active systems within 30 days.
• Connected‑service tokens — held until you disconnect the service, then revoked and deleted.
• Diagnostics & logs — retained for up to 90 days, then deleted or fully anonymized.
• Billing records — retained as required by tax and accounting law (typically up to 7 years).
• Backups — deleted data may persist in encrypted backups for up to 35 days before being fully purged.

11Account & data deletion.

You can delete your Staitmint account and all associated personal data from inside the app at any time. This satisfies Apple's in‑app account deletion requirement for App Store apps.

When you delete your account, the following happens:

• Conversations, saved facts, photos, wardrobe items, and reminders are queued for permanent deletion.
• OAuth tokens for every connected service are revoked immediately. The connected providers (Spotify, Google, etc.) are signaled to drop our access.
• Your account is deactivated immediately. You can no longer sign in, and your email is released for future re‑registration after a brief cooling‑off window.
• Personal data is purged from active systems within 30 days. Encrypted backups containing the data are rotated out within 35 days.
• Aggregated, fully anonymized analytics (which cannot identify you) and records we are legally required to keep (e.g., billing receipts for tax purposes) may be retained as described in Section 10.

Prefer not to delete from the app? Email privacy@staitmint.io from the address on your account. We will verify your identity and complete deletion within 30 days, in line with applicable law.

12Security.

We protect your data with the following safeguards:

• Encryption in transit using TLS 1.2 or higher for every connection between the app and our servers.
• Encryption at rest for conversations, photos, saved items, and OAuth tokens.
• Scoped OAuth for every connected service — we never see or store your passwords for Spotify, Google, or other providers.
• Least‑privilege access — only a small number of trained personnel can access production systems, and access is logged.
• Regular reviews — periodic security audits, dependency scanning, and penetration testing.

No method of transmission or storage is 100% secure. If we become aware of a security incident affecting your data, we will notify you and the appropriate regulators in accordance with applicable law.

13Your rights — always.

Depending on where you live, you have the rights below. Staitmint honors these for all users regardless of jurisdiction.

To exercise any right, use the in‑app controls or email privacy@staitmint.io. We will respond within 30 days (or the period required by applicable law).

14Apple App Store privacy disclosures.

Apple displays a Privacy card on every App Store listing that describes what data the app collects and whether it is used to track you. The categories below match exactly what Staitmint has submitted to Apple. If you ever notice a discrepancy between Apple's card and what is stated here, this Privacy Policy controls — please email privacy@staitmint.io and we will reconcile within 30 days.

15Children.

Staitmint is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided personal information to us, please contact privacy@staitmint.io and we will promptly delete it.

16International transfers.

Staitmint is operated from the United States. If you use the service from outside the U.S., your information will be transferred to, stored in, and processed in the U.S. and in other countries where our service providers operate. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses and additional safeguards required by applicable law.

17Changes to this policy.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app and update the "Effective" date at the top of this page. Continued use of Staitmint after a change indicates your acceptance of the updated policy. A history of changes is available on request.

18Contact us.

Questions, requests, or feedback about privacy at Staitmint? We'd love to hear from you.