Privacy Policy

PrivateGPT (privategptchat.com) is operated by TrueLabel Inc., a Wyoming corporation (“we”, “us”). This policy explains what we collect when you use PrivateGPT, why, and the choices you have. The short version: we don’t store your conversations on our servers, we don’t sell your data, and we don’t use your chats to train models.

What we collect

• Account details. You can try PrivateGPT as a guest: we create an anonymous account ID for your browser, with no name or email. When you sign in we receive your email address and a user ID from our sign-in provider (Google Firebase Authentication). If you use Google sign-in, Google shares your email address and basic profile with us.
• Usage counts. To enforce daily limits we store how many messages your account sent each day. For guests we also count messages per IP address, stored only as a scrambled (salted hash) value, not the address itself. These counts contain no message content and are deleted automatically after 30 days.
• Product analytics. We record a small set of events, such as “home page viewed”, “signed in” and “message sent” (with the model name), using Mixpanel. Events are sent from our servers with a scrambled (hashed) ID instead of your email or user ID, without your IP address, and never include what you write. We do not use advertising pixels, session recording, or tracking cookies.
• Server logs. Our hosting provider (Google Cloud) keeps standard request logs, such as IP address, browser type, time and the page requested, for security and debugging. These logs do not contain your messages.

Your conversations

When you send a message, it goes from your browser to our servers and then to our AI provider, Together AI, which runs the model and returns the reply. We pass your messages through to generate a reply and do not save them on our servers or in our logs.

To stop misuse, each message is also checked automatically by an AI model at Together AI before it is answered, for requests involving mass-casualty weapons, sexual content involving minors, or violence against people. The check happens in memory and the message is not stored; we only count how many messages were blocked, by category, with no message content. Blocked messages get a refusal instead of an answer.

Together AI processes your messages as our service provider, under its own terms and privacy policy, and may keep prompts and replies for a limited time under its retention settings.

Web search is part of PrivateGPT Plus. On Plus, our servers may send a search query based on your message to search engines (through our own search server) or fetch the web page you linked, so the AI can answer with current information. Those services receive the query or page request, but not your account details.

Chat history on your device

Chat history is off by default. If you turn on “Save chats on this device”, your conversations are stored only in your browser’s local storage. We cannot see or recover them. Your app-lock PIN and wipe codes are stored only in your browser, as salted hashes. Clearing your browser data, using a wipe code, or deleting your account removes them.

How we use information

• To provide PrivateGPT, keep your account signed in, and enforce plan limits.
• To prevent abuse, keep the service secure, and fix problems.
• To understand, in aggregate, how the product is used so we can improve it.
• To contact you about your account or important changes to the service.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

Who we share it with

We share information only with service providers that help us run PrivateGPT, under contracts that limit their use of it:

• Google (Firebase Authentication and Google Cloud hosting and storage)
• Together AI (runs the AI models)
• Mixpanel (product analytics, as described above)
• Search engines and websites, only as needed to answer a question that requires current information

We may also disclose information if required by law or to protect the rights, safety and security of our users, the public, or us. If we are involved in a merger or acquisition, information may transfer as part of that deal, subject to this policy.

Retention

We keep your account details while your account exists. Daily usage counts are deleted after 30 days. When you delete your account, we delete your account details; server logs and analytics events expire on their providers’ normal schedules.

Your choices and rights

• Turn chat history on or off at any time, and erase everything on a device from the app lock settings.
• Delete your account from the app’s sidebar (Delete account).
• Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to object to or limit certain processing. Email us at support@privategptchat.com and we’ll respond within the time the law requires. We will not treat you differently for exercising these rights.

Security

We use encryption in transit (HTTPS), verified sign-in for every request, and access controls on our systems. No system is perfectly secure, so we can’t guarantee absolute security.

Children

PrivateGPT is not for anyone under 18, and we do not knowingly collect information from children.

International users

We are based in the United States, and our providers may process information in the United States and other countries.

Changes

If we change this policy, we’ll update the date above and, for material changes, tell you in the app or by email before they take effect.

Contact

TrueLabel Inc.
support@privategptchat.com