Privacy Policy: Aicott (iOS)

---

Effective date: March 10, 2026

Aicott (“we,” “our,” “us”) provides an AI companion app for iPhone and Apple Watch. This Privacy Policy explains what data the app processes, how it is used, and your choices.

By using Aicott, you agree to this policy.

1. Data We Process

We process the following categories of data:

1. Account and authentication data
   • Sign in with Apple credential (through Firebase Authentication).
   • Firebase user/account identifiers and authentication tokens.
   • Apple user identifier stored in Keychain for sign-in state.

1. AI conversation data
   • Messages you send and AI replies.
   • AI companion profile/settings, memory items, relationship state, diary text.
   • Optional avatar image/video file references.

1. Voice and speech data
   • Speech recognition input (for transcription features).
   • Text submitted for text-to-speech generation.
   • Voice provider and voice ID selection.

1. Connected provider credentials
   • API keys you enter for Nomi and/or Kindroid.
   • Stored in iOS Keychain.

1. App settings and consent data
   • Preferences such as voice mode, retention settings, and consent toggles.
   • Stored locally in app storage.

1. Subscription and storefront data
   • StoreKit subscription entitlement status.
   • Storefront country code (used for regional subscription/compliance logic).

1. Basic analytics/diagnostics
   • Firebase SDKs are included; they may collect standard app/device telemetry.
   • The app currently does not log custom analytics events in code.

2. Where Data Is Processed

1. On your device
   • Conversation history and related app data are stored locally (SwiftData/files).
   • Key secrets (for example, API keys) are stored in Keychain.
   • iPhone/Watch sync uses Apple WatchConnectivity (device-to-device transfer).

1. Third-party services used by app features
   • Firebase Authentication for sign-in/session auth.
   • Nomi API when you use Nomi chat/avatar features with your API key.
   • Kindroid API when you use Kindroid chat features with your API key.
   • Google Cloud Functions endpoints used by Aicott for TTS voice list/generation flows.
   • TTS providers behind those endpoints (OpenAI, Hume, ElevenLabs), depending on your selected voice provider.
   • Apple speech assets/services may be used for speech model download/recognition support.

3. How We Use Data

We use data to:

1. Provide sign-in and account security.
2. Send your prompts to selected AI companion providers and return responses.
3. Generate and play speech/audio responses.
4. Sync your data between iPhone and Apple Watch (when enabled).
5. Save your preferences and improve app reliability.
6. Verify subscription access.

4. Consent-Based Controls

Aicott includes explicit consent controls for:

1. AI interaction,
2. cloud processing,
3. voice processing,
4. cross-device sync.

If a consent is turned off, related features are blocked in the app.

5. Retention and Deletion

1. Local retention
   • Chat history retention is configurable in-app.
   • Data is primarily retained on-device until you delete it.

1. In-app data controls
   • Export AI companion data (JSON).
   • Import AI companion data.
   • Delete All removes local AI companion data and related local files/caches.

1. Account deletion
   • You can delete your signed-in Firebase account in-app.
   • External provider data (for example Nomi/Kindroid accounts) must be deleted directly with those providers.

6. Data Sharing

We do not sell personal information.
We share data only as needed to operate requested features (for example: authentication, AI response generation, TTS processing, subscription verification, and device sync).

7. Children

Aicott is not intended for children under 18 (or higher age where required by local law). Do not use the app if you are below the applicable age.

8. Security

We use platform security controls (for example Keychain, authenticated service calls). No system is 100% secure, but we apply reasonable safeguards.

9. International Processing

Service providers may process data in countries outside your own. By using cloud-based features, you understand data may be transferred internationally.

10. Changes to This Policy

We may update this policy from time to time. We will post the updated version with a new effective date.

11. Contact

If you have questions or concerns about this Privacy Policy, please contact us at:
ken.harada@aicrest.ai.