Privacy Policy

ResoPod ("we," "our," or "us") is operated by Zhewei Liang, an individual developer based in Colorado, United States. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ResoPod mobile application and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following types of information to provide and improve the Service:

Account Information

• Name and email address (provided during sign-up via Google OAuth or Apple Sign In)

User Content

• Chat messages and conversations with the AI assistant
• Voice data (audio recordings and transcriptions)
• Calendar data (events and schedules you choose to connect)

Device & Usage Information

• Device type, operating system, and version
• App usage patterns and interaction data
• Crash reports and performance diagnostics

Push Notification Data

• Push notification token (device token used to deliver service notifications to your device)

Purchase Information

• Subscription status and purchase history (managed through RevenueCat)
• We do not collect or store your payment card information; all payments are processed by Apple through the App Store

2. How We Use Your Information

We use the information we collect for the following purposes:

• App Functionality: To provide core features including AI-powered conversations, voice interactions, and calendar integration.
• AI Processing: Your chat messages and voice data are sent to Google Gemini for AI processing to generate responses and insights.
• Personalization: To tailor the experience to your preferences, communication style, and usage patterns over time.
• Service Improvement: To analyze usage trends, diagnose technical issues, and improve the overall quality of the Service.
• Quality Monitoring: To monitor AI response quality and system performance through our observability tools.
• Subscription Management: To manage your subscription status, process purchases, and provide access to premium features.
• Communications: To send you important service-related notifications and updates via push notifications.

3. Third-Party Services

We share information with the following third-party services as necessary to operate the Service:

Google Gemini

Chat messages and voice transcriptions are sent to Google Gemini for AI processing. We use the Google Gemini API, which operates under Google's API Terms of Service. Under these terms, data sent through the API is not used by Google to train its models. Your data is transmitted to and processed on servers located in the United States. Google's general data practices are governed by Google's Privacy Policy.

RevenueCat

We use RevenueCat to manage in-app subscriptions and purchases. RevenueCat may collect the following data: purchase history, subscription status, device identifiers, and an anonymous app user ID. RevenueCat's use of this data is governed by RevenueCat's Privacy Policy.

Langfuse

We use Langfuse Cloud for AI call monitoring and quality assurance. Chat content (prompts and AI responses) may be logged to Langfuse for the purpose of monitoring service quality, debugging issues, and improving AI response accuracy. Langfuse Cloud stores data on servers located in the European Union (EU). Langfuse's data practices are governed by Langfuse's Privacy Policy.

Expo

We use Expo's development platform, which includes crash reporting, performance monitoring, and over-the-air update services. Expo may collect device information, crash logs, and performance data. Expo's data practices are governed by Expo's Privacy Policy.

Google OAuth

If you sign in with Google, we receive your name and email address from Google to create your account. We do not receive or store your Google password.

Apple Sign In

If you sign in with Apple, we receive your name and email address (or an Apple relay email) to create your account. We do not receive or store your Apple password.

4. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Specifically:

• United States: Our servers and primary data processing, as well as Google Gemini AI processing, are located in the United States.
• European Union: AI monitoring data processed through Langfuse Cloud is stored in the EU.

By using the Service, you consent to the transfer of your information to these locations. We take reasonable measures to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

5. Data Retention & Deletion

We retain your data for as long as your account is active and as needed to provide the Service.

• You can delete your account at any time from within the app settings.
• When you delete your account, all associated data -- including your profile, chat history, voice recordings, and calendar data -- is permanently removed from our servers.
• Deletion is irreversible and typically completed within 30 days of your request.
• Some data may be retained in third-party systems (e.g., Langfuse logs, RevenueCat purchase records) in accordance with their respective retention policies.

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Deletion: You can request deletion of your account and all associated data at any time.
• Export: You can request an export of your data in a portable format.
• Correction: You can request correction of any inaccurate personal data.
• Opt-Out: You can opt out of targeted advertising and data sales (see state-specific rights below).

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 45 days.

7. State Privacy Rights

Colorado Privacy Act (CPA)

If you are a Colorado resident, you have the following rights under the Colorado Privacy Act:

• Right to Access: You may request confirmation of whether we are processing your personal data and access to such data.
• Right to Correction: You may request correction of inaccuracies in your personal data.
• Right to Deletion: You may request deletion of your personal data.
• Right to Data Portability: You may request a copy of your personal data in a portable, readily usable format.
• Right to Opt Out: You may opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

We do not sell your personal data. We do not use your personal data for targeted advertising or profiling that produces legal or similarly significant effects.

To exercise your rights, contact us at [email protected]. If we decline your request, you may appeal by contacting us at the same email address. If you are not satisfied with our response to your appeal, you may contact the Colorado Attorney General.

California Consumer Privacy Act (CCPA)

If you are a California resident, you have the following additional rights under the CCPA:

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, as well as the categories of sources, purposes of collection, and third parties with whom we share it.
• Right to Delete: You may request that we delete the personal information we have collected from you.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Do Not Sell or Share My Personal Information: We do not sell or share your personal information as defined under the CCPA. We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age.

8. Data Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: