Privacy Policy for Immutan

Last Updated: March 14, 2026

Immutan ("we," "our," or "us") respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Immutan mobile application (the "App").

1. Information We Collect

We collect several types of information from and about users of our App, including:

• Account Information: If you choose to create an account, we collect your email address and password. If you use third-party logins (Apple or Google), we receive your email address and basic profile information provided by those services.
• Device Information & Analytics: We collect your device's unique hardware identifier (Device ID), operating system type, and basic app usage statistics to ensure the App functions correctly.
• User-Submitted Content: We process the specific text messages, URLs, or content that you manually paste or type into the App for security verification.
• Subscription Data: We track your subscription status (Free vs. Premium). Payment details are handled securely by Apple and Google; we do not collect or store your credit card information.
• Location Data: We do NOT request or track your precise GPS location. We may log standard internet protocol (IP) addresses for basic security and abuse prevention.

2. How We Use Your Information

We use the information we collect about you or that you provide to us:

• To Provide the Service: The text you submit is temporarily sent to third-party AI providers (like OpenAI) for real-time analysis. We do NOT permanently store the full content of the messages you verify. Only metadata (e.g., risk score, verification count, timestamp) is retained to provide you with your verification history.
• To Enforce Usage Limits: We use your Device ID to track the number of free verifications you have performed, preventing abuse of our free tier.
• To Manage Subscriptions: To sync your premium status across your devices and authenticate your account.
• We Do Not Sell Your Data: We explicitly do not sell your personal information, email address, or submitted messages to data brokers or advertising companies.

3. Third-Party Service Providers

Immutan relies on trusted third-party services to function. By using the App, you acknowledge that your data may be processed by:

• OpenAI (or similar AI providers): The text and links you submit are sent to third-party AI APIs for analysis and are subject to their respective privacy policies. Please do not submit text containing highly sensitive personal information (like passwords or social security numbers).
• Supabase: We use Supabase to securely store your account data, authentication credentials, and user profiles.
• RevenueCat: We use RevenueCat to process and manage App Store and Google Play subscriptions.
• Apple & Google: For processing payments and facilitating third-party authentication.

4. Data Retention and Account Deletion

You have the right to request the deletion of your personal data at any time.

• Account Deletion: You can delete your account directly within the App's Settings menu. When you delete your account, we permanently delete your email address, profile, and authentication records from our active database.
• Retained Anonymized Data: To prevent abuse of our free limits, we retain an anonymized, non-identifiable record of your Device ID and its historical usage count. This data cannot be used to identify you personally.

5. Your Privacy Rights (GDPR & Global)

Depending on your location, including if you are in the European Economic Area (EEA) or the UK, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request we correct inaccurate data.
• Right to Deletion: Request deletion of your account and data (available instantly via App Settings).
• Right to Withdraw Consent: Stop using the App and delete your account at any time.

To exercise these rights, please contact us using the email provided below. If you are located in the EEA, you have the right to lodge a complaint with your local data protection authority.

6. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information:

• Right to Know: What personal information we collect and how we use it.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out: We do not sell personal information, so there is no need to opt out of data sales.

7. Data Security

We have implemented reasonable measures designed to secure your personal information from unauthorized access. However, the transmission of information via the internet and mobile platforms is never completely secure. We cannot guarantee the absolute security of your personal information.

8. Children's Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13 without parental consent, we will delete that information.

9. Changes to Our Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this document.

10. Contact Information

To ask questions about this Privacy Policy or exercise your privacy rights, please contact us at:
Email: contact.immutan@gmail.com