Last Updated: June 6, 2025

Table of Contents

• Scope and Consent
• Collection and Use of User Information
• Cookies, SDKs, and Similar Technologies
• Advertising
• Reasons for Collection, Processing, and Use of User Information
• Sharing, Transfer, Sale, and Disclosure of User Information
• Management of User Information
• Retention of User Information
• Security of User Information
• International Transfer of User Information
• Protection of Children's Personal Information
• Regional Privacy Disclosures
• Users' Rights to Remedies
• Contact Us

This Privacy Policy ("Policy") covers www.Chatmate.com , an online chat platform, along with its associated content, tools, features, and capabilities (collectively, the "Web Services") offered by www.Chatmate.com ("we," "our," or "us"). This Policy has been established by us in compliance with relevant laws to safeguard the personal information of users ("you" or "your").

Scope and Consent

This Policy explains the reasons for, methods of, and types of personal information we gather, utilize, retain, handle, share, transfer, and make public about you, as well as the information security safeguards we implement and the rights we uphold for your access, modification, removal, and oversight of your personal information. Kindly review this Policy alongside the Terms of Use for Web Services [Insert hyperlink]. Should you disagree with this Policy, please cease using the Web Services immediately.

We maintain the authority to update this Policy whenever necessary, and we recommend checking it periodically for the most current version. If you cannot agree to any revisions, you must discontinue use of the Web Services.

The Web Services are not intended for individuals under 14 years old, and our Terms of Service bar usage by anyone under 14, or under 16 if you reside in the European Economic Area.

For child users as defined under the Children's Online Privacy Protection Act ("COPPA"), we will only offer our Services after the child's parent or guardian has reviewed this Policy, fully understood and accepted all provisions, and provided the legally required consent. Unless permitted or mandated otherwise by law, we will refrain from gathering, employing, or revealing any personal information from a child user without the explicit approval of their parent or guardian. Parents have the ability to inspect the personal information we have collected about the child, request its deletion, and instruct us to halt further collection or utilization of the child's personal information.

By visiting and/or engaging with our Services, you affirm that you are either an adult who has reached the age of majority in your jurisdiction or a minor under the supervision of a parent or legal guardian, and that you possess the legal right, permission, capability, or authorization to access and/or use our Services while committing to follow this Policy.

This Policy constitutes an electronic agreement governed by applicable laws and does not necessitate any physical, electronic, or digital signature.

We urge you to examine this Policy thoroughly. By visiting or utilizing the Web Services, you indicate that you comprehend, accept, and consent to this Policy, including our gathering, utilization, handling, sharing, transfer, and disclosure of information you have supplied or may supply in the future, for the objectives outlined herein and in line with relevant laws.

Collection and Use of User Information

We will gather personal information (which may occasionally encompass sensitive personal data) from you for the aims described in this Policy, adhering to the guiding principles of lawfulness, fairness, necessity, and openness. If we intend to apply your personal information for purposes beyond those specified here or seek to collect it for alternative reasons, we will inform you appropriately and secure your advance consent where mandated by law. We will not solicit more details from you than what is reasonably essential.

In the United States, "Sensitive Personal Data" encompasses ten designated categories of information that U.S. companies might hold or acquire. These include various forms of financial, geolocation, and health-related data, to name a few. Furthermore, a U.S. company holding or acquiring such data on U.S. residents is deemed to possess sensitive personal data only if it (i) customizes or adapts products or services for specific groups, such as U.S. military personnel or federal agency staff with national security roles, (ii) gathers or retains such data on no fewer than one million people, or (iii) demonstrates a clear business intent to gather or retain such data on more than one million people, where that data forms an essential element of the company's core offerings or services. Genetic testing data is also covered under this definition, irrespective of alignment with (i), (ii), or (iii).

In the European Union, the following types of personal data qualify as "sensitive" and must adhere to distinct processing requirements: 1) data disclosing racial or ethnic background, political views, religious or philosophical convictions; 2) trade union affiliation; 3) genetic data, or biometric data used exclusively for uniquely identifying an individual; 4) data related to health; 5) data pertaining to an individual's sexual life or orientation.

We may align your personal information across various mobile devices you own to deliver a seamless experience.

Personal Information You Supply While Engaging with Web Services

We prioritize user privacy and pledge to defend it adequately in every key aspect. You consent to our collection of the following personal information concerning you:

• Details required to deliver, sustain, and enhance the Web Services;
• Information you voluntarily share; information obtained with your approval;
• Information sourced from alternative channels consistent with this Policy (for instance, third-party providers or social media sites).

"Personal Information" refers to any data, accurate or otherwise, relating to an identifiable individual that (a) enables identification directly from that data alone; or (b) allows identification when combined with other data we hold or are reasonably likely to hold, including details in our records that may be refreshed over time.

2.1.2 By creating an account on the Web Services, or by visiting or utilizing the Web Services (whether or not you have a user account), you agree to furnish us with the essential details outlined here, including your personal information.

The categories of personal information we might gather from users encompass, without limitation:

• Email address;
• Username;
• Uploaded images or entered text;
• Transaction and billing history;
• Device details;
• Activity logs;
• Accurate location data;
• Your contact list.

The sections below outline the ways in which your personal information could be necessary and obtained.

2.1.2.1 Registration

You have the option to sign in using your existing Google or Apple account. Upon doing so, a Web Services account will be generated automatically. Alternatively, you can set up a fresh account using your email address by completing our signup process.

Keep in mind that without registering, you might face restrictions on accessing select features of the Web Services, though you can still explore content and engage with the Chatting tools under limited conditions.

2.1.2.2 Profile Setup

For a more enjoyable interaction with the Web Services, you are welcome—but not obligated—to supply a username for setting up a profile. Even if you skip adding optional profile details, you'll continue to access core functionalities without issue.

2.1.2.3 Chatting

When engaging the "Chatting" function, you can start a conversation directly with a real person through our one-on-one chat service.

2.1.2.4 Online Transactions

We provide enhanced premium offerings that require payment via one of these two methods:

• Direct purchase on the website using a credit card; or
• Via a third-party processor (e.g., Apple Pay, Google Pay, and similar).

As part of processing your transaction, we could gather certain financial details (such as billing records or other transaction-related data).

2.1.2.5 Support Interactions

If you reach out to our support team, you may be asked to share account details for authentication purposes. Additionally, providing supporting materials (such as images or text descriptions) and contact details might be necessary. Lacking these, we may struggle to address your inquiry swiftly or in the manner you prefer.

2.1.2.6 Permissions Granted by Users

You will be prompted to authorize the following:

• Microphone: To enable voice-to-text input;
• Internet Access: To monitor Wi-Fi status and connectivity for improved cellular data performance;
• Camera: To snap photos or record videos in response to your queries;
• Identity: To connect and authenticate via a third-party account (e.g., Google or Apple);
• Contacts: To simplify checking if your connections are active on Web Services and facilitate in-app networking.

The Web Services may also seek access to flashlight and alarm wake lock features, which involve no collection of personal data.

2.2 Information Gathered Automatically from Users

To protect your account's integrity and enhance our support, we will acquire and apply the data generated from your Web Services interactions, limited strictly to what laws allow.

2.2.1 Device Details

During your use of the Web Services, we collect select device attributes, such as device ID, IMEI, OAID, MAC address, browser variety, carrier details and usage patterns, location indicators (like IP address), model type, OS version, IDFA (iOS-specific), IDFV (iOS-specific), and Android ID (Android-specific). These serve as unique device markers, which we may link with other personal data we obtain to ensure uniform service delivery.

2.2.2 Activity Logs

The Web Services will routinely log and store user session data, including browser specifications, navigation history, and network diagnostics. This helps us assess platform engagement, refine operations, and elevate service quality.

2.3 Information Sourced from External Providers

2.3.1 With your approval, we may obtain and process personal information about you from third-party sources. We handle such data per our agreements with those providers and governing regulations, and we advise reviewing their terms of service and privacy statements closely. Declining a third party's handling or transmission of your data could prevent full access to Web Services. That said, we never mandate sharing more personal details than what's reasonably needed for our offerings.

2.3.2 Upon signing into Web Services via a social media integration, you'll be directed to the external platform to authenticate or create an account there. Linking through an approved third-party account will tie its profile to a newly generated Web Services account. At present, we support sign-ins for Google and Apple users. Via this integration, we solely retrieve your username and profile image from the third-party profile. Note that while the provider might track elements like device model, system edition, generated identifiers, handset type, device label, ICCID (iOS-only), BSSID (iOS-only), MAC (iOS-only), IMSI (iOS-only), or IMEI (iOS-only) for their own needs, none of this is shared with or required by us.

WE EXERT NO CONTROL OVER AND DISCLAIM LIABILITY FOR THE MATERIALS, PRIVACY PRACTICES, OR OPERATIONS OF ANY EXTERNAL WEBSITES, APPS, OR THIRD-PARTY SERVICES. YOU ACKNOWLEDGE THAT WE BEAR NO RESPONSIBILITY FOR VIOLATIONS OF YOUR PERSONAL DATA PRIVACY OR ANY DAMAGES ARISING FROM YOUR ENGAGEMENT WITH SUCH THIRD-PARTY OFFERINGS.

2.3.3 For premium service payments routed through third parties, we will retrieve your username, profile image, and transaction records from them.

2.4 Situations Where User Approval Is Not Required

Under relevant legal frameworks, we may collect and process your personal information without prior consent in these scenarios, provided they apply:

• When fulfilling duties imposed by law;
• If it pertains directly to national defense, public order, health emergencies, or vital societal benefits;
• In matters tied to criminal probes, legal proceedings, judgments, or demands from authorities, including responses to judicial directives or summonses;
• To avert risks to a user's safety, assets, or key rights where gaining consent proves impractical, or if we suspect harm to our assets, other users, or third parties from such actions;
• Where you've already disclosed the information publicly;
• As needed to fulfill a contract we've entered at your behest;
• Sourced from lawful public outlets, like official reports, government publications, or similar;
• Essential for Web Services upkeep, such as diagnosing faults, detecting, and fixing platform-related problems; or
• Any other instances outlined or allowed by law.

Cookies, SDKs, and Similar Technologies

Cookies

A cookie refers to a small data packet, typically containing a unique identifier, transmitted from a web server to your browser and subsequently saved on your device's storage.

We exclusively employ cookies that are strictly essential. These are vital for allowing navigation within the Web Services and accessing its core features, such as maintaining your authentication session and entering protected sections. Absent these cookies, some requested functionalities would be unavailable. They hold no personal data themselves. Our use of them focuses on recalling your login method (via email, Google, or Apple account) to deliver services seamlessly.

SDKs

A Software Development Kit (SDK) comprises a suite of tools, libraries, guides, sample code, and occasionally APIs that aid developers in building apps for targeted platforms, frameworks, or hardware. SDKs streamline the addition of specialized capabilities into applications without starting from zero.

Our app incorporates third-party SDKs to boost performance and unlock specific tools. These may gather data on an automated basis, including:

• Device markers (e.g., IMEI, MAC address, ad ID);
• Interaction metrics (e.g., app usage patterns, time spent in sessions);
• System specs (e.g., IP address, OS details, hardware model, carrier network data);
• Location details, should you authorize it.

Such data from SDKs supports refinements to user interactions, performance insights, ad delivery, or elements like in-app transactions. We verify that integrated third-party SDKs align with data protection regulations and maintain strong privacy frameworks for data handling.

Keep in mind that we lack oversight of these third parties' privacy approaches—please consult their policies for specifics.

Advertising

We permit external ad networks to deploy cookies or comparable trackers on your device—be it computer, phone, or otherwise—to track your engagement with the Services. This enables (a) tailoring and delivering promotional materials informed by your prior site visits and interactions across digital platforms, and (b) analyzing connections between ad exposures, user responses, and traffic to our online properties.

Our external partners might serve ads drawing from your details, such as GAID (Google Advertising ID for Android) or IDFA (iOS Advertising Identifier), regional data, location indicators, and IP address. This Policy does not apply to these Third-party Operators, who operate under their separate privacy rules (e.g., TopOn: https://help.toponad.com/docs/Privacy-Policy).

Ads may appear in your browser on desktops. Cookies could tie into anonymized aggregates derived from data you've optionally shared with us (e.g., hashed versions of your email), which we might pass to vendors in non-readable formats.

You can choose to "opt out" of personalized ads, though this may lead to generic ones less aligned with your preferences. To request an opt-out, reach us via the "Contact Us" methods below, marking the subject as "Opt-out Request."

Reasons for Collection, Processing, and Use of User Information

Broadly speaking, we gather, handle, and apply your data for these aims and legal justifications.

We leverage information captured via Web Services to:

• Deliver our offerings;
• Refine the Web Services platform;
• Address your inquiries and preferences;
• Offer a secure, streamlined, and tailored user journey; and
• Collaborate with partners (including the Chat-GPT system) to enable robust features.

5.2 We draw on summarized user and non-personal data to examine platform dynamics and behaviors, generating consolidated insights.

5.3 We apply user data to identify, counter, and probe fraud, security incidents, or disallowed/illicit actions; to assert, uphold, or contest legal positions; and to enforce our Terms of Use [Insert hyperlink] or this Policy. This extends to fulfilling demands from governmental or enforcement bodies, or managing grievances under regulatory mandates.

5.4 We employ user data to reach out for platform maintenance, align with your opted communication settings, deliver ancillary services as noted during data intake, or pursue other lawful outreach.

Share, Transfer, Selling, and Disclosure of User Information

6.1 Sharing of User Information

You are entitled to know if your data has been shared. Beyond what's explicitly noted here or allowed by law, we refrain from sharing personal user data with outsiders, except when:

• You initiate or explicitly approve the sharing;
• It's tied to legal duties we must fulfill;
• It concerns national defense, public welfare, health crises, or key societal priorities;
• It supports probes, prosecutions, trials, judgments, or authority directives, including judicial summonses;
• It's essential to shield your safety, assets, or vital rights where consent is unfeasible, or we detect threats to our holdings, other users, or at-risk parties;
• You've publicly released the data;
• It's drawn from open, lawful sources like official bulletins or reports;
• It's exchanged with affiliates, subsidiaries, partners, vendors, or collaborators to sustain services per this Policy, as required.

For seamless, high-caliber support, certain tools rely on our tech vendors, so we may delegate data handling to them. We'll secure binding confidentiality and processing pacts outlining duties, data scope, timelines, and objectives. Vendors must adhere solely to our directives, this Policy, and security protocols.

These vendors act as standalone processors seeking your direct nod. They may have their own terms and policies—review them to decide on consent. Note: Denying access could limit contractor-supported features.

For confirmation on sharing, contact us per "Contact Us" below.

To "opt out" of sharing, submit a request via "Contact Us," labeling the subject "Opt-out Request." Be aware this might restrict certain features, as outlined.

6.2 Transfer of Control Over User Information

Fundamentally, we won't cede control of personal user data to others, barring scenarios like mergers, buyouts, insolvency, or wind-downs. In those cases, we'll alert you to the transfer's intent, data categories, and recipient.

6.3 Selling of User Information

We DO NOT sell user data to any entity. If you suspect commodification of your info, alert our Data Protection Officer (DPO) right away—details in "Contact Us" below.

6.4 Disclosure of User Information

Typically, we withhold user personal data from public view, save for:

• Fulfilling duties under Terms of Use [Insert hyperlink], this Policy, or laws;
• Your explicit permission;
• Legal mandates from regulations, officials, courts, or summonses; or
• Necessity to probe, avert, or address unlawful acts, suspected scams, safety risks, policy breaches, or as litigation proof.

6.5 Transfer of Select User Information on Subscription Termination

You're free to end your paid plan anytime, but note that opting out means we'll forward some data to your payment processor (e.g., Apple Pay, Google Pay, Stripe) for verification. This ensures proper handling and includes, without limit: account signup date, activity duration, virtual item buys, usage stats, and purchase values.

Management of User Information

7.1 Access, Updates, and Transferability

Keep your profile data current and accurate. You can access your account anytime to review details like profiles and settings. Spot inaccuracies or outdated info? Reach us for fixes, per legal allowances.

Need a duplicate of held data? We'll assist. If feasible and reasonable, we can forward it to a third party of your choice.

7.2 Revoking or Adjusting Consent

Basic info is key for full access—revoke specifics via "Settings," or contact us.

Post-revocation, we halt related collection/use, potentially pausing services. Prior consents remain valid for existing data unless deleted.

7.3 Account Removal

7.3.1 To erase your account, navigate "Profile" > "Settings" > "Delete My Account," or request via us.

7.3.2 Per laws, we might delay full erasure from backups until system refreshes.

7.3.3 Deletion is final—no restoring access to content/functions. Proceed thoughtfully.

7.4 Handling User Inquiries

7.4.1 Exercising rights under 7.1–7.3? We'll verify identity first, replying promptly—within 30 days max post-verification.

7.4.2 Requests are free if practical. We may deny those that:

• Don't pertain to you/your child;
• Are redundant sans justification;
• Demand heavy tech overhauls;
• Jeopardize others' rights;
• Prove unworkable/unreasonable; or
• Breach Terms [Insert hyperlink], Policy, or laws.

Retention of User Information

8.1 We'll hold personal data only as long as needed for stated/authorized aims, or per Terms/law.

8.2 Usage logs stay for analysis, shorter-term unless bolstering security/functionality or legally extended.

8.3 We retain anonymized aggregates from user data for any suitable (business/non-) purpose.

Such data, if untraceable to you/child, isn't "personal" legally.

Security of User Information

9.1 We deploy fitting organizational, tech, and physical defenses for user data. Multi-tier safeguards (e.g., standard encryption, structures, oversight) minimize risks like leaks, damage, abuse, or unauthorized handling.

9.2 USER DATA SECURITY MATTERS DEEPLY, YET NO ONLINE TRANSMISSION OR STORAGE IS FOOLPROOF. WE EMPLOY ROBUST COMMERCIAL PROTECTS, BUT ABSOLUTE SAFETY ISN'T GUARANTEED.

9.3 Breach detected? We'll assess fast. If high-risk or large-scale, we'll alert authorities/users ASAP, no later than legal deadlines.

International Transfer of User Information

Per laws, your data may cross borders for handling. We'll implement apt protections to uphold this Policy and regulations.

Reasonable steps ensure secure treatment—no transfers sans sufficient safeguards.

Protection of Children's Personal Information

Services target not under-14s; Terms ban under-14s (or under-16s in EEA). Spotting COPPA-defined data from under-14s? We'll suspend accounts and purge as required, retaining minimally for Policy aims if lawful.

You affirm you're the parent of any child user or a qualifying adult. Disagree with Policy? Avoid Services—we won't collect from you/child.

Regional Privacy Disclosures

Residents of the European Economic Area and United Kingdom

Web Services acts as "data controller" for "personal data" (GDPR-defined) under this Policy, dictating collection/use/disclosure per law. EEA/UK rules mandate disclosing legal bases:

• Contractual Duties: Processing to meet our pacts with you.
• Consent: Where law demands, or otherwise per your approval.
• Legitimate Interests: Advancing business goals (e.g., support, promos, analytics, security, fraud prevention, legal management) without overriding your rights.
• Legal Obligations: Compliance-driven uses/disclosures.

Beyond core rights, complain to watchdogs—but try us first; we'll resolve earnestly.

Residents of California

From January 1, 2020, CCPA (amended by CPRA, effective March 29, 2023) oversees California personal info handling. We're dedicated to subscriber CCPA alignment and support compliance.

For subscribers, we're a "service provider": Processing occurs solely via contracts for service delivery—we don't sell data.

CCPA duties apply to "sales"/"shares" (in quotes: CCPA-specific). We use analytics/ad services that may "share" identifiers (cookies, IPs, devices, locations, usage) with partners for off-site ads. Opt out via site/app "settings" data-sharing toggle. No knowing "sales"/"shares" of under-17s' data.

For CCPA/CRPA rights, see Policy. We refresh it for CPRA fit, detailing collection/rights.

CCPA queries? Email: support@mail.Chatmate

Residents of Nevada

Nevada residents can opt out of certain personal info "sales" to non-affiliates. Submit via "Contact Us" below, subject: "Nevada Do Not Sell Request," with name/email. We don't "sell" per NRS Chapter 603A.

Residents of Brazil

We adhere to LGPD for Brazilian users' data. Beyond Policy details, LGPD rights include: 1) Confirmation of processing; 2) Access/copy; 3) Rectification; 4) Anonymization/blocking/deletion of excess; 5) Portability; 6) Shared-entity info; 7) Consent revocation; 8) Processing objections (e.g., marketing); 9) Automated-decision reviews.

Residents of Virginia

Under VCDPA, Virginia rights: 1) Confirm/access data; 2) Corrections; 3) Deletions (with exceptions); 4) Portable copies; 5) Opt-outs from targeted ads, sales, or impactful profiling.

Exercise via support@mail.Chatmate . Response in 45 days (extendable 45 more, with notice). Denials? Appeal in writing—we'll review/respond in 60 days.

Users' Rights to Remedies

If privacy lapses occur, seek remedies via authorities or courts. For Web Services issues, contact us first—we prioritize swift, serious handling. See "Contact Us" for details.

Contact Us

We've set up a dedicated info-protection unit, including a child-data specialist.

Contact Our Data Controller

Our 24/7 data team oversees. Email: support@mail.Chatmate , subject: "Attn: Data Controller."

Contact Our Data Protection Officer (DPO)

Project lead doubles as DPO. Email: support@mail.Chatmate , subject: "Attn: DPO."

General Inquiries

Privacy/Policy questions? Use:

• {{ website }} Feedback form; or
• Email: support@mail.Chatmate