Privacy Policy

ChatUp: AI Chat Bot Assistant

Last updated: August 2026

PLEASE READ THIS PRIVACY POLICY CAREFULLY. IT DESCRIBES HOW YOUR PERSONAL DATA MAY BE PROCESSED WHEN YOU USE THE CHATUP MOBILE OR WEB SERVICE. BY USING CHATUP, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY.

How ChatUp processes your content: When you send a message, attach a file, or use an AI tool, that content is transmitted to the third-party AI model provider for the model you selected (for example OpenAI, Anthropic, Google, xAI, or DeepSeek) so it can generate a response. The AI Research tool sends your query to AI and search providers to perform live web research. Non-incognito chats that reach the service are stored with your account and can sync across devices; each browser also keeps a local copy for history and Chat Search.

1. Who We Are

The “ChatUp: AI Chat Bot Assistant” mobile application, ChatUp website and web application, and related services (collectively, “ChatUp” or the “Service”) are operated by Lightning Deals LLC, a limited liability company organized under the laws of the State of Florida, USA (“Lightning Deals,” “we,” “us,” or “our”).

When we refer to “personal data” or “personal information,” we mean any information relating to an identified or identifiable natural person — someone who can be identified, directly or indirectly, by reference to an identifier such as a name, email address, device identifier, or online identifier.

This Privacy Policy applies to all users of the Service wherever located. Section 9 (U.S. State Privacy Rights) applies supplementally to residents of U.S. states that have enacted comprehensive privacy laws, to the extent those laws apply to the processing described here.

2. Information We Collect

Account Information. When you create a ChatUp account, we collect your email address and authentication identifiers, whether you provide the address directly or use a supported social sign-in. Web and iOS account and session infrastructure is provided by Clerk, while Android authentication uses Google Sign-In. We receive only the information needed to create and authenticate your account — on Android, this can include the email address, name, and account identifier contained in the Google identity token you approve — and do not otherwise access your third-party account data. We use account information to identify your account and subscription, provide the Service, prevent abuse, and send transactional messages (for example, receipts or important service notices).

User Content. “User Content” means content you provide to ChatUp and content generated for you by the Service, including:

• messages and prompts you type or dictate (“Input Content”);
• files you attach for AI processing;
• tool inputs and assistant or model selections; and
• responses and other AI-generated content presented to you (“Output Content”).

Chat and file storage. Non-incognito web chats are cached in local browser storage associated with the signed-in account on that browser. Messages that reach the service are also stored with the account so chat history can sync across devices; offline or unsent local messages remain only in that browser. Chat Search searches the local cache. Incognito chats are not added to history; the service temporarily creates one to run the selected model and deletes it when you leave. The browser temporarily stores prepared animation source photos, descriptions or effect selections, and stable request and upload identifiers on that device so an interrupted animation request can resume safely. Files and photos you attach may be stored with the account as needed to provide the feature, and generated images and videos remain in your Library until you delete them or the account.

AI processing and search. When you submit Input Content, it is transmitted to the third-party AI model provider for the model you selected so that provider can generate a response; the providers available appear in the model catalog. The AI Research tool sends your query to AI and search providers to perform live web research and return sources. Chat Search, by contrast, searches only your locally stored chat history and does not leave your browser or device.

AI Goals, notifications, and speech features. AI Goals, generated plans, progress, and reminder history are stored with your ChatUp account and processed on ChatUp’s servers and by the AI provider used to generate them. Goal reminders are generated by the Service and may be delivered through Apple Push Notification service on iOS or Firebase Cloud Messaging on Android; delivery sends the platform provider a device push token, generated reminder body, goal identifier, and occurrence identifier. If you enable browser notifications for goal reminders or completed animations, ChatUp stores that browser’s push subscription and per-purpose preferences with your account, stores your selected notification locale in that browser, and sends encrypted notification payloads through the push service selected by your browser. Those payloads can include a notification purpose, localization keys and arguments or reminder body, a goal and occurrence identifier or animation identifier and count, and a ChatUp app link; the browser validates and localizes them before display. Dictation and voice-preview features use speech capabilities supplied by your operating system or browser. Audio processing by those platform features is governed by the applicable device, operating-system, or browser provider’s settings and privacy terms.

Purchase Information. In-app purchases and subscriptions are billed and processed by the store that distributes the app — Apple on iOS and Google Play on Android — while website subscriptions are processed by Stripe. Apple, Google, and Stripe handle your payment details; we do not receive or store your full credit or debit card number. We receive records needed to activate and manage access, such as product or price identifiers, customer and subscription identifiers, trial status, purchase and renewal status, cancellation status, and payment status.

Refund Requests. If you ask Apple for a refund on a purchase made in the iOS app, Apple notifies us and invites us to provide information about that purchase. Where we respond, we share with Apple: whether the purchase was delivered to your account; whether free access was available to you before the purchase (ChatUp includes a recurring free credit allowance); for a credit purchase, an estimate of how much of those credits had been used at the time of your request; and whether we recommend that Apple grant or decline the refund. Apple already holds your payment and transaction details, and Apple — not ChatUp — decides the outcome of your request. We do not send Apple the contents of your chats, files, or generated images or videos.

Support Communications. If you contact us by email or through a support form, we collect your name (if provided), email address, and the contents of your message, and use them to respond to and resolve your inquiry.

Information Collected Automatically. When you use the Service, we and our service providers automatically collect certain information, including:

• Device and browser information: device model and manufacturer, browser type, operating system and version, screen characteristics, language and region settings, time zone, and app or site version.
• Identifiers: pseudonymous user and installation identifiers set by the Service. On iOS, and only with your permission through Apple’s App Tracking Transparency prompt, we may collect your device’s advertising identifier (IDFA) for marketing attribution. On Android, we and AppsFlyer collect the device’s resettable advertising identifier (GAID) and Google Play install-referrer data for marketing attribution. You can reset or delete GAID and control ads personalization in Android Settings.
• Usage information: app and website events such as feature usage, screens or pages viewed, session start and end times, subscription events, and interactions with Service features, used for analytics and product improvement.
• Log and connection data: IP address, approximate location derived from IP address (country/region level), request timestamps, crash reports, and diagnostic data.

3. How We Use Information

We use the information described above to:

(a) provide the service — process your Input Content with the AI model and search providers you invoke, maintain and sync account chat history, provide local Chat Search on your browser or device, store generated images and videos in your Library, store and run account-synced AI Goals, schedule or deliver mobile notifications as described above, and manage your account and subscription;

(b) improve and secure the Service — understand usage trends, test and improve features, diagnose and fix technical issues, and protect against fraud, abuse, spam, and security incidents;

(c) measure marketing — attribute app installs and subscription events to our advertising campaigns (on iOS, using the advertising identifier only if you grant tracking permission; on Android, using the resettable Google advertising identifier and Google Play install referrer);

(d) communicate with you — respond to support requests, send transactional messages, and, where permitted, inform you about Service features and offers (you may opt out of marketing emails at any time via the unsubscribe link in each message); and

(e) handle refund requests — respond to Apple when you request a refund on an in-app purchase, as described in Section 2; and

(f) comply with law — meet our legal, tax, accounting, and regulatory obligations and enforce our Terms of Use.

If we intend to process your personal data for a new purpose, we will update this Privacy Policy before doing so.

4. Legal Bases for Processing (EEA/UK Users)

Where the EU or UK General Data Protection Regulation applies, we process your personal data on the following legal bases: performance of a contract (providing the Service and the current features you request); consent (tracking via the advertising identifier on iOS, push notifications, and any other processing where we ask for your permission); legitimate interests (improving and securing the App, aggregate analytics, preventing fraud and abuse, and responding to a refund request you have raised with Apple about a purchase); and legal obligation (record-keeping and compliance).

5. How We Share Information

We share your information only as described in this Privacy Policy. We do not rent or sell your personal data to third parties for money.

We engage the following service providers to deliver and improve the Service. These providers process data on our behalf under contracts that restrict their use of your information to the services they perform for us:

To learn more about these providers’ practices, including available opt-outs, please consult their privacy policies linked above.

We may also disclose personal information: (i) as required by law, legal process, or governmental request; (ii) when we believe in good faith that disclosure is necessary to protect our rights or the safety of our users or others, to investigate fraud or abuse, or to enforce our Terms of Use; and (iii) in connection with a merger, acquisition, financing, or sale of all or part of our assets, in which case you will be notified of any change in ownership or in the uses of your personal information, along with any choices you may have.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties, and we encourage you to review their policies.

6. Data Retention

We retain account, subscription, support, analytics, and diagnostic data for as long as your account is active and as otherwise needed for the purposes described in this Policy. Non-incognito chats that reach the service and generated images and videos are stored with your account until you delete that content or the account. Local chat caches remain in each browser or mobile device until you clear them there, remove the applicable site or app data, or uninstall the mobile app, subject to the behavior of your browser, device, backups, and operating system. Prepared animation requests kept for recovery expire from the browser queue after seven days and may be removed sooner when its count or storage limit is reached. When you delete remote content or your account, we delete or de-identify associated personal data held by ChatUp within a reasonable period, except where retention is required to comply with legal obligations (such as tax and accounting laws), resolve disputes, prevent fraud or abuse, maintain security backups for a limited period, or enforce our agreements.

7. Managing Your Data in ChatUp

You can exercise substantial control over your data directly:

• Export or delete synced chats: signed-in web users can use Settings → Export synced chats to download server-owned synced chats, or Settings → Delete all synced chats to permanently remove every synced chat from the account. Chats stored only in a browser are separate and remain there.
• Delete chats and local data: deleting an individual conversation removes its account copy so it disappears from synced history. Settings → Clear this browser first attempts to retire the Web Push subscription, then clears that browser’s chat cache and unfinished animation recovery queue; if push cleanup cannot finish, ChatUp retains the owner-qualified retry record needed to complete it later. Account-backed chats and renders can return on the next sync. Repeat the local clear in every browser whose cached copy you want to remove, and use the mobile app’s local-data controls separately on each device.
• Delete generated media: use the Library’s delete controls. An image used by an active generation or an animation still rendering can be deleted after generation finishes.
• Delete your account: on the web or Android, use Delete your account; on iOS, use Settings → Account & Sync. If you cannot sign in, cannot access the deletion flow, or receive an error, follow our Account and Data Deletion page and email [email protected] from the address associated with your account. Website subscriptions billed by Stripe are cancelled by the web deletion flow; App Store and Google Play subscriptions must be cancelled in the applicable store. Deleting the remote account does not erase local browser or device content, so use Settings → Clear this browser separately in every browser and the mobile app’s local-data controls on every device.
• Advertising and tracking controls: on iOS, allow or revoke app tracking in Settings > Privacy & Security > Tracking, and disable Apple’s personalized ads in Settings > Privacy & Security > Apple Advertising. On Android, you can reset or delete the advertising identifier and turn off ads personalization device-wide in Settings > Privacy > Ads (on some devices, Settings > Google > All services > Ads).
• Push notifications: turn each notification purpose off in ChatUp’s settings or disable notifications for ChatUp in your browser or device settings.
• Marketing emails: unsubscribe using the link included in every marketing email.

8. Your Privacy Rights

Depending on where you live, applicable data protection laws may give you the following rights regarding your personal data:

• Right to know / access — obtain confirmation of whether we process your personal data and request a copy of it, along with information about how it is processed.
• Right to portability — receive your personal data in a structured, commonly used, machine-readable format.
• Right to correction — ask us to correct inaccurate or incomplete personal data where you cannot do so yourself in the App.
• Right to deletion — request deletion of your personal data, subject to legal exceptions (for example, data we must keep for tax, accounting, security, or legal-claims purposes).
• Right to restriction — ask us to limit processing in certain circumstances, such as while a dispute about accuracy is resolved.
• Right to object — object to processing based on legitimate interests, and to processing for direct marketing at any time.

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before acting on your request. You also have the right to lodge a complaint with your local data protection or supervisory authority if you believe your rights have been infringed.

9. U.S. State Privacy Rights

This Section supplements the rest of this Privacy Policy and applies to residents of U.S. states with comprehensive privacy laws (including, among others, California, Colorado, Connecticut, Texas, and Virginia), to the extent those laws apply to us and to the processing at issue.

Categories and purposes. The categories of personal information we collect, the purposes of processing, and the categories of recipients are described in Sections 2, 3, and 5 above. The providers listed in Section 5 act as our “service providers” or “processors” and are contractually prohibited from using your personal information for their own purposes, including selling it.

“Sale” and “sharing.” We do not sell personal information for money. Certain state laws define “sale” or “sharing” broadly to include some disclosures for cross-context behavioral (targeted) advertising. To the extent our use of an attribution or advertising partner qualifies as such, you may opt out as follows. On iOS, decline or revoke tracking permission in Settings > Privacy & Security > Tracking. On Android, delete the advertising identifier and turn off ads personalization device-wide in Settings > Privacy > Ads. On either platform, you may use industry tools such as https://youradchoices.com/appchoices and the AppsFlyer opt-out page at https://www.appsflyer.com/legal/opt-out/, or email us as described below.

Your rights. Where applicable, you have the rights described in Section 8, plus the right to opt out of targeted advertising, “sale”/“sharing,” and profiling in furtherance of decisions with legal or similarly significant effects; the right not to receive discriminatory treatment for exercising your rights; and, in some states, the right to appeal our decision on a request. To submit a request, email [email protected] with the subject line “Privacy Request” and the name of your state of residence. We will verify your identity using the information associated with your account, respond within the time required by applicable law (generally 45 days, extendable where permitted), and, if we decline a request, explain why and how you may appeal.

Authorized agents. You may use an authorized agent to submit a request on your behalf; we will require proof of the agent’s authorization and may still need to verify your identity directly.

10. Security

We use HTTPS/TLS to protect personal data transmitted between your client and the services we operate, along with technical and organizational safeguards designed to implement data minimization and limit access. Current chats stored locally rely on the protections provided by your browser profile, device, and operating system; anyone with access to that profile or device may be able to access that local data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If your personal information is compromised in a security breach, we will notify you as required by applicable law.

11. International Data Transfers

We provide the Service to users around the world, and the information we collect is processed and stored in the United States and in other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we take steps designed to ensure that recipients of personal data provide an adequate level of protection, and by using the Service you acknowledge that your information may be transferred to and processed in countries outside your own.

12. Children’s Privacy

The Service is not directed to children, and we do not knowingly collect personal information from anyone under the age of 13 (or under a higher minimum age where local law provides one, such as under 16 in parts of the European Economic Area, absent parental consent). Parents and guardians are responsible for supervising any use of the Service by minors permitted under our Terms of Use. If you believe a child has provided us with personal information without the required consent, please contact us at [email protected] and we will delete it as quickly as possible.

13. Changes to This Privacy Policy

We update this Privacy Policy from time to time. When we make changes, we will post the revised policy at this address and update the “Last updated” date above, and we may provide additional notice as appropriate under the circumstances. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Lightning Deals LLC Email: [email protected]

Copyright © 2026 Lightning Deals LLC. All rights reserved.