Privacy policy

This policy explains what happens to your information when you use the AIChatBot app ("the app"), and the web pages at aibot.jonsapps.co.uk. We've tried to keep it short and in plain English.

Who we are

The app is run by Jons Apps Ltd, 2 Wilton Street, Whitefield, Manchester, M45 7EU, United Kingdom ("we", "us"). We are the controller of your information under UK data protection law (the UK GDPR and the Data Protection Act 2018).

For privacy and other legal questions, contact [email protected]. To report a Game Lab game or other misuse, use [email protected].

The short version

• There are no accounts. We don't ask for your name, email or phone number.
• Chat and tool text is sent to our server and to OpenAI so the app can reply. We don't keep that text on our server.
• Game Lab is different. We keep the description you type and the game the AI writes, so you can open them again.
• Our server keeps basic technical records (not your chat messages) for 90 days.
• Your chat history is stored on your phone, not by us.
• Apple handles all payments. We never see your card details.
• If you are not subscribed, the app shows full-screen ads from Google AdMob. A subscription removes them.

What you type, and OpenAI

• When you send a chat message or use a tool, the text goes to our server over an encrypted connection. Our server passes it to OpenAI, which writes the reply. Our server sends the reply back to you.
• For chat and tools, our server does not save the text of your messages or the replies. They pass through it only to get your answer. Game Lab is described separately below.
• OpenAI processes that text for us as our service provider. OpenAI's API data controls say that, since 1 March 2023, data sent to the API is not used to train or improve OpenAI's models unless the customer opts in. We have not opted in. By default, OpenAI may keep API inputs and outputs in abuse-monitoring logs for up to 30 days. It may keep them longer if the law requires it, or if that is reasonably necessary to protect its services or someone else from harm. This follows OpenAI's data controls as published on 17 October 2026: developers.openai.com/api/docs/guides/your-data.
• Please don't type things you'd want to keep private, like passwords, bank details or health information.

What our server records

For each request, our server keeps a short technical record. It holds:

• which feature you used (chat or the name of a tool) and which AI model;
• the time, whether it worked, and how long it took;
• your IP address;
• an anonymous install ID (see below).

It does not hold the text of your messages or the replies. We use these records to keep the service running, stop abuse, and understand which features are used. They are deleted automatically after 90 days.

We also keep a short device record for those requests: a device id, and when it was last seen. That record is deleted 90 days after it was last seen. It is not the App Attest key. The key is kept separately, and the server does not delete it on a timer.

Your anonymous install ID

• The app uses Apple's App Attest to prove that requests come from the real app on a real iPhone. This creates a key that is unique to this install of the app. Our server uses that key's ID as an anonymous install ID.
• We use it to check that requests are genuine, and to stop abuse.
• It is not linked to your name, Apple ID, email or phone number. If you delete and reinstall the app, you get a new one.
• We keep the App Attest key record, including after you stop using the app. The server has no automatic deletion period for it.
• We keep a count of free messages, free tool uses and free Game Lab uses for this install. The count is tied to this App Attest install ID, and we use it to enforce the free allowance. These counts are deleted after 90 days.

Reinstalling and Apple DeviceCheck

To stop the free allowance being reset by deleting and reinstalling the app, we use Apple's DeviceCheck bits. One bit means this device has already used its free allowance this month. Apple stores the bits. It doesn't tell us who you are or which device you have.

Purchases

• Subscriptions are bought and paid for through Apple. Apple handles your payment details under Apple's own privacy policy. We never see your card or bank details.
• To unlock premium, we check the purchase with Apple. We store the original transaction ID (originalTransactionId) and an app account token (appAccountToken) against your anonymous install ID, so premium keeps working and can be restored if you reinstall.
• We keep this subscription record after the subscription ends, including when it expires or is refunded. The server does not delete it.
• Apple also tells our server when a subscription renews, ends or is refunded. Those notices are deleted after 90 days. The subscription record itself is not.

Ads (free version)

Google is the advertising provider. The app uses Google AdMob.

• If you are not subscribed, the app shows a full-screen AdMob interstitial. It asks for one after you close a full-screen part of the app, such as a chat, a tool or Game Lab. Subscribers do not see these ads. The app does not show ads inside a Game Lab game.
• To provide, measure and secure ads, Google may collect or receive information from your device. That can include your IP address, device identifiers such as the advertising identifier (IDFA) where Apple and you allow it, and data about the ad itself, such as whether it was shown or dismissed.
• Ads may be personalised or non-personalised. Personalised ads can use the advertising identifier to choose ads that may be more relevant to you. Non-personalised ads are not based on that identifier. You can still see ads if you do not allow personalisation.
• The consent step in this app is Apple's App Tracking Transparency prompt. A few seconds after the app becomes active, it asks the system "Allow Tracking" question so it can access the IDFA for personalised ads. If you say no, the advertising identifier is not available. The app includes Google's SKAdNetwork identifier, so ad measurement can still work without the IDFA.
• You can change or withdraw that tracking permission later on your iPhone, in Settings > Privacy & Security > Tracking. That is the iPhone setting for the prompt the current app shows. The current app has no ads setting of its own.
• From the next app update, if you are in the UK, the EEA or Switzerland, the app will ask through Google's User Messaging Platform (UMP) consent prompt whether to allow personalised ads. You will be able to change that choice later in the app. This version of the app does not include that prompt yet, and it does not yet have a screen for changing it. Until that update, the only consent prompt is Apple's tracking prompt, above.
• How Google uses information from apps that use its services, including advertising: How Google uses information from sites or apps that use our services. Google's privacy policy is at policies.google.com/privacy.

Game Lab

Game Lab creates a small game from a description you type. You can change it, play it, and share a link. The public moderation contact is [email protected].

• Your description, later change requests, and the game the AI writes are sent to our server and to OpenAI. Unlike chat, we keep them, linked to your anonymous install ID, so you can open the game again.
• The description and later change requests are checked with OpenAI's moderation endpoint before the model writes the game. Visible text from the finished game is checked the same way. OpenAI's data-controls table lists /v1/moderations as not kept for abuse monitoring and not used for training.
• A copy of a game can be stored on your phone so it can play offline. The app tells you that games on the free plan are linked to that iPhone and can't be recovered if you delete the app.
• If you share a game, we create an unlisted link. The share page tells search engines not to index it. The app says the link is not listed or searchable, and that your description and older versions stay private. Anyone with the link can play the latest version. You can turn the link off.
• You or another person can report a shared game in the app or on the share page. We store the reason and any note. A report from the web page also stores a key derived from the IP address, so that address cannot keep more than one open report on the same game. We may hide the link, remove the game, or block an install after a report.
• If a game does not start, stops responding, or the web view ends, the app can send the iOS version and a short status code for that event. The report does not include the advertising identifier, and it is not a copy of the game.
• While a game has not been deleted, we keep the description and the game. A share link does not expire on a timer. It ends when you turn it off, or when the game is deleted.
• After you delete a game that was never shared, we delete that game, its descriptions and its files 90 days later.
• After you delete a game that was ever shared, or after we take one down, we keep it for 180 days and then delete it. Deleting the game also deletes its reports, jobs, moderation records and status reports, even if their own periods below have not ended.
• A report stays while it is open. After it is resolved, we delete it 180 days later. Moderation check records are deleted 180 days after they are created.
• A generation job, including the text it was given, is deleted 30 days after it finishes, fails or is cancelled. The copy of the description kept with the game follows the game's own period above.
• A record of what a job cost, once it is settled or released, is deleted 400 days after it was created. Deleting the game does not delete that cost record.
• A short status report (the iOS version and a status code) is deleted 90 days after it is sent.
• If we block an install for a set time, that block is removed when the time passes. A block with no end time is kept.

What stays on your phone

Your chat history, display name and profile picture are stored only on your phone. We can't see them. Deleting the app deletes them. A Game Lab game can also be cached on your phone, as described above. We do keep a copy of Game Lab games on our server.

Why we use your information (our legal bases)

• To provide the app you asked for (contract): sending your messages to OpenAI and returning replies, creating and storing Game Lab games you ask for, and providing your subscription.
• Legitimate interests: keeping the service secure and working, preventing abuse and fraud (App Attest, DeviceCheck, usage limits, technical records), and understanding which features are used. We've balanced these against your rights, and we keep as little as we can.
• Consent: use of the advertising identifier for personalised ads. In the current app, that is Apple's App Tracking Transparency prompt. From the next app update, people in the UK, the EEA and Switzerland will also be asked through Google's User Messaging Platform, and will be able to change that choice later in the app.
• Legal obligations: where the law requires us to keep or share information.

Who we share it with

We don't sell your information. We share it only with:

• OpenAI, to generate replies and Game Lab games, and to check Game Lab text;
• Apple, for App Attest, DeviceCheck and purchases;
• Google (AdMob), for ads in the free version;
• Cloudflare, Inc., which provides the network tunnel and CDN in front of our server;
• Contabo GmbH (Germany), which hosts the server;
• authorities, if the law requires it.

International transfers

OpenAI, Google, Apple and Cloudflare process information outside the UK, including in the United States. Contabo GmbH is a company in Germany. We do not name a particular data-centre country for the server. Where information is processed outside the UK, we use a safeguard UK law allows. If that processing is in the European Economic Area, we rely on the UK adequacy regulations for the EEA. Otherwise we use the UK International Data Transfer Agreement or Addendum, or the UK–US data bridge where the recipient is certified under it.

How long we keep things

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of your information;
• ask us to correct it;
• ask us to delete it;
• object to how we use it, or ask us to limit it;
• ask to move it to another service (data portability);
• withdraw consent at any time, for example by turning off tracking.

Because there are no accounts, we usually can't tell which records are yours unless you can give us your install details. The simplest way to remove what is only on your phone is to delete the app. Records the table above gives a period for are deleted on that period. The App Attest key and the subscription record are not deleted on a timer. To use your rights, email [email protected]. We'll reply within one month.

Complaints

If you're unhappy with how we've handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, or phone 0303 123 1113.

Children

The app is for people aged 13 and over. If you're under 18, please ask a parent or guardian before using it. We don't knowingly collect information from children under 13. If you think a child under 13 has used the app, contact us and we'll help.

Changes to this policy

If we change this policy, we'll update this page and the date at the top. If a change is significant, we'll also tell you in the app.