Privacy
Policy.

1. What we collect

• Account data — your full name, username, email address, and (optionally) your birth date, call name, and profile photo.
• Your content — conversations and messages, files you attach, and documents you run through the Academic Tools.
• Technical data — a session cookie that keeps you signed in, and a daily usage counter used for the chat quota.

2. How we use it

To run the service: signing you in (including emailed verification codes), answering your messages, greeting you by your call name, running the tool you picked, enforcing the daily quota, and preventing abuse. We do not sell your personal data, and we do not use your conversations to train our own models.

3. Who else processes your data

• AI model providers receive the messages in a conversation so they can generate replies.
• Brevo delivers our verification-code emails.
• Search providers (such as Tavily or DuckDuckGo) receive short phrase samples — a few snippets of up to 8 words — when you run the Similarity Check, so matches can be found. Your whole document is never sent to a search provider.
• LanguageTool receives the text you submit for English proofreading.

Each provider handles data under its own policy. For highly confidential documents, keep this in mind before running the Similarity Check or Proofread tools.

4. Cookies and local storage

One essential cookie keeps your session signed in. Your theme (dark/light) and language preferences are stored locally in your own browser. We do not run advertising trackers.

5. Storage and retention

Your data is stored on our servers and kept until you delete it: delete a single conversation, clear all conversations, or delete your whole account in Settings. Deleted accounts and conversations are removed from the live system; backup copies may persist for a short period before being overwritten.

6. Your controls

In Settings (the gear icon in the app) you can, at any time:

• edit your profile, photo, username, email address, and password;
• sign out all other devices;
• export your profile and all conversations as a JSON file;
• delete all conversations, or delete your account permanently.

7. Security

Passwords are stored only as salted one-way hashes — never in plain text — and every sign-in also requires a one-time code sent to your email. Verification codes themselves are stored only as hashes and expire in 10 minutes. No system is perfectly secure, but we design for the least data and the least access needed.

8. Students and younger users

If you are below the age where you can consent to data processing on your own in your country, use CintaAI together with, or with the permission of, a parent or guardian.

9. Changes and contact

If this policy changes, the new version will be posted here with a new date. Questions or requests about your data: [email protected].