Privacy Policy for Chatcraft

Last updated: May 30, 2026 · Effective: May 30, 2026

This Privacy Policy describes how Chatcraft ("We", "Us", "Our") collects, uses, and protects your information when you use our application. By using Chatcraft, you agree to the practices described in this policy.

1. What is Chatcraft?

Chatcraft is a mobile application that lets you convert WhatsApp chat exports into beautifully formatted PDF memory books. All chat processing happens entirely on your device — your conversation data is never uploaded to our servers.

2. Information We Collect

2.1 Account Data

When you register, we collect:

Email address
First and last name (optional)
Username (chosen by you)
Password (stored as a secure hash — never in plaintext)

You may also sign in using Google, in which case we receive your Google profile name and email via OAuth.

2.2 Chat Export Data

WhatsApp exports (.txt files and .zip archives with media) that you import into Chatcraft are processed locally on your device only. This data is stored in your device's private app storage and is never transmitted to our servers.

2.3 Generated PDFs

PDFs you generate are saved to your device. We do not have access to, nor do we store, the content of your generated PDF files.

2.4 Purchase Data

If you purchase export credits via Google Play, we store:

Your Google Play purchase token and Order ID, used solely to verify your credit balance with the Google Play Developer API.
The timestamp and quantity of each purchase.
This information is never shared with third parties beyond Google Play verification.

2.5 Usage and Analytics Data

We use Firebase Analytics (Google LLC) to collect anonymised usage data such as:

Screens visited and features used
App version and device type
Session duration and crash reports

This data is aggregated and cannot identify you individually.

2.6 Advertising Data

We use Google AdMob to display banner advertisements to free-tier users (users with zero export credits). AdMob may collect device identifiers, IP addresses, and usage signals to serve relevant ads, in accordance with Google's privacy policy. No ads are shown to users who have purchased export credits.

2.7 Guest Accounts

Guest accounts (no email required) store a temporary user record. All data associated with a guest account is permanently deleted 7 days after creation.

3. How We Use Your Data

Purpose	Legal Basis
Providing the app and managing your account	Contract performance
Verifying export credit purchases with Google Play	Contract performance
Improving the app (Firebase Analytics)	Legitimate interest
Serving ads to free users (AdMob)	Legitimate interest / consent
Complying with legal obligations	Legal obligation

We do not use your data to:

Read or process your chat exports on our servers
Build advertising profiles based on your chat content
Sell your personal data to third parties

4. Data We Do NOT Collect

Chatcraft is explicitly designed so that:

Your WhatsApp chats never leave your device. The .txt or .zip file you import is parsed and processed entirely on-device. No chat content is uploaded.
Your generated PDFs stay on your device. We do not have access to the PDF files you create.
We cannot read your conversations. We have no technical capability to access your chat data.

5. Sharing Your Data

We share data only in the following circumstances:

Recipient	What is shared	Why
Google LLC	Analytics events, AdMob identifiers, Play purchase tokens	Analytics, advertising, purchase verification
Law enforcement / courts	Account metadata (not chat content)	Legal obligation
Acquirer (if Company is sold)	Account data	Business transfer — users will be notified

We never share your chat content because we never have access to it.

6. Data Retention

Data type	Retention
Account data	Until account deletion
Guest account data	7 days from creation
Purchase tokens	As long as the account exists
Firebase Analytics events	Per Google's data retention settings (default 14 months)
Chat exports and generated PDFs	Stored locally on your device; deleted when you uninstall the app or clear storage

7. Your Rights

You have the right to:

Access your personal data
Correct inaccurate account data
Delete your account and all associated server-side data (via Settings → Delete Account or by contacting us)
Withdraw consent for ads at any time (purchase export credits to go ad-free)

India — Digital Personal Data Protection Act, 2023 (DPDP)

In accordance with India's DPDP Act:

We process your data only for the purposes described above.
You have the right to request correction or erasure of your personal data.
Contact us at the email below to exercise these rights.

European Users (GDPR)

If you access the Service from within the European Economic Area, you additionally have rights to data portability and to lodge a complaint with a supervisory authority.

8. Data Security

We implement:

HTTPS/TLS for all API communication
BCrypt hashing for passwords
HTTP-only session cookies
Your chat data never leaves your device — the strongest possible data security

9. Children's Privacy

Chatcraft is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has registered, we will delete their account immediately.

10. Third-Party Services

Chatcraft uses the following third-party services, each governed by their own privacy policies:

Google Firebase Analytics — Privacy Policy
Google AdMob — Privacy Policy
Google Play Billing — Privacy Policy
Google Sign-In — Privacy Policy

11. Changes to This Policy

We may update this Privacy Policy. When we do:

The "Last updated" date at the top will change.
For significant changes, we will notify you via in-app notification or email.

Continued use of the app after an update constitutes acceptance of the new policy.

12. Contact Us

For privacy questions, data requests, or to report a concern:

Email: laxmi.solutions.2025@gmail.com

We aim to respond within 72 hours.