Your data, clearly explained
Privacy Policy
CharmCue processes only the information needed to analyze content you choose, provide suggestions, remember your settings, and manage premium access.
1. Who is responsible
The data controller for CharmCue is Ümit Duran, trading as Vebesto Studio, Germany. Questions or privacy requests can be sent to vebestostudio@gmail.com.
2. Information we process
Anonymous account
CharmCue creates an anonymous Firebase Authentication identifier so app data and premium authorization can be separated between installations. CharmCue does not ask you to create an account and does not add your name, email address, Apple ID, or Google account to that Firebase identity.
Content you choose to analyze
You may submit conversation screenshots, pasted text, and manual WhatsApp exports, or profile screenshots. This content can include information about you and other people. WhatsApp participant names are removed on your device and the newest supported messages are converted to YOU/THEM directions before analysis. You should submit content only when you have the right to do so.
The selected content is sent for analysis through Firebase Cloud Functions to Google Gemini to create suggestions or a profile review. Raw screenshots, pasted conversation text, and raw WhatsApp exports are not written to Cloud Firestore or Firebase Storage by CharmCue. They are processed to answer the request. The profile preview shown before upgrading is prepared on your device; profile screenshots are sent for AI analysis only after premium access is verified and you have given AI-sharing consent.
Content stored on your device
App preferences, keyboard settings, recent suggestion data, confirmed screenshot state, and dating profile review history can remain on your device. A pending WhatsApp export may remain in the app cache for up to 24 hours; after confirmation, an anonymized direction-only transcript can remain until it is replaced or you delete your data. Profile reviews include optimized screenshot previews and photo crops in encrypted local files. Only the latest review and its previews are kept for each platform. They are replaced by a new review for that platform and removed when you delete your account data. The iOS preview files are excluded from device backup, and Android application backup is disabled.
Content stored in Firebase
Cloud Firestore can store a conversation label you provide, the selected platform, AI-generated mood summaries and suggestions, timestamps, preference backups, revocable keyboard-session records, and historical profile-preview usage counters and temporary reservation timestamps. These historical records contain no profile images or review text, are no longer used or created for unpaid analysis, and are removed when you delete your account. Conversation screenshots and raw message bodies are not stored there.
Purchases and premium status
RevenueCat receives the anonymous app user identifier and subscription information supplied by Apple, such as the product, entitlement status, purchase or expiry dates, and storefront-related information. Apple processes payment details; CharmCue and Vebesto Studio do not receive your complete card or Apple account credentials.
Optional usage analytics
Firebase Analytics is off by default. On the onboarding privacy step, Agree & Continue also turns it on; Continue without usage analytics lets you use CharmCue without it. When enabled, we measure onboarding completion, paywall views and actions, completed analyses, and copied replies. Our own events contain only fixed categories such as the paywall placement, analysis type, or copy surface. We do not put conversation text, screenshots, profile content, recipient details, or your Firebase account identifier in those event parameters.
When enabled, the Analytics SDK also collects an app-instance identifier and may record automatic app activity such as sessions, screen views, and StoreKit purchase events with product and price details. It can receive device, app, and general location information for reporting. We do not use the advertising identifier or link this Analytics property to an ads account for this release. You can withdraw Analytics consent at any time in You → Privacy & data.
3. Why we process information
- To provide the analysis and suggestions you request and operate the app contract.
- To remember settings, synchronize conversation results, restore purchases, and enforce premium access.
- To protect the service, prevent misuse, diagnose failures, and meet legal obligations.
- Only with your separate opt-in, to understand how people use CharmCue and improve the app.
Where European data-protection law applies, these purposes rely on performing the service you requested, our legitimate interest in operating and securing it, your separate consent for optional usage Analytics, your consent where the device asks for permission, and compliance with law.
4. Service providers
CharmCue uses Google Firebase for authentication, server functions and database storage; Google Gemini for AI processing; Google Analytics for optional usage measurement; RevenueCat for subscription status; and Apple for App Store distribution, billing, purchases and restoration. These providers process information under their own contractual and legal obligations. CharmCue does not sell your personal information or use submitted conversations for advertising.
5. Keyboard and Full Access
The iOS keyboard needs Full Access only for network-based CharmCue features and access to the shared container used by the main app. The keyboard checks premium status before offering a screenshot. It does not upload a screenshot until you see the preview and choose Use it. Without Full Access, online suggestions cannot work. Apple may show a broad system warning for all third-party keyboards; that warning does not change the limited behavior described here.
6. Retention
Retention depends on the data. Firestore conversation results and account metadata remain until you delete an item or use the in-app deletion control. Local preferences and histories remain until replaced, cleared, deleted in the app, or removed with the app. Keyboard sessions expire and can be revoked. For the linked Google Analytics property, event-level data is set to 2 months and user-level data to 14 months, with user retention resetting on new activity; aggregated reports may remain longer. Operational records may be retained for a limited period when required for security, reliability, billing, dispute handling, or law. Our processors may keep limited records under their applicable terms.
7. Delete your data
You can delete an individual conversation from the app. To remove the anonymous account and associated Firebase app data, open You → Privacy & data, then choose Delete account. CharmCue recursively deletes the Firebase data associated with the anonymous identifier, deletes that Firebase Authentication user, clears local stores, and then creates a fresh anonymous session so the app can continue to open.
Withdrawing Analytics consent or deleting the account stops future Analytics collection and resets the Analytics identifier and data stored by the SDK on this device. It does not by itself erase historical events already sent to Google Analytics. To request review or deletion of those records, email us at vebestostudio@gmail.com; include the anonymous support identifier if available. We will assess what can be located and deleted through the Analytics data-deletion tools.
Deleting app data does not cancel an Apple subscription. Cancel it separately in Apple subscription settings. You can also email vebestostudio@gmail.com for help; because the account is anonymous, we may need the support identifier shown in the app.
8. International processing
International processing may occur because Firebase, Google Gemini, RevenueCat, and Apple operate infrastructure and support services in multiple countries, including outside Germany or the European Economic Area. Where required, transfers are covered by the providers’ transfer safeguards and applicable data-protection mechanisms.
9. Your rights
Your rights may include access, correction, deletion, restriction, objection, and data portability, as well as withdrawing consent where consent is the legal basis. You may also complain to a competent German data-protection supervisory authority. To exercise a right, contact us and include the anonymous support identifier when available. We may need to verify that the request relates to your installation.
10. Children
Children: CharmCue is intended only for people aged 18 or older. We do not knowingly provide the service to or collect personal information from anyone under 18. Contact us if you believe a minor has used the service.
11. Security
We use access controls, encrypted network transport, anonymous identifiers, restricted server credentials, and server-side premium checks. No internet service can promise absolute security, and CharmCue is not described as end-to-end encrypted.
12. Changes to this policy
Changes to this policy will be posted on this page with a revised effective date. Material changes may also be highlighted in the app when appropriate.
13. Contact
Privacy questions and requests: vebestostudio@gmail.com. You can also review the Terms of Use or visit CharmCue Support.