This notice supplements the App Privacy Policy for California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA).
1. Categories of personal information
We collect the following categories:
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | email address, phone number, pseudonymous user ID, device token, advertising ID (only with consent) | account, sign-in, notifications |
| Commercial information | subscriptions and credits purchased | processing purchases |
| Internet and app activity | use of features, reactions in the feed, error reports | providing the app and keeping it stable |
| Audio information | your voice during voice calls (real time only, not stored) | voice calls |
| Inferences | preferences and details stored in Memory | personalising conversations |
| Sensitive personal information | information about health, sex life or religion if you share it in a conversation; date of birth | providing conversations, age limit, crisis support |
2. Sources
We receive the information directly from you, automatically when you use the app, and from Apple and Google regarding your purchases.
3. Purposes
We use the information to provide the app, process purchases, ensure safety, prevent misuse, fix errors and comply with legal obligations. We use sensitive personal information only to provide the services you request, to ensure safety and to enforce the age limit.
4. Disclosure
We disclose information for business purposes to our service providers named in the Sub-Processor List. We do not sell personal information.
"Sharing" for cross-context behavioural advertising only takes place if you have consented to tracking in the app, and only concerns pseudonymous identifiers and individual events such as installation or purchase, which are passed via Adjust to Meta, TikTok and Google Ads (see Marketing & Tracking Disclosure). Chat content, memories and sensitive information are never shared. We do not knowingly sell or share the information of people under 16.
5. Retention
We keep your information as long as your account exists and delete it immediately upon account deletion, and from backups after no more than 90 days. We keep billing records for as long as legal obligations require.
6. Your rights
You have the right to:
- know which personal information we collect, use and disclose about you,
- receive a copy of your information,
- request deletion of your information,
- have inaccurate information corrected,
- opt out of the sale or sharing of your information,
- limit the use of your sensitive personal information to providing the services,
- not be discriminated against for exercising your rights.
7. Do Not Sell or Share My Personal Information
You can opt out of sharing at any time by withdrawing your tracking consent in the app settings or by writing to contact@naraa.ai. We also honour opt-out preference signals such as Global Privacy Control (GPC) where they are technically transmitted to us.
8. Submitting requests
Send requests to contact@naraa.ai. You can also exercise many rights directly in the app, such as deleting memories and exporting data. You can export chats, memory entries and generated images as a JSON file in the app. If you registered by SMS, you must add an email address before exporting; the export will be sent to that address. You can delete your account directly in the app. Before deletion, you must select a reason. The account is deleted immediately. Unused credits and active subscriptions lapse on deletion without reimbursement by naraa. You must also cancel a subscription in the App Store or Google Play; otherwise it will continue to renew there. The app reminds you of this. We verify your identity by matching your request with your account details. You may appoint an authorised agent; we may then ask for proof of authorisation. We respond to requests within 45 days; in justified cases this may be extended by a further 45 days.
9. Contact
naraa GmbH, Lokstedter Steindamm 33a, 22529 Hamburg, Germany, contact@naraa.ai