Privacy Policy

Effective Date: September 5, 2026  |  Developer / Entity: Prompteg Studio (prompteg.com)  |  Contact: support@prompteg.com

This Privacy Policy applies to the Prompteg Native Android Application and the prompteg.com web platform (collectively, the "Service" or "Prompteg"), provided and operated by Prompteg Studio. We are deeply committed to respecting your privacy, protecting your personal data, and maintaining full transparency in compliance with Google Play Developer Policies, GDPR, and international data protection laws.

1. Information We Collect and Real Data Categories

Prompteg collects and processes only the minimal amount of personal and technical data necessary to operate our service, synchronize your AI prompt collections, and maintain infrastructure security:

• Personal Identifiers (Google Sign-In): When you sign in with Google, we receive and store your full name, email address, profile picture URL, and unique Google Subject/OAuth User ID (sub).
• User Activity & Personal Studio Vault: Bookmarked prompts (Saved Favorites), hearted prompts (Likes), prompt copy interaction counters, and recently explored prompt browsing history.
• Push Notification Tokens: For users who opt in to receive mobile push notifications, an anonymous OneSignal Player ID / device token is registered.
• Device, Network & Security Telemetry: IP address, User-Agent, device OS, and standard HTTP server access logs used for rate limiting, brute-force mitigation, and DDoS defense.
• Advertising & Usage Analytics: Anonymized interaction data processed via Google AdMob, Google AdSense, and Google Analytics.
• In-App Purchases & Subscriptions: Purchase and subscription metadata processed securely through Google Play Billing.

2. Purposes of Data Processing

We use the collected information strictly for the following verified purposes:

• Authentication & Account Management: Providing passwordless 1-click Google OAuth login and managing user account identity.
• Core App Functionality & Cloud Sync: Syncing your saved prompt vault, copy history, and liked artwork across your mobile devices and web browsers.
• Push Notifications: Delivering opt-in daily creative prompt alerts, feature updates, and system notices.
• Security & Fraud Prevention: Protecting account integrity, preventing automated abuse, and maintaining network safety.
• Advertising & Aggregate Analytics: Displaying contextual and non-intrusive advertisements to support the free platform, and measuring aggregate system performance.

3. Third-Party Services & Subprocessors

Prompteg integrates with trusted industry-leading third-party service providers to power specific application features:

4. Data Security & Storage Safeguards

We implement rigorous technical and organizational safeguards to protect your personal data:

• Encryption in Transit: Data transmitted between Prompteg clients and our servers is protected using HTTPS/TLS.
• Isolated Database Storage: SQLite/MySQL databases are strictly protected against public web traversal via server-level access rules.
• Session Hardening: Single-use authentication tokens (10-minute validity), User-Agent verification, and CSRF token defenses.
• Prepared Statements: Database interactions use parameterized PDO statements to ensure robust and secure data handling.

5. Data Retention & Erasure Policy

We retain personal user data only for as long as your account remains active. Server security logs may contain IP addresses and related technical information. These logs are retained for 30–90 days for security, fraud prevention and network protection.

6. User Account Deletion & Right to Be Forgotten

In compliance with Google Play User Data policies, users have the right to delete their account and all associated personal data at any time, both from inside the app and via the web:

What Happens Upon Deletion: Your user profile (Name, Email, Avatar, Google ID), personal prompt collection vault, liked prompt records, prompt copy history, and authentication sessions are permanently and irreversibly erased from our live databases.

⚠️ Note for Google Play Subscribers: Deleting your Prompteg account removes your data from our servers but does not automatically cancel active subscriptions billed through Google Play. Please manage or cancel recurring subscriptions in the Google Play Store (Play Store App > Profile Icon > Payments & Subscriptions > Subscriptions).

7. Children's Privacy

Prompteg does not knowingly collect or solicit personal information from children under the age of 13. If you believe that a child under 13 has provided us with personal information, please contact us immediately at support@prompteg.com, and we will promptly delete such records.

8. Privacy Inquiries & Contact Information

If you have any questions, concerns, or data protection requests regarding this Privacy Policy, please reach out to our privacy team: