ImChat Logo ImChat

Privacy policy

Effective date: 03/05/2025

Last updated: 04/05/2025

1. Introduction

Welcome to the Privacy Policy of ImChat (“Policy”). We appreciate your trust and are committed to protecting your personal data and respecting your privacy rights.

This Privacy Policy explains how LLC Psychos AI, a company registered in Ukraine (“Company”, “we”, “us”, or “our”), collects, processes, stores, and uses personal data when you (“you”, “User”) access and use the ImChat mobile and web-based application (“App”, “Service”).

ImChat is an AI-powered platform that enables users to upload, process, and generate visual content — including images and videos — through tools such as resolution upscaling, enhancement, transformation, and algorithmic generation. In order to operate the App and provide these services effectively and securely, we may collect and process certain information about you.

This Policy applies to all interactions you have with the App, including data collected through:

  • Direct registration and use of your user account;
  • Uploaded or generated content;
  • Communications with our support team;
  • Browsing, usage analytics, or automated technologies.

We encourage you to read this Policy carefully and in full. By using the App, you acknowledge that you have read, understood, and agreed to the terms outlined here, and consent to the processing of your personal data as described.

This Privacy Policy forms an integral part of our Terms & Conditions, which govern your use of the App and are available at: imchatai.io/terms-of-use.

If you do not agree with this Policy or any part of it, you should discontinue using the App.

If you have any questions or concerns about how we handle your personal data, please contact us at the support email address listed in Section 16 of this Policy.

2. Collected data

2. Collected data We collect and process only the data that is necessary for the operation, security, improvement, and personalization of the App. This section explains what types of data we collect, how we obtain it, and under what circumstances.

2.1. Information you provide voluntarily When using the App, you may voluntarily provide the following types of personal information:

  • Registration details: Your email address and password (or third-party credentials, such as a Google account);
  • Uploaded content: Any media (e.g., images, videos, or files) that you upload, generate, or process within the App;
  • Communications: Any messages or inquiries you submit via in-app support or direct correspondence.

You are responsible for ensuring that the information you provide is accurate and up-to-date.

2.2. Automatically collected information When you interact with the App, certain information is collected automatically for operational and analytical purposes. This includes:

  • Device and technical data:
  • Device type, model, operating system, and version;,Browser type and language settings (for web users);,Device identifiers such as MAC address, IP address, and Firebase Cloud Messaging (FCM) token (used for push notifications).
  • Usage data:
  • Date and time of visits;,Features accessed and user actions within the App;,Session duration and crash logs.
  • Analytics data: Collected through integrated third-party tools such as Google Analytics, Firebase Analytics, Amplitude, Appsflyer, and UXCam.

This data helps us monitor app performance, detect bugs, and understand usage patterns in order to improve the Service.

2.3. Data from third-party services If you choose to register using an external authentication provider (e.g., Google Sign-In), we may receive basic information associated with your account, such as:

  • Your email address;
  • Your public profile name and profile image (if authorized).

We only receive the minimum required information and do not access or store your third-party passwords.

2.4. While we do not actively request or require you to submit any special categories of personal data (as defined under Article 9 of the GDPR) — such as health data, biometric identifiers, political beliefs, racial or ethnic origin, or religious affiliations — we acknowledge that the content you upload (e.g., images or text inputs in the chat interface) may inadvertently include such information.

By uploading any such content, you confirm that:

  • You do so voluntarily and at your own discretion;
  • You have the lawful right and consent (where applicable) to share that data;
  • You understand that the data will be processed automatically by AI systems, without human review, for the purpose of delivering the Service.

We treat all uploaded content with a high level of confidentiality and do not use it for profiling, behavioral advertising, or third-party marketing.

2.5. If you are below the age of digital consent as defined in your country (typically 13 or 16 years old), you may only use the App with verifiable parental or legal guardian consent. We do not knowingly collect personal data from children without such consent.

3. Purposes of data processing

3.1. We process personal data to:

  • Register and manage your user account;
  • Authenticate your identity and allow secure access;
  • Enable you to upload, enhance, and generate visual content;
  • Deliver AI-generated outputs in response to your input.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR); user consent where required.

3.2. We may use your contact information to:

  • Send important account notifications (e.g., login alerts, password resets, billing confirmations);
  • Respond to user inquiries or support requests;
  • Notify you of changes to our Terms or Privacy Policy.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR); performance of a contract.

We do not use your email for promotional or marketing messages unless you explicitly opt in.

3.3. We process technical and behavioral data to:

  • Understand how users interact with the App;
  • Identify usage trends and improve user experience;
  • Monitor performance, conduct diagnostics, and resolve technical issues;
  • Optimize algorithms and features based on aggregated behavior.

Legal basis: Legitimate interest (user experience improvement); user consent where cookies or tracking are used.

3.4. We use personal data to:

  • Detect, investigate, and prevent fraud, abuse, and unauthorized access;
  • Monitor compliance with our Terms & Conditions;
  • Maintain the integrity and lawful use of the Service.

Legal basis: Legitimate interest (ensuring lawful, secure service); compliance with legal obligations.

3.5. We may be required to retain or disclose certain data:

  • To comply with legal and regulatory requirements;
  • To respond to lawful requests from public authorities;
  • To protect our legal rights in case of disputes.

Legal basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR).

3.6. When you interact with AI tools or the chat interface in the App, content is processed automatically through algorithmic systems. While this enables rapid generation of results (e.g., image enhancements), you should be aware:

  • The content is generated without human intervention;
  • It may not always be accurate, appropriate, or lawful;
  • It must not be used in critical contexts (e.g., legal, medical, financial, or emergency decision-making).

Legal basis: Performance of a contract and user consent to use AI-driven services.

5. Data sharing and disclosure

We treat your personal data with the highest level of confidentiality and do not sell, trade, or rent it to third parties. However, in order to operate the App effectively and provide you with seamless services, we may share your data with selected third parties under strict conditions and only for the purposes outlined in this Privacy Policy.

5.1. We may disclose your personal data to trusted third-party service providers who assist us in delivering and maintaining the functionality of the App. These include:

  • Cloud infrastructure providers (such as Google Cloud Platform, located in the United States), which host our virtual servers and store operational data;
  • Analytics and performance tracking platforms, such as Google Analytics, Firebase Analytics, Amplitude, Appsflyer, and UXCam — all of which help us understand how users interact with the App and where we can improve functionality;
  • Push notification providers, including Firebase Messaging, which enable us to deliver in-app messages and updates;
  • Technical support and maintenance providers who assist in resolving service issues and monitoring system performance.

All such partners act under contractual obligations that ensure the confidentiality, security, and lawful handling of your Personal Data in accordance with this Policy and applicable data protection laws.

5.2. We may access, preserve, or disclose your personal data if we believe it is reasonably necessary to:

  • Comply with applicable laws or respond to valid legal processes, including requests from public and government authorities;
  • Enforce our Terms & Conditions or protect the integrity and security of the App;
  • Detect, prevent, or otherwise address fraud, security, or technical issues;
  • Protect our rights, property, or safety, as well as those of our users or the public, as required or permitted by law.

5.3. In the event of a merger, acquisition, reorganization, or sale of assets, your Personal Data may be transferred as part of that transaction, subject to confidentiality requirements and your continuing rights as described in this Policy.

5.4. Due to the global nature of our infrastructure and service providers, your personal data may be transferred to, processed, and stored in countries other than your country of residence — in particular, the United States, where the servers of our main infrastructure partners (e.g., Google Cloud Platform) and several analytics and messaging services are located.

Such transfers are necessary for the performance of our services and are made in full compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for Users located in the European Economic Area (EEA). Where applicable, we rely on one or more of the following legal mechanisms to ensure adequate protection of your data when transferred internationally:

  • Standard Contractual Clauses (SCCs) adopted by the European Commission, which ensure that data recipients outside the EEA commit to providing a level of protection essentially equivalent to that guaranteed within the EEA;
  • Adequacy Decisions by the European Commission, recognizing certain countries as providing adequate data protection;
  • In cases where data is transferred on the basis of legitimate interests or contractual necessity, we implement additional safeguards to protect your privacy, such as encryption, access controls, and strict contractual obligations with service providers.

We require that all recipients of your Personal Data, regardless of their country, adhere to strict data protection standards and only process your data for the limited and legitimate purposes outlined in this Privacy Policy.

You may request additional information on the specific transfer mechanisms or copies of applicable safeguards by contacting our support team at the email provided in the Contact section of this Policy.

6. Data storage and retention

6.1. Where we store your Personal Data
Your personal data is securely stored on cloud infrastructure provided by Google Cloud Platform (GCP), currently located in the United States (US region). GCP complies with international data protection standards and provides robust security and reliability for stored information. In addition, analytics and notification services that process some personal data — such as Firebase, Google Analytics, Appsflyer, Amplitude, and UXCam — are also hosted primarily in the United States.
We do not access or store any payment data directly. Payments and subscription transactions are processed through trusted third-party platforms, such as Apple App Store and Google Play, which manage your financial data in compliance with their respective privacy policies and applicable regulations. The Company has no access to your credit card details or complete payment credentials.

6.2. How long we retain your personal data
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to comply with legal, accounting, or reporting obligations, or until you delete your account using the “Delete Account” feature — whichever comes first. Specifically:

  • Data associated with active User Accounts is retained for the duration of the Account’s existence.
  • Upon account deletion, your data is permanently and irreversibly deleted from our systems, unless legal obligations require otherwise.
  • If backup copies exist, we ensure they are inaccessible and scheduled for secure erasure during the next backup cycle.
  • We regularly assess our data retention practices to ensure compliance with the principle of data minimization and to prevent excessive storage.

6.3. Accounts that remain inactive for a prolonged period (e.g., 12 months) may be subject to deactivation. Before deactivation, we will notify the User. If no action is taken, the data associated with the Account may be permanently deleted.

6.4. We have implemented organizational and technical measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These include:

Organizational safeguards:

  • Internal data access policies and limited personnel access;
  • Non-disclosure agreements (NDAs) with team members;
  • Employee security training and internal compliance policies.

Technical safeguards:

  • Two-factor authentication (2FA) for administrative access;
  • Encryption in transit and at rest;
  • Firewalls and intrusion prevention systems;
  • Regular backups and incident response protocols.

6.5. In the event of a data breach that may compromise your personal data, we commit to notifying the relevant supervisory authorities within 72 hours where required by law (such as GDPR). If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.

6.6. While we take appropriate steps to protect your data, please note that no method of transmission over the internet or method of electronic storage is 100% secure. You transmit your data at your own discretion and risk.

7. Your rights

We respect your rights concerning your personal data and strive to provide you with meaningful control over how it is used. Depending on your jurisdiction, including but not limited to the European Union (under the General Data Protection Regulation – GDPR), you may have the following rights:

7.1. Right to access: you have the right to request access to the personal data we hold about you, including details of how we process your data and for what purposes.

7.2. Right to rectification: you may request correction of inaccurate or incomplete personal data about you. You can also update your information directly in your Account settings.

7.3. Right to erasure (“Right to be forgotten”): you can request deletion of your personal data, which we will fulfill unless we are legally obligated to retain it. This includes all data processed via your use of the App, and data deletion is permanent and irreversible upon using the “Delete Account” function.

7.4. Right to restriction of processing: you may request that we limit the way we use your personal data in specific circumstances — for example, when you contest its accuracy or object to its processing.

7.5. Right to data portability: you have the right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.

7.6. Right to object: you may object to the processing of your personal data when such processing is based on our legitimate interests or for direct marketing purposes (though we currently do not engage in marketing communications).

7.7. Right to withdraw consent: if we process your personal data based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

7.8. How to exercise your rights: to exercise any of the rights described above, please contact us at: support@imchatai.io. We may request verification of your identity before responding to your request. We aim to respond to all requests within one month. In complex or extensive cases, this period may be extended by two additional months, but we will notify you accordingly.

8. Sharing of personal data

8.1. We do not sell, rent, or trade your personal data to third parties. However, to ensure the proper functionality, security, and further development of the App, we may share certain personal data with trusted third-party service providers strictly on a need-to-know basis and in accordance with this Privacy Policy.

  • to deliver the services requested by you;
  • to comply with legal obligations or law enforcement requests;
  • to maintain or improve the App’s operations;
  • based on your explicit consent (where applicable).

8.2. We may engage third-party vendors to perform tasks on our behalf, including (but not limited to):

  • cloud hosting and data storage (e.g., Google Cloud Platform – USA),
  • email delivery and notification services (e.g., Firebase Messaging),
  • analytics and product usage tracking (e.g., Google Analytics, Firebase, Amplitude, UXCam, Appsflyer),
  • customer support tools.

These providers are granted access only to the minimum data necessary for their tasks and are contractually obligated to maintain the confidentiality and security of that data. They may not use it for any other purposes.

8.3. All payments are processed via third-party marketplaces (e.g., Apple App Store and Google Play Store), which independently handle and protect Your financial information. We do not have access to or store your payment card data (such as card numbers, expiration dates, or CVV codes).

8.4. Certain members of our internal staff (e.g., system administrators, support personnel) may have limited access to personal data to perform their duties (e.g., troubleshooting, account recovery). All such access is governed by strict confidentiality obligations and technical controls.

8.5. We may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies when required to do so by applicable law, or in response to a valid legal request (e.g., subpoena, court order).

8.6. In the event of a merger, acquisition, asset sale, or other corporate restructuring, your personal data may be transferred to a successor entity as part of the transaction. In such cases, we will ensure the recipient continues to respect your personal data in a manner consistent with this Policy.

8.7. Where personal data is transferred to a country outside the European Economic Area (EEA) that may not have equivalent data protection laws, we ensure appropriate safeguards are in place — such as standard contractual clauses (SCCs) approved by the European Commission or other lawful mechanisms — to guarantee adequate protection of your personal data.

9. Cookies and similar technologies

9.1. Cookies are small text files stored on your device when you use the App. They contain a unique user ID and information about your interactions with the App. These files are transmitted from a server and saved locally to support technical functionality and enhance your experience. Cookies do not contain viruses or harmful code and cannot access other data on your device. The App may use both session cookies (which are deleted after the session ends) and persistent cookies (which remain on your device for a defined period or until manually removed). These files help maintain stable operations, remember your preferences (such as interface language), and may enable basic statistical analysis.

9.2. The App only uses strictly necessary cookies essential for its operation, as well as personalization cookies (e.g., storing your language settings). According to applicable data protection laws (including the GDPR and ePrivacy Directive), such cookies do not require prior consent because they are necessary to provide the services you request. We do not use third-party, tracking, or marketing cookies. Cookie data is not transferred to any external party and is not processed outside of your device.

9.3. We currently use the following types of cookies:

9.4. Cookies are used for the following purposes:

  • To ensure secure and stable functionality of the App;
  • To support user authentication and session integrity;
  • To remember language and interface preferences;
  • To improve user experience and performance;
  • To perform anonymous, minimal statistical analysis (not personally identifiable).

All data collected through cookies is used strictly within the scope described in this Policy and is not harmful to your device or configuration.

9.5. You can manage or delete cookies at any time via your browser or device settings. Please note that disabling strictly necessary cookies may impair core functionality and affect your user experience. For example:

  • Chrome: Settings > Privacy and Security > Cookies and other site data
  • Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy

Changes to cookie settings may result in reduced functionality or limitations in using the App. The App does not offer an internal setting to disable strictly necessary cookies, as they are vital for operation.

10. Data breach notification

10.1. We are committed to protecting your personal data and maintaining the integrity, confidentiality, and availability of all information we process. Despite the technical and organizational safeguards in place, no system is entirely immune to data breaches or unauthorized access.

10.2. In the event that we become aware of a personal data breach that may result in a risk to your rights and freedoms, we will assess the impact without undue delay and, where required under applicable data protection laws, notify:

  • The relevant supervisory authority (e.g., in the EU, as required under Article 33 of the GDPR) within 72 hours of becoming aware of the breach;
  • Affected users without undue delay, if the breach is likely to result in a high risk to their rights and freedoms.

10.3. Our notification to affected users will include, at a minimum:

  • A description of the nature of the breach;
  • Contact information for further inquiries;
  • Likely consequences of the breach;
  • Measures taken or proposed to address the breach and mitigate its effects.

10.4. In cases where notification to users is not required (e.g., where the personal data was encrypted or otherwise secured), we reserve the right to document the breach internally in accordance with our obligations under applicable law.

10.5. If you believe that your personal data may have been compromised or you receive any suspicious communications relating to your use of the App, please contact us immediately at support@imchatai.io.

10.6. While the App does not currently send any marketing or promotional emails, we reserve the right to introduce such communications in the future. If this occurs, Users will be explicitly informed and asked for separate and unambiguous consent in accordance with applicable data protection laws. Such consent will not be bundled with other terms and can be withdrawn at any time through account settings or the “unsubscribe” link included in all marketing emails.

12. Changes to this Privacy Policy

12.1. The Company reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in legal obligations, data processing practices, or the functionality of the App.

12.2. All changes become effective immediately upon being posted in the App or on the website, unless otherwise specified. We strongly recommend that you review this Privacy Policy periodically to stay informed about how your personal data is being processed.

12.3. If the changes materially affect your rights or obligations under this Privacy Policy, we will make reasonable efforts to notify you through the App interface, by email (if available), or through other appropriate means.

12.4. Your continued use of the App following the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you must cease using the App and may request the deletion of your Account and associated personal data.

13. Dispute resolution

13.1. This Privacy Policy shall be governed by and interpreted in accordance with the applicable data protection and privacy laws of Ukraine, unless otherwise required by the laws of your country of residence.

13.2. In the event of any concern, complaint, or dispute related to the processing of personal data or the content of this Privacy Policy, you agree to first attempt to resolve the issue informally by contacting the Company at: support@imchatai.io.

13.3. The Company commits to reviewing and responding to your complaint within a reasonable time frame. We will make every effort to resolve the dispute in good faith and in a fair manner.

13.4. If a dispute cannot be resolved through informal negotiations, it shall be submitted to the competent courts of Ukraine, unless otherwise provided by applicable consumer protection laws.

14. Compliance with international laws

14.1. We acknowledge that Users may access the App from jurisdictions with different data protection laws, including but not limited to the United States, European Union Member States, and Ukraine. We are committed to complying with applicable data protection regulations relevant to the processing of your personal data in accordance with your country of residence, to the extent required by law.

14.2. If you are a resident of a country that imposes additional legal requirements on the processing of personal data (e.g., CCPA in California, LGPD in Brazil), we will make reasonable efforts to fulfill those obligations when they apply to your use of the App.

15. Contact information

15.1. If you have any questions, concerns, or requests related to this Privacy Policy, the processing of your personal data, or your rights as a data subject, you may contact us at the following address: support@imchatai.io.

15.2. We welcome inquiries regarding this Privacy Policy and are committed to resolving concerns promptly and transparently. Please include sufficient details in Your message to allow us to understand and respond to your request efficiently.

15.3. If You are a resident of the European Union or other jurisdictions with specific data protection authorities, you may also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.