Privacy Policy

Summary

OriginPilot is local-first: the ideas, answers, and app kits you create are stored in your browser's local storage on your own device by default. On deployments where accounts are enabled, AI features require signing in (so usage limits can be applied fairly), and while you're signed in your projects are also synced to your account automatically so they're available across your devices. AI actions send your text to an AI provider only when you explicitly trigger them — never in the background. We never sell your data. We apply the same strong privacy standard to everyone, in every country.

What we collect, and where

• On your device (local storage): your projects, answers, generated app kits, version history, a display name you optionally enter, and preferences (first-run onboarding state, cookie choice, layout choices like sidebar and panel sizes, and your latest usage meter).
• In your account — when accounts are enabled and you sign in: your email address (to authenticate you) and, if you sign in with Google, the name and profile picture on your Google account; your projects (synced to your account automatically while you're signed in, so they work across devices); and a usage record of your AI actions (to apply fair-use limits).
• Billing — only if you start a checkout or subscribe to a paid plan: payments are handled by our payment processor on its own secure checkout pages. When you open checkout, we share your email address and an account reference with it. We never see or store your card number. We store only your subscription plan and status, a reference to your customer and subscription record with the processor, your billing country/tax status, and the current billing period — enough to know what your account is entitled to.
• Sent to an AI provider — only when you trigger an AI action: the text you submit (your idea, answers, and prompts), a reference image only if you attach one and explicitly ask for it to be used, and — if you import an existing project — a summary of that project (file names, dependency lists and short excerpts of its README and docs, not its source code). It is sent server-side to our AI model providers solely to produce that result. Outputs are generated suggestions, not human-reviewed advice.
• Sent to a speech-to-text provider — only if voice input is enabled on this deployment and you confirm a recording: the audio is transcribed and used as your input.
• Error diagnostics — only if monitoring is enabled on this deployment: when the app hits an error, a technical crash report (a stack trace plus non-personal context) is sent so we can fix it. From your browser, only actual errors are sent — no session recording, and no tracking of the pages you visit. Separately, our own servers sample a small share of request timings (which endpoint, how long it took) so we can spot outages; that contains no personal data and no browsing history. Neither is ever used to build a profile of you or tied to your IP address.
• Analytics — only if you consent: if analytics is configured, product-usage events are collected only after you accept analytics cookies. You can decline or withdraw at any time (see Cookies).

If a given deployment has no accounts, AI key, voice key, billing, monitoring, or analytics configured, those steps simply don't happen — the app runs fully on your device.

Who processes your data (sub-processors)

We don't sell data. We share it only with the service providers ("processors") needed to run the features you use, each bound to process it only on our instructions:

• Cloud hosting & infrastructure — running and delivering the app; account sign-in and the database that stores your synced projects and usage record; storage for share links (only if you create one); and short-lived security counters that protect the service from abuse.
• AI model providers — process what you submit when you trigger an AI action (your text, a reference image only if you attach one and ask for it to be used, and an imported project's summary only if you import one), to generate your result.
• A speech-to-text provider — transcribes audio, only where voice input is enabled and you confirm a recording.
• A payment processor — checkout, subscription billing, receipts and tax calculation, only if you start a checkout or subscribe.
• An email delivery provider — account, sign-in and support emails.
• An error-monitoring provider — crash reports and our own request timings, where monitoring is enabled (no behavioural or usage tracking, no session recording, and no cookies).
• A product-analytics provider — product-usage events, only after you consent.

If you choose Continue with Google, Google confirms who you are and shares your name, email address and profile picture with us. Google does this under its own privacy policy, acting on its own account rather than as our processor.

We keep this list current as our providers change. You can ask us for the names of the providers that process your data at any time — see "Who we are & how to contact us" below.

Why we process it (lawful bases)

• To deliver the service you asked for (produce results, save/sync your work) — performance of our agreement with you.
• To keep the service secure and available (fair-use limits, abuse prevention, diagnostics) — our legitimate interests.
• To process subscriptions you buy and meet tax/accounting duties — contract and legal obligation.
• Analytics — your consent (which you can withdraw anytime).

Your rights (all countries)

Wherever you live, you can ask us to: access a copy of your data, correct it, delete it (erasure), export/port it, restrict or object to processing, and withdraw consent for anything based on consent. You will never be treated differently for exercising these rights. You can also complain to your data-protection authority (for example the ICO in the UK, your EU supervisory authority, or your local regulator). Most of these are self-serve: Download my data and Delete account live in Settings → Account. For anything else, contact us below and we'll respond promptly.

Cookies & analytics

• Strictly-necessary cookies keep you signed in and the app working — these are always on and need no consent.
• Analytics cookies are off by default and load only after you accept them in the cookie banner. You can change your choice anytime in Settings → General (the "Analytics cookies" toggle); declining or withdrawing means no analytics cookies are set and no product-usage events are collected.

Do Not Sell or Share

We do not sell or share your personal information, and we do not use it for cross-context behavioural advertising. There is nothing to opt out of because we never do this.

International data transfers

Our providers may process data in countries other than yours (for example the United States). Where required, such transfers rely on recognised safeguards — Standard Contractual Clauses, an adequacy decision, or the EU-US/UK/Swiss Data Privacy Framework.

How long we keep it

• Local data stays in your browser until you delete it (or clear your browser's site data).
• Synced projects stay in your account until you delete the projects or your account.
• AI usage records are kept only as long as needed to apply fair-use limits across billing periods.
• Subscription records are kept while active and as required for tax/accounting afterwards. If your plan lapses, your access narrows but your projects are never deleted for that reason.

Children

OriginPilot is not directed to children under 16 (or the minimum age in your country), and we do not knowingly collect their data.

Your controls

• Download my data (Settings → Account) exports the data we hold for your account as a file.
• Delete account (Settings → Account) permanently deletes your account and its synced projects, usage records, and subscription reference, and cancels any active subscription. This is self-serve — no email required. Some records may be retained where the law requires (for example billing/tax records), and residual copies may persist in encrypted backups for a limited period before they are cycled out.
• Delete all data (Settings → Account) permanently removes everything OriginPilot stored in this browser. It does not delete projects you synced to an account — use Delete account for that.
• You can delete individual projects from the project list at any time (deleting a synced project removes the synced copy too).
• Subscriptions are managed through the billing portal on the pricing page — cancelling stops future charges; your projects remain.

Who we are & how to contact us

The service is provided by AUVI FZE · Trade licence 20582/2026 · licensed by Fujairah Creative City – Free Zone Authority, UAE · Fujairah – Twin Towers, P.O. Box 4422, Fujairah, United Arab Emirates. We are the controller of your personal data. For privacy questions, access/export requests, deletion, or to exercise any right above, contact: prabeeshpk05@gmail.com. (A dedicated privacy contact address is being set up; this inbox is monitored in the meantime.) If you are in the UAE, you can also raise a consumer complaint with the UAE Ministry of Economy consumer-protection service.

Applies worldwide

This policy grants the same strong protections to every user and is written to meet, as a single baseline, the EU GDPR, UK GDPR, California CCPA/CPRA, Brazil LGPD, Canada PIPEDA, Australia's Privacy Act, India's DPDP Act 2023, and the UAE PDPL. Where your local law grants you more, that law applies.