Privacy Policy

Overview

Bestie is provided by Cosalite Inc. This Privacy Policy explains how we collect, use, disclose, and otherwise process information when you use the Bestie mobile app, related websites, communications, and other products or services that link to this policy.

Bestie is an AI companion service that lets users chat, share messages, images, and audio, participate in live voice experiences, and receive personalized responses, summaries, reflections, memories, and insights over time. By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

Contact Information

Cosalite Inc.
169 Madison Ave #38377
New York, NY 10016

Email: [email protected]

Scope

This policy applies to information we collect when you access or use the Service, communicate with us, or otherwise interact with us in connection with Bestie.

Information We Collect

We collect information you provide directly, information collected automatically, information generated through your use of Bestie, and information we receive from third parties.

• Information you provide. This can include a pseudonymous account identifier created automatically when you first use Bestie, locally stored login credentials and authentication tokens, display name, pronouns, birthday, interests, relationship status, occupation, location, languages, preferences, personal sensitivities, topics you prefer to avoid, support messages, feedback, and information related to subscriptions, purchases, coins, virtual items, promotions, or customer support.
• Content you submit. This includes messages, prompts, text, photos, images, audio messages, voice inputs, voice recordings, shared links, imported content, reactions, reports, and other content you choose to submit.
• Information collected automatically. This can include device model, operating system, app version, build number, locale, time zone, language, network state, low power mode status, usage and analytics information, push notification tokens, approximate attribution or referral information including Apple AdServices attribution data where available, IP address, request metadata, timestamps, crash markers, and diagnostic data such as Apple MetricKit payloads.
• Information generated through your use of Bestie. Because Bestie is personalized, we may create or associate conversation history, AI-generated summaries, reflections, memories, recaps, profile insights, prompt context, safety and moderation signals, usage limits, subscription status, feature access state, and virtual item balances with your account.
• Information from third parties. We may receive transaction, subscription, restore, billing, and entitlement-related signals from Apple and app distribution platforms, as well as information from analytics, attribution, hosting, storage, communications, moderation, diagnostics, transcription, synthesis, and infrastructure providers that help us operate the Service.

How We Use Information

• To provide, maintain, secure, operate, and improve the Service.
• To create and manage your account and authenticate access.
• To process your messages, images, audio, voice sessions, recordings, and other inputs.
• To generate responses, personalized experiences, memories, summaries, recaps, reflections, and other outputs.
• To personalize the Service based on your profile, activity, preferences, sensitivities, and prior interactions.
• To process subscriptions, purchases, virtual items, and related support requests.
• To send push notifications, service messages, updates, and administrative communications.
• To analyze performance, usage trends, feature adoption, product quality, and reliability.
• To collect and analyze analytics events, crash reports, diagnostics information, and attribution data.
• To detect, investigate, prevent, and address fraud, abuse, misuse, unsafe conduct, and violations of our Terms.
• To comply with legal obligations and protect the rights, safety, and property of users, Cosalite, and others.
• To develop, train, improve, and refine our products, features, systems, models, and services, including through de-identified, aggregated, or otherwise transformed data where appropriate.

AI, Voice, Media, Diagnostics, and Personalization

Bestie is an AI-powered service. To provide a personalized experience, we may use your profile information, prior conversations, uploaded content, interaction history, memories, summaries, reflections, sensitivities, and other information associated with your use of the Service to maintain context across conversations, generate more relevant outputs, create summaries and insights, and improve response quality, safety, and product performance.

To operate the Service, we may send chats, prompts, profile details, images, audio, voice content, memories, summaries, reflections, sensitivities, and related context or metadata to third-party providers that help us generate, moderate, transcribe, synthesize, analyze, host, store, transmit, secure, or improve Bestie functionality.

If you use image-sharing features, we may upload, store, process, analyze, and use images you provide to support Service functionality, including understanding image content, generating outputs, moderation, safety review, quality improvement, storage, and related features.

If you use audio or voice features, we may process live voice audio, audio messages, voice inputs, transcripts, and related metadata to provide the Service. This may include transcription, synthesis, moderation, quality review, storage of transcripts as part of your conversation history, and, where we determine it is necessary for functionality, quality, safety, support, or product improvement, recording, encoding, and storing voice call audio and related metadata.

We may also collect and process analytics, crash, and diagnostics information associated with your use of the Service, including locally buffered analytics events, crash markers, performance metrics, and device diagnostics payloads we receive from Apple platform features such as MetricKit.

If you enable notifications, we may collect and use your push notification token and send notifications informed by your activity, engagement, or conversation history. These notifications may include personalized text or message content delivered through Apple Push Notification service.

We may collect and use attribution information, including Apple AdServices attribution data where available, to understand campaign performance, app installs, and marketing attribution.

We treat voice content as sensitive information and do not use it to identify you biometrically without your consent.

By providing information that may be considered sensitive under applicable law, such as health information, personal beliefs, sexual orientation, personal sensitivities, emotional triggers, or similar information within your chats, profile, images, audio, or voice interactions, you expressly consent to the processing of that data to provide and improve the Service. You may choose not to share sensitive information; doing so will not prevent you from using the core features of Bestie.

AI-generated outputs may be inaccurate, incomplete, outdated, or inappropriate in some circumstances. You should not rely on Bestie for medical, mental health, legal, financial, or other professional advice.

How We Disclose Information

• Service providers. We may disclose information to vendors, contractors, and service providers that perform services on our behalf, including providers of hosting, cloud storage, analytics, communications, authentication, customer support, diagnostics, moderation, security, subscriptions, and AI or model infrastructure.
• AI, infrastructure, and processing providers. To operate Bestie, we may disclose prompts, chats, conversation history, profile details, memories, reflections, summaries, images, audio, voice content, transcripts, analytics events, diagnostics data, metadata, and related context to third-party providers that help us generate, process, transcribe, synthesize, analyze, moderate, store, transmit, host, secure, attribute, or improve Service functionality.
• Legal and safety disclosures. We may disclose information when we believe in good faith that doing so is necessary to comply with applicable law, enforce our agreements and policies, detect or address fraud, abuse, security, or technical issues, or protect the rights, property, or safety of Cosalite, users, or others.
• Business transfers. We may disclose information in connection with a merger, acquisition, financing, restructuring, asset sale, bankruptcy, or similar transaction.
• With your direction. We may disclose information when you direct us to do so or otherwise consent.
• Internal access and administrative tools. Authorized personnel and service providers acting on our behalf may access information when reasonably necessary to operate, support, secure, moderate, investigate, debug, audit, or improve the Service.
• Aggregated or de-identified information. We may use, disclose, and publish aggregated, anonymized, de-identified, or otherwise non-personal information for lawful business purposes.

Subscriptions, Purchases, and Virtual Items

If you purchase a subscription or virtual item through Apple, billing and payment processing are handled by Apple. We may receive transaction-related information such as product identifiers, subscription status, renewal state, expiration dates, and related purchase metadata in order to provide access, validate purchases, restore entitlements, and support users.

Virtual items, coins, and similar digital features are part of the Service experience and may be adjusted, modified, discontinued, or removed consistent with our Terms.

Push Notifications and Communications

If you enable notifications, we may send service-related, transactional, promotional, engagement, or product-related notifications, subject to your device settings and applicable law. These notifications may be informed by your account activity, conversation history, follow-ups, streaks, inactivity, or similar engagement signals, and may include message content or other personalized text delivered through Apple Push Notification service.

You can manage notification preferences through your device settings and, where available, within the app.

Sharing and Imported Content

Bestie may allow you to import or share text, links, images, audio, or other content from your device or from other apps. If you choose to use those features, we will process, upload, store, and analyze the imported content to provide the Service.

Data Retention

We retain information for as long as reasonably necessary to provide the Service, operate our business, comply with legal obligations, resolve disputes, enforce agreements, and protect our rights and users. This may include retaining chats, transcripts, summaries, memories, reflections, prompt context, analytics records, attribution records, diagnostics data, and stored media for different periods depending on product, safety, operational, legal, and backup needs.

Retention periods may vary depending on the type of information, how it is used, system requirements, legal obligations, safety needs, backup cycles, and whether deletion has been requested. We may retain certain information after account closure or deletion where reasonably necessary for legal compliance, fraud prevention, abuse prevention, auditing, enforcement, backup integrity, or legitimate business purposes.

Account Deletion

You may request account deletion through the app or by contacting us at [email protected].

When you request account deletion, we will take steps to delete or de-identify your personal information within a reasonable period, subject to legal obligations, security and fraud-prevention needs, technical limitations, and backup retention. Requesting deletion starts our deletion process, but deletion may not be immediate across all systems.

Some information may remain temporarily in backups, logs, caches, or disaster recovery systems until overwritten in the ordinary course, or for longer where retention is required or permitted by law for security, fraud prevention, dispute resolution, compliance, or enforcement purposes.

If you have an Apple subscription, deleting your account does not automatically cancel billing. You must manage or cancel subscriptions through your Apple account settings.

Children

Bestie is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We rely on users to represent their age accurately. If we learn that a user under 13 has created an account or provided personal information without appropriate authorization, we will take steps to delete the account and associated information as required by applicable law.

If you believe a child under 13 has provided information to us, contact [email protected].

Your Choices and Privacy Rights

We do not sell your personal data. We do not sell personal information to third parties as that term is defined under applicable privacy laws.

Depending on where you live and subject to applicable law, you may have rights that include the ability to:

• access your personal data and request a copy;
• correct inaccurate personal data;
• request deletion of your personal data, subject to exceptions;
• request portability in a structured, commonly used, machine-readable format;
• opt out of targeted advertising purposes;
• opt out of certain profiling activities; and
• appeal a privacy request denial where applicable.

You may also update some profile information in the app, request deletion of your account, control push notifications through device settings, and manage subscriptions through your Apple account settings.

To make a privacy request, contact [email protected]. We will respond within 45 days of receipt, and may extend this period by an additional 45 days where reasonably necessary. We may need to verify your identity before responding, and we may decline or limit requests where permitted by law.

International Processing

We may process and store information in the United States and other countries where we or our service providers operate. These locations may have data protection laws that differ from those in your jurisdiction.

When you use the Service, you understand that your information may be transferred to, stored in, and processed in countries outside your place of residence, including the United States. Where required by applicable law, we take steps designed to provide an appropriate level of protection for cross-border transfers of personal information.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. However, no security measure is perfect, and we cannot guarantee absolute security.

You are responsible for maintaining the security of your device, credentials, and account access.

Third-Party Services

The Service may link to or integrate with third-party services, websites, platforms, or tools. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review their policies separately.

Do Not Track

Your device may offer Do Not Track settings. Because there is no universally accepted standard for responding to such signals, we may not respond to them.

Region-Specific Disclosures

Delaware residents. If you are a Delaware resident, you have rights under the Delaware Personal Data Privacy Act, including rights to access, correct, delete, obtain a portable copy of your personal data, opt out of targeted advertising, and opt out of certain profiling. If your appeal is denied, you may contact the Delaware Department of Justice at https://ago.delaware.gov.

California residents. If you are a California resident, you may have rights under the CCPA as amended by the CPRA, including rights to know, delete, correct, obtain a portable copy, opt out of the sale or sharing of personal information, limit certain uses of sensitive personal information, and not be discriminated against for exercising your rights. We do not sell personal information or share it for cross-context behavioral advertising.

Other U.S. states. Residents of Virginia, Colorado, Connecticut, Texas, Oregon, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, obtain a portable copy of their personal data, and opt out of certain processing.

EEA, UK, Switzerland, Australia, and Canada. If you are located in one of these jurisdictions, additional disclosures may apply, including information about legal bases for processing, sensitive information, international transfers, and rights to access, correct, delete, object to or restrict certain processing, request portability, withdraw consent where applicable, and lodge a complaint with a regulator.

To exercise rights or submit an appeal, contact [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. If we make changes, we will revise the Last Updated date and, where required by law, provide additional notice.

Your continued use of the Service after the updated Privacy Policy becomes effective means you accept the revised Privacy Policy.

Contact Us

If you have questions or requests about this Privacy Policy or our privacy practices, contact:

Cosalite Inc.
169 Madison Ave #38377
New York, NY 10016
[email protected]