Privacy Policy

1. Who operates Groupic

Groupic is operated by Dirga Utomo, an individual developer based in Indonesia (“we”, “us”). For privacy questions, contact fingercode21@gmail.com.

2. Information processed on your device

When you grant permission, the App analyzes your photo and video library and, if you use contact-cleanup features, your contacts. This processing is performed on your device. The App uses media and contact information to identify duplicates, similar or blurry media, screenshots, large files, and duplicate contacts. You control the relevant iOS permissions and can change them in iOS Settings.

The App's analysis features do not upload raw photos, videos, or contact records to Groupic's servers. Analysis results, storage summaries, and chat history are stored locally by the App. Media deletion or contact changes require your action in the App.

3. Optional AI Chat

If you choose to use AI Chat, the App sends your current prompt and recent conversation messages to OpenAI to generate a response. A request may also include an App-generated context summary, such as device or library counts, storage usage, access status, and aggregate analysis results. The App currently sends requests to OpenAI's Chat Completions API using the gpt-4o-mini model.

Raw photos, videos, and contact records are not included in the AI request by the current implementation. Do not include sensitive personal information in a chat prompt unless you are comfortable sending it to the AI provider. OpenAI processes information under its own terms and privacy policy, and may retain API data for a limited period to monitor for abuse. Under OpenAI's API terms, data sent through the API is not used to train its models by default.

4. Device identifier and purchase-related information

The App does not require an account. It creates a device identifier using Apple's identifier-for-vendor value where available, with a generated identifier as a fallback. The identifier is stored in the iOS Keychain and is used to associate token balances and purchase entitlements with an installation/device.

The current app code uses Firebase Firestore to store and synchronize information such as the device identifier, token balances, lifetime-entitlement status, transaction and product identifiers, purchase and expiry dates, Apple receipt data used to verify purchases, and the time of your last activity. Apple processes App Store payments; Groupic does not receive your full payment-card details through the App.

5. Information on the Website

The current Website source does not include an analytics or advertising script, sign-up form, or contact form. The Website's hosting provider may still process standard connection and security logs, such as IP address, browser/device information, requested page, and request time. We do not use these logs to identify individual visitors.

6. Service providers and disclosures

Information is shared with service providers only as needed to provide the features described above:

• OpenAI: receives AI Chat prompts, recent conversation messages, and App-generated context when you use AI Chat.
• Google Firebase: Firestore stores and synchronizes device-linked token and purchase-entitlement records.
• Apple: processes App Store purchases and provides the App Store and iOS permission frameworks.
• Website host: delivers the Website and may process technical access logs.

These providers may process information in locations where they or their service infrastructure operate. By using the App you understand that your information may be transferred to and processed in countries other than your own. We do not sell your personal information.

7. Storage, retention, and deletion

Analysis summaries and chat history are stored locally in the App. The App also stores a device identifier in the Keychain. Removing the App may remove its local database, but a Keychain item may persist after uninstalling. Removing the App does not automatically delete records already stored in Firebase.

Server-side records in Firebase (device identifier, token balances, entitlement and transaction records) are kept for as long as needed to provide token balances and restore purchases. You can request deletion by emailing fingercode21@gmail.com from the device concerned, including your device identifier if available; we will delete or anonymize the records within 30 days, except where we must retain transaction records by law. AI Chat content sent to OpenAI is retained by OpenAI according to its own policies.

8. Your choices and privacy rights

• You can deny or revoke Photos and Contacts permissions in iOS Settings.
• AI Chat is optional; you can avoid sending prompts by not using that feature.
• You can remove locally stored chat messages from within the App where that feature is available.
• Depending on where you live, you may have rights to access, correct, delete, or restrict the use of personal information. Contact us to make a request.

To make a request, email us at the address in Section 12. We will respond within 30 days.

9. Security

We use the security features provided by iOS and our service providers to protect information. No method of storage or transmission is completely secure.

10. Children

Groupic is rated 4+ on the App Store, but AI Chat and purchases are intended for users who are old enough to agree to these terms in their country, or who use the App with a parent or guardian's consent. We do not knowingly collect personal information from children for profiling or advertising. If you believe a child has provided information, contact us and we will delete it.

11. Changes to this policy

We may update this policy when the App, Website, or data practices change. The effective date above shows when this policy was last updated. Material changes will be reflected on this page and, where appropriate, in the App.

12. Contact

For privacy questions or requests, email fingercode21@gmail.com.