Privacy Policy

1. What we collect

• Your account. When you sign in with Google or with Apple, we receive your email address and that service’s identifier for your account. With Sign in with Apple you may share a private relay address instead of your own. We never receive your Google or Apple password.
• Your questions and chats. The questions you ask, the answers, the chats they belong to, the names you give your chats, and who may see each one.
• Files you attach. A voice recording, photo, screenshot or PDF is sent to be turned into text, and is not stored. Only the text you then choose to ask is kept, as your question.
• Free-question counts. If you ask without signing in, we count that day’s free questions against a salted hash of your network address, never the address itself. The count is used only for that day.
• Tokens. Your daily allowance, any loaded token balance, and a record of each change to it. If you buy tokens on the website, a record of the purchase (pack, amount, status); Lemon Squeezy, not us, handles your card or PayPal details.
• Reports. If you report a chat, the chat, the reason you chose, and your account if you were signed in.
• Website analytics. The website uses Google Analytics, which sets cookies, to tell us which pages are used. The iPhone app contains no analytics or advertising tools.
• Technical logs. Our servers’ logs record requests, including network addresses, for security and troubleshooting.

2. How we use it

To answer your questions and show your chats on every device you sign in on; to apply the free daily allowance and your token balance; to keep the service secure and stop abuse; to review reported chats; and to improve how we find and rank the law. An impersonal, normalized form of a question may be kept in a retrieval cache that is not linked to your account.

We do not sell personal information, do not use it for advertising, and do not track you across other companies’ apps or websites. We do not train AI models on your questions.

3. Who processes it

We use these providers, each only for its part of the service:

• OpenAI receives the text of a question, with the laws and decisions retrieved for it, to write the answer; and receives attached files to turn them into text. Anthropic may receive Supreme Court decisions to draft case digests.
• Railway hosts our servers and database.
• Google and Apple confirm who you are when you sign in with them.
• Lemon Squeezy processes payments for loaded tokens on the website, as merchant of record.
• Google Analytics measures website use.

Some of these providers process data outside the Philippines. We may also disclose information when the law requires it.

4. Public chats

A chat you start while signed in is private: only you can open it. You can choose to share it by link or make it public, which lists it under Public chats for anyone to read. Questions asked without signing in are public and listed there too. Do not put names, contact details or other personal information about yourself or anyone else in a chat you make public.

Anyone can report a public chat as offensive, harassing, spam, or as sharing personal information, and can block its author in the app. We review reports and unlist or delete chats that break the Terms.

5. How long we keep it, and deleting it

We keep your account, questions and chats until you delete them. You can delete single questions from Your questions, and in the iPhone app you can delete your whole account: open the menu, scroll to the bottom and choose Delete account. That permanently removes your account, every chat you started, every question you asked, your tokens and your purchase records. If you signed in with Apple, we also ask Apple to end the app’s Sign in with Apple link. You can also email us to delete your account.

Questions you asked in someone else’s public chat are deleted with your account, and a chat you started is deleted whole, including other people’s questions in it. Reports you made stay, without your account. The impersonal retrieval cache, server logs and backups are cleared on their own schedules. Payment providers keep their own records of payments as the law requires.

6. Security

Traffic is encrypted in transit. The app keeps its sign-in tokens in the phone’s secure keychain, and we store only one-way hashes of sign-in refresh tokens and personal access tokens. No system is perfectly secure; tell us at once if you suspect someone has used your account.

7. Your rights

Under Republic Act No. 10173, the Data Privacy Act of 2012, you may ask to be informed about, access, correct, object to the processing of, and erase your personal information, and to receive a copy of it. Email us to exercise these rights. You may also complain to the National Privacy Commission.

8. Age

Philippine Legal AI is for people aged 18 and over, as the Terms require. We do not knowingly collect information from anyone younger.

9. Changes

If this policy changes, we will update the date above and tell you about material changes before they apply.

10. Contact

Privacy questions and requests: support@philippinelegalai.com.