Privacy policy

BaLLM is provided by Metin Arslantürk (“we”, “us”, or “our”). This policy covers the BaLLM iPhone app and this website. For privacy questions or requests, contact contact@apps.arslanturk.dev.

Your complete chat history, attached photos, and conversation summaries are stored locally on your device. BaLLM does not provide a cloud transcript archive, chat synchronization, or server recovery. When you ask for a reply, the app sends selected messages, relevant conversation context or summaries, and any included photos through our backend to our AI processing provider, OpenAI. This processing is necessary to generate responses and, when needed, summarize context. Do not submit information you do not have permission to share. Provider security and abuse-monitoring retention may apply; local history does not mean all processing takes place on your device.

• Device account: installation and device identifiers, authentication credentials or their protected representations, and account status. An installation identifier and secret are kept in the iOS Keychain and may persist after reinstalling the app. They support device authentication and help prevent repeated free-allowance abuse.
• Service usage: successful reply counts, request status, usage measurements, subscription entitlements, and operational or security metadata. Our chat database does not retain full conversation transcripts.
• Purchases: Apple and RevenueCat process subscription transactions, purchase identifiers, and entitlement status associated with your app account. We do not receive your full payment-card details.
• Analytics: Mixpanel receives an installation-associated identifier, selected app interactions, purchase/access events, and app/device information. These are pseudonymous analytics, not guaranteed anonymous data. Chat text, responses, photo contents, and conversation titles are excluded from our analytics events. We do not use session replay or advertising identifiers.
• Support: your email address and information you choose to send us.
• Website: Cloudflare hosts this site and may process IP addresses, request details, and security logs. This site does not add advertising trackers or analytics cookies.

We use information to authenticate your device, provide replies, operate free allowances and subscriptions, prevent abuse, troubleshoot issues, understand feature usage, and respond to support requests. Where applicable, we rely on performing our agreement with you for core services, legitimate interests for proportionate security and service improvement, legal obligations for required records, and consent where required. You may contact us to object to processing based on legitimate interests or to withdraw consent where processing relies on it.

We share the information needed for each function with our hosting and AI processing providers, Apple, RevenueCat, and Mixpanel. We may disclose information when required by law or necessary to protect lawful rights and service security. We do not sell personal information or share it for cross-context behavioral advertising. See the providers’ information: OpenAI, Apple, RevenueCat, Mixpanel, and Cloudflare.

Local conversations remain until you delete them or the app’s data is removed. We keep account, usage, purchase, support, and security records for as long as needed for the purposes described here, including resolving disputes and meeting legal obligations. Retention depends on the record type and provider requirements; we do not promise immediate deletion from all provider systems or backups. We use HTTPS for service communication and restrict access to operational information. No method of storage or transmission is completely secure. Service providers may process information outside your country, including in the United States; applicable transfer requirements and provider safeguards apply.

You can remove chats using the app’s conversation controls or Clear all conversations. Account deletion in Settings removes the app account and local data following successful server deletion. Deleting the app alone does not necessarily remove server records or Keychain identifiers. Deleting an analytics profile does not by itself erase historical analytics events; contact us to request their deletion. Some purchase, legal, or abuse-prevention records may need to be retained.

Depending on your location, you may request access, correction, deletion, restriction, portability, or object to processing. You may also complain to your local data protection authority. Email us to exercise these rights; we may ask for information needed to verify the device account involved. We cannot retrieve conversations that exist only on your device. Deletion does not cancel an Apple subscription.

BaLLM is not intended for children under 13. You must also meet any higher age requirement that applies to you. If you are below the age of legal adulthood, use the service only with a parent or guardian’s permission. If you believe a child has provided personal information contrary to this policy, contact us so we can investigate and take appropriate action.

We may update this policy as the service changes. The date above identifies the current version. We will provide additional notice of material changes when required. For questions or privacy requests, email contact@apps.arslanturk.dev.