Privacy Policy

Last updated: June 9, 2025

⚠️ Important Privacy Notice

Marshmallow Chat is currently in development. While we are committed to child privacy and safety, our current implementation uses standard OpenAI API services, which means:

  • • Your child's conversations may be subject to OpenAI's standard data retention policies
  • • Data may be retained for up to 30 days for safety monitoring
  • • We do not yet have enterprise-level privacy protections in place

We are actively working to upgrade to enterprise AI services with zero data retention and enhanced child privacy protections. Parents will be notified when these improvements are implemented.

Introduction

Welcome to Marshmallow Chat! We are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, and protect information when you use our AI-powered voice chat application designed for children.

Marshmallow Chat is designed with child safety and privacy as our top priorities. We follow strict guidelines to ensure a safe, educational, and fun experience for young users.

Information We Collect

Voice Data & AI Conversations

• Voice conversations are converted to text and processed through AI services to provide responses • Audio data is processed in real-time and deleted immediately after conversion to text • We do not create voice profiles or use voice data for any purpose other than providing the chat experience • Important: Text conversations are currently processed by third-party AI providers (like OpenAI) under their standard terms of service • Note: We are actively working to implement enhanced privacy protections including enterprise agreements that prevent data use for training

Usage Information

• General usage statistics (session duration, feature usage) for improving the app • Technical information (device type, app version) for troubleshooting and optimization • No personal identifying information is collected through usage data

Account Information

• Parent/guardian email address for account creation and important communications • Child's first name only (for personalization within the app) • Age range (for age-appropriate content and safety features)

How We Use Information

• Provide the Service: Process voice conversations to generate appropriate AI responses

• Safety & Moderation: Ensure all content is child-appropriate and educational

• Improve the App: Analyze usage patterns to enhance features and user experience

• Parent Communication: Send important updates, safety notifications, and service information

• Technical Support: Troubleshoot issues and provide customer service

Child Safety & COPPA Compliance

We are committed to compliance with the Children's Online Privacy Protection Act (COPPA):

• We obtain verifiable parental consent before collecting any personal information from children under 13

• We collect only the minimum information necessary to provide the service

• We do not sell, rent, or share children's personal information with third parties

• Parents can review, modify, or delete their child's information at any time

• We implement strong security measures to protect children's data

Data Security

We implement industry-standard security measures to protect your information:

• All data transmission is encrypted using SSL/TLS protocols

• Voice data is processed in secure, encrypted environments

• Access to user data is strictly limited to authorized personnel

• Regular security audits and updates to maintain protection standards

Data Sharing & Third-Party AI Services

We do not sell, rent, or share personal information with third parties, except:

• AI Processing Partners: Conversation text is currently processed by AI services (like OpenAI) under their standard terms of service. Important: This means:

- Your child's conversations may be subject to OpenAI's data usage policies

- Data may be retained for up to 30 days by AI providers for abuse monitoring

- We are actively working to upgrade to enterprise privacy protections

- Parents will be notified when enhanced privacy settings are implemented

• Service Providers: Trusted partners who help us operate the app (with strict data protection agreements)

• Legal Requirements: When required by law or to protect safety

• Parental Request: When parents request information about their child's usage

Parental Rights & Controls

As a parent or guardian, you have the right to:

• Review any personal information we have collected about your child

• Request deletion of your child's personal information

• Refuse to allow further collection of your child's information

• Set usage time limits and content restrictions

• Receive regular reports on your child's app usage

AI Service Transparency

Current AI Processing (Being Upgraded):

1. Voice to Text: Your child's voice is converted to text on our secure servers, then the audio is immediately deleted.

2. AI Processing: The text is currently sent to OpenAI under their standard API terms:

Current Limitations:

• Data may be retained for up to 30 days for safety monitoring

• Standard OpenAI privacy policies apply

• Not currently configured with zero data retention

Planned Improvements:

• Upgrade to OpenAI Enterprise with zero data retention

• Implement COPPA-compliant data agreements

• Add immediate data deletion after processing

3. Response Generation: Marshmallow's response is generated and delivered back to your child.

4. Current Data Handling: Conversation data follows OpenAI's standard retention policies until we upgrade to enterprise privacy protections.

Data Retention

• Voice recordings are not stored and are deleted immediately after conversion to text

• Current State: Conversation text may be retained by AI providers (OpenAI) for up to 30 days under their standard terms

• Future State: We are working to implement zero data retention with enterprise AI agreements

• We do not retain conversation history or chat logs on our own servers

• Account information is retained only as long as the account is active

• Usage statistics are anonymized and may be retained for service improvement

• Upon account deletion, all personal information is permanently removed within 30 days

Contact Us

If you have any questions about this Privacy Policy or your child's privacy, please contact us:

Email: privacy@marshmallowchat.com

Response Time: We will respond to privacy inquiries within 48 hours

Policy Updates

We may update this Privacy Policy from time to time. We will notify parents of any material changes via email and will obtain renewed consent where required by law. The updated policy will be posted on our website with a new "Last Updated" date.

This Privacy Policy is effective as of the date listed above and applies to all users of Marshmallow Chat.