Privacy Policy Last updated: 06.01.2026 1. Controller / Contact Application: DeepFake Owner/Controller: Kristian Cerni Contact: https://github.com/KrisHD1337 This policy applies to all users within Switzerland, the EU, and other jurisdictions. 2. What We Collect We collect only what’s needed to provide our service: Account Data: Username, email (optional), hashed password Chat Data: Messages you send and the AI responses All data is processed to provide your chat history and account functionality. 3. Legal Basis (GDPR) For EU/EEA users, we process data based on: Contract performance (to provide your account and chat history) Legitimate interests (system security, fraud prevention) Your data will not be processed for marketing without explicit consent. 4. How We Use Data Your data is used to: Authenticate and manage your account Store and retrieve chat history Improve and maintain the app We do not sell your data. 5. Data Retention We retain data as long as your account is active. If you request deletion, your data will be deleted unless we must retain it for legal reasons. 6. Data Transfers Your data may be stored or processed where our servers reside. Switzerland has an adequacy decision with the EU, meaning transfers can occur without additional safeguards. 7. Your Rights (GDPR + Swiss rights) Depending on jurisdiction, you may have the right to: Access your data Correct inaccuracies Request deletion Restrict or object to processing Request data portability (GDPR) To exercise these rights, contact us at: kriscerni@gmail.com 8. Data Security We implement reasonable technical and organisational measures to protect your data — encryption for passwords and secure database access. 9. Changes to this Policy We may update this document. Changes will be posted with a “Last updated” date.