Privacy Policy Updated: October 13, 2026

Protecting your privacy is important to castlepumpkin. (“castlepumpkin,” “us,” “our,” or “we”). This Privacy Policy contains important information on who we are, how and why we collect, store, use, and share your personal information. It also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint.

Please read this Privacy Policy before using the castlepumpkin’s mobile application and related services, the castlepumpkin’s website, and all publicly-available websites and subdomains provided by us on which a link to this Policy is displayed (collectively or individually referred to as the “Application”). By using the Application, you consent to the collection, transfer, process, storage, disclosure, and use of your information as described in this Privacy Policy. If you do not agree with this, please do not use the Application.

  1. SCOPE OF PRIVACY POLICY

    This Privacy Policy is part of the Terms of Service for the Application and includes any separate privacy notices and/or notices posted on particular pages of the Application that may provide more detail regarding the information we collect on those pages, why we need that information, and choices you may have about the ways we use that information. No matter where your information is collected, used, transferred or stored, if it was collected through the Application, it will be subject to the terms of this Privacy Policy.

  2. INFORMATION WE COLLECT

    We may collect and use the following personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer:

    Information you provide us directly

    Information We Collect from Your Use of the Application

    We use Google Firebase Analytics and BigQuery to measure app usage and improve Dayt. Usage metadata may include screen views, onboarding and paywall steps, purchase outcomes, ad impressions and rewards, chat-request outcomes, response timing, app version, platform, language, approximate country, and installation attribution. Analytics can use pseudonymous app-instance or app-user identifiers; pseudonymous records may relate to the same installation or customer and are not necessarily anonymous. Where the applicable permission and disclosure cover this processing, we may connect usage metadata with RevenueCat subscription records and AI-request cost metadata to understand retention, subscriptions, advertising revenue, and service costs. Chat messages, generated replies, clipboard text, voice recordings, passwords, and payment-card details are not included in these analytics events.

    When you use the Application, we allow third-party companies to collect certain information. These companies may utilize cookies, pixels, or other similar technologies to collect and use non-personally identifiable information in order to provide advertisements about goods and services likely to be of greater interest to you. To learn more about this behavioral advertising practice or to opt-out of this type of advertising, you can visit the websites of the Digital Advertising Alliance at www.aboutads.info and Networking Advertising Initiative at www.networkadvertising.org/choices/.

    When you use the Application, we may automatically collect and store certain information in server logs. This may include:

    We may collect device and usage information such as:

To complete a commerce transaction on shop, you will be requested to provide your payment information, including your credit card number, card expiration date, CVV code, and billing address. In that event, we will transmit your information securely directly to a third party vendor or merchant who will collect such information in order to process and fulfill your purchase. We do not process or store your payment information. However, we may store other information about your purchases made on the Service, which may include the merchant’s name, the date, time and amount of the transaction and other behavioral information.

  1. HOW WE USE YOUR INFORMATION

    In addition to some of the specific uses of information we describe in this Privacy Policy, we may use information that we receive and the choices you make in your settings:

  2. INFORMATION SHARING AND DISCLOSURE TO THIRD PARTIES

    Third-Party Service Providers

    We use a variety of third-party service providers to help us provide Application including business analytics, marketing. These providers have limited access to your information to perform these tasks on our behalf and are contractually obligated to use it consistent with this Privacy Policy.

    To provide our AI-driven chat services, we share your text inputs (Input Content) with OpenAI, LLC.

  1. YOUR CHOICES ABOUT YOUR INFORMATION

    Account Information

    You may update or correct information you have provided to us by going into the User Account settings screen within the Application. If you wish to deactivate your account, please delete the Application, but note that we may retain your information as required by law and for business purposes.

You may use the privacy preferences available in the app to change the choices supported by the applicable privacy form. To request withdrawal of analytics processing, or deletion of identifiable analytics or private RevenueCat webhook records, contact [email protected]. We may need information sufficient to locate the relevant app installation or subscription and verify that the request relates to you. Changing optional analytics choices does not cancel a subscription or remove purchased access. Deleting local chat history or uninstalling the app does not by itself erase server records or cancel store subscriptions. Necessary financial records may be retained separately for their established purposes.

Promotional Communications

You may opt out of receiving promotional communications from us by following the instructions in those messages. If you opt out, please note that we may still send you Application-related communications, such as those about your account or our ongoing business relations.

Push Notifications

We may send push notifications to your mobile device. You can deactivate these messages at any time by changing the notification settings within the App or your device settings.
  1. HOW LONG WE KEEP YOUR INFORMATION

    We retain private RevenueCat webhook payloads for 30 days from receipt. Storage lifecycle deletion can take additional time after expiration, typically up to 24 hours. When the new identity-linked analytics datasets are activated, their pseudonymous linkage records and derived records will be limited to 180 days of active analytics storage and subject to scoped deletion requests. Expiration or a processed deletion removes records from active queries; storage-provider recovery copies can remain temporarily under provider recovery mechanisms, including BigQuery time travel and fail-safe. Hashed deletion controls cease to apply after their expiry, and their physical removal can follow the next partition boundary. These limits do not promise immediate physical erasure of all recovery copies. Existing billing, tax, fraud-prevention, and financial or service-cost records follow their established operational and legal retention purposes; the new 30-day and 180-day limits do not change those records. Analytics deletion controls use hashed suppression records for up to 180 days to prevent old webhook payloads from being replayed after a scoped deletion; these suppression records are not a permanent analytics opt-out.

  2. CHILDREN’S PRIVACY

    We do not knowingly collect or solicit any information from anyone under the age of 16 or knowingly allow such persons to register for the Application. The Application and its content are not directed at children under the age of 16. In the event that we learn that we have collected personal information from a child under age 16 without parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 16, please contact us at [email protected]

  3. TRANSFERRING YOUR DATA

    Your information collected through the Application may be stored and processed in the United States or any other country in which castlepumpkin, its affiliates or service providers maintain facilities. As such, we and our service providers may transfer your personal data to, or access it in, jurisdictions (including the United States) that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it, including through appropriate written data processing terms and/or data transfer agreements.

    By registering for and using the Application, you consent to the transfer of information to the U.S. or to any other country in which castlepumpkin, its affiliates or service providers maintain facilities and the use and disclosure of information about you as described in this Privacy Policy.

  4. Payment Information

Our e-commerce provider (Google, Apple) is responsible for billing, processing and charging for in-app purchases, handles your personal information and keeps it absolutely safe and secure. This information is processed as part of the performance of the contract between you and us. We cannot access or use your credit or debit card information.

You may access the applicable “in-app” purchase rules and policies directly from the app stores.

  1. SECURITY

    We use commercially reasonable safeguards to help keep the information collected through the Application secure. However, castlepumpkin cannot ensure the security of any information you transmit to the Application or guarantee that information on the Application may not be accessed, disclosed, altered, or destroyed. You are responsible for maintaining the secrecy of your unique password and account information at all times. Your privacy settings may also be affected by changes the social media services you connect to castlepumpkin make to their services. We are not responsible for the functionality, privacy, or security measures of any other organization.

  2. EXTERNAL LINKS

    The Application may contain links to third party sites or online services. We are not responsible for the practices of such third parties, whose information practices are subject to their own policies and procedures, not to this Privacy Policy.

  3. CALIFORNIA CONSUMER PRIVACY RIGHTS

    IF you are California resident, you have the right under the California Consumer Privacy Act of 2018 (CCPA), as applicable, to exercise free of charge

  4. CHANGES TO OUR PRIVACY POLICY

    castlepumpkin may modify or update this Privacy Policy from time to time, so please review it periodically. We may provide you additional forms of notice of modifications or updates as appropriate under the circumstances. Your continued use of castlepumpkin or the Application after any modification to this Privacy Policy will constitute your acceptance of such modification.

  5. HOW TO CONTACT US

    If you have questions or concerns about castlepumpkin’s Privacy Policy or to submit a request for information, please contact us at [email protected].