CommAI Privacy Policy

Effective 13 June 2026.

CommAI is responsible for the personal data described here. Contact [email protected] with questions or rights requests.

Information we collect

How and why we use data

We process data to perform our contract with you, operate and secure CommAI, moderate content and improve reliability under our legitimate interests, meet legal obligations, and provide optional notifications or marketing with consent.

AI Advisor and providers

When you choose the AI Advisor, prompts are sent to CommAI's recommender hosted by Render and processed using OpenAI services. Do not submit sensitive information. Other providers include Google Firebase, Expo, DiceBear, Apple and Google. Some processing may occur outside the UK using lawful transfer safeguards.

We use shortlist feedback and chosen-tool signals to measure successful discovery and improve recommendation quality.

Retention

Account data is retained while your account is active. Typical limits are: notifications 90 days, diagnostics 30 days, reports 180 days, user blocks until you unblock the user or delete your account, tool engagements two years and inactive push tokens 180 days. Limited encrypted backups may persist until overwritten.

Your rights

You may request access, correction, deletion, restriction, objection or a copy of your data, and withdraw consent. Delete your account from Privacy & Account inside the app, or use the web deletion page. UK users may complain to the ICO at ico.org.uk.

Children and security

CommAI is not intended for children under 16. We use access controls, encrypted connections and role-based administration, but no service can guarantee absolute security.

Web storage and changes

The web app uses necessary local storage for login, preferences, security and offline functions. CommAI does not currently sell personal data or use third-party advertising cookies. Material policy changes will be communicated in the app.