Privacy Policy
SonderSpot OÜ ("us", "we", or "our") operates the applications and services available at https://skillapp.co (the "Service").
This page informs you of our policies regarding the collection, use and disclosure of Personal Information when you use our Service.
We will not use or share your information with anyone except as described in this Privacy Policy.
We use your Personal Information for providing and improving the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible at https://skillapp.co or through mobile applications published by SonderSpot.
Information Collection And Use
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information ("Personal Information") may include, but is not limited to:
- Name
- Email address
AI-Powered Services
Our Service uses third-party artificial intelligence (AI) services to provide core functionality, including generating chat responses, creating images, transcribing voice input, and processing scanned documents. When you use these features, certain data is transmitted to third-party AI providers in order to deliver the requested functionality.
User Consent
Before any data is sent to third-party AI services, the app presents an in-app consent prompt that clearly discloses what data will be sent and who it will be sent to. Data is only transmitted after you explicitly grant permission. You may revoke this permission at any time in the app's Settings.
Data Sent to AI Services
The following types of data may be sent to third-party AI providers when you use the Service:
- Chat messages — text you type in conversations, collected when you send a message
- Image generation prompts — text descriptions you provide to create images
- Text from scanned documents — text extracted from photos you scan using the camera
- Voice transcription text — text converted from your voice input
- Web search queries — search terms you enter when using the web search feature
This data is collected directly from your input within the app and is only transmitted when you actively use the corresponding feature.
Third-Party AI Providers
We currently use OpenAI as our primary AI provider. Your data is transmitted to OpenAI's API to generate responses and provide AI-powered features.
Your data is not used to train AI models. We access OpenAI through their API platform, which does not use submitted data for model training or improvement purposes. Data is used solely to generate your requested responses.
All data is transmitted securely via encrypted connections through Cloudflare. OpenAI's use of this data is governed by their privacy policy and API data usage terms, which you can review at openai.com/policies/privacy-policy and openai.com/policies/api-data-usage-policies.
Web Search
When you use the web search feature, your search queries may be sent to third-party search services (including Tavily) to retrieve results. These services have their own privacy policies governing how they handle search queries.
Third-Party Data Protection
We require that all third-party service providers with whom we share user data provide the same or equal level of protection for your personal data as described in this Privacy Policy. Our agreements with these providers include obligations to use your data only for the purposes of delivering the Service, to maintain appropriate security measures, and not to disclose or use your data for any unauthorized purpose.
Data Retention and Deletion
Conversations and messages are stored locally on your device using an on-device database. You can delete individual conversations or all data at any time from within the app.
Third-party AI and search providers may retain data transmitted to them in accordance with their own data retention policies. OpenAI's API data retention policy states that API data is retained for up to 30 days for abuse monitoring and then deleted. We encourage you to review the privacy policies of these providers for full details.
To request deletion of any personal data associated with your account, please contact us.
Log Data
We collect information that your browser sends whenever you visit our Service ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics.
Cookies
Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive.
We use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
Analytics and Advertising
We use the following third-party services to help us understand how the app is used and to display advertisements:
- Firebase Analytics (Google) — collects anonymous usage data such as app opens, feature usage, session duration, and device type. This data is used to improve the Service and does not include the content of your conversations. See Firebase Privacy.
- Google AdMob — may collect device identifiers and usage data to serve advertisements within the app. See Google Privacy Policy.
- Facebook SDK (Meta) — may collect device information and app event data for analytics and advertising attribution. See Meta Privacy Policy.
You can limit ad tracking through your device's privacy settings.
Service Providers
We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used. This includes:
- OpenAI — AI service provider that processes your data to deliver AI-powered features
- Tavily — search service provider that processes web search queries
- RevenueCat — subscription management service
- Firebase / Google — authentication, analytics, and cloud services
- Google AdMob — advertising services
- Meta (Facebook SDK) — analytics and advertising attribution
- Cloudflare — secure data transmission and API proxy
These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. All third-party providers are required to maintain the same or equal level of data protection as described in this Privacy Policy.
Security
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
Links To Other Sites
Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Children's Privacy
Our Service does not address anyone under the age of 18 ("Children").
We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us. If we discover that a child under 18 has provided us with Personal Information, we will delete such information from our servers immediately.
Compliance With Laws
We will disclose your Personal Information where required to do so by law or subpoena.
Changes To This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us.