Privacy

Privacy Policy

Effective date: 8 November 2026

In short. You can use AutoPilot’s offline reference without an email address. If you choose online AI assistance, we verify your email and send the question you submit to OpenAI to generate a response. We do not sell personal data or use advertising tracking.

1. Who this policy applies to

This policy explains how AutoPilot Assist (“AutoPilot”, “we”, “us”) processes data when you use the AutoPilot mobile application, autopilotassist.com, and the related online AI service.

2. Data we process

• Email address: used to send a verification code, maintain an online AI-request balance, prevent abuse, and assist with account support. The AutoPilot service database stores a keyed hash of the verified email rather than the plaintext email.
• AI request content: the text and optional parameter values that you deliberately submit for an online answer. They are sent to OpenAI for processing. AutoPilot does not intentionally retain the raw text of prompts or raw imported parameter-file values after a request is processed.
• Access, credit, and security records: verification timestamps, account status, request balances, request counters, and owner audit events. These records let us operate credits, detect abuse, and support deletion requests.
• Device-integrity data, if enabled: Apple DeviceCheck and App Attest may be used to stop repeated free-trial claims and fraud. We do not collect IMEI, serial number, advertising identifier, IDFV, or a cross-app device fingerprint. The service stores only a keyed, non-reversible hash required to apply the access rule; it does not retain the Apple DeviceCheck token.

3. Why we use data

We use this data to provide online AI answers, send verification codes, maintain free, bonus, and purchased request balances, enforce fraud and safety controls, maintain the owner dashboard, and respond to support or deletion requests. The offline reference remains available without email verification.

4. Service providers

• OpenAI: processes the online prompt and optional configuration context you choose to submit.
• Resend: delivers email verification codes.
• Apple: provides DeviceCheck/App Attest when enabled for device-integrity and anti-fraud controls, and processes App Store purchases.
• Cloudflare: provides protected network delivery for the API and owner dashboard.

We do not sell personal information, use it for cross-app advertising, or use it for tracking across other companies’ apps and websites.

5. Retention and deletion

We keep access, credit, and security records only for as long as needed to operate the service, prevent fraud, comply with legal obligations, or resolve a support issue. You may request deletion by writing from your verified address to [email protected]. We will delete the AutoPilot server account, active sessions, and unused credit balance associated with that account, subject to lawful retention needs. If DeviceCheck is active, Apple’s separate device-level state indicating that a free trial was already claimed can remain so that the same physical device cannot claim it again.

6. Your choices and security

You may use offline features without verifying an email. Before you use online AI assistance, the app explains that your request will be processed by OpenAI. You can choose not to continue. We use HTTPS, server-side secret storage, rate limits, access controls, and owner audit logs. Avoid including unnecessary personal, confidential, or safety-critical data in a prompt.

7. Changes and contact

We may update this policy as the service changes. The current version is published on this page. For privacy questions, support, or data requests, contact [email protected].