Privacy Policy
We collect only what we need to run your account, process purchases, and show creators how their titles perform. Your data is encrypted on device, and we never sell it.
1. Who we are
"AI Marketplace" (we, us) operates the AI Marketplace iOS app and supporting backend services. This policy explains what data we collect, why, and how you can control it. For privacy questions: mvalasek77@gmail.com.
2. What we collect
We collect a deliberately small set of data, all of which is linked to your account and used only to provide the app:
- Email address — to identify your account and contact you about it.
- Name (your publisher name) — to attribute the titles you publish and display on creator pages.
- Purchase history — which titles you have bought, so you can re-download them; and, for creators, which of your titles have sold.
- Submission and library data you create in the app — drafts you write, titles you publish, your library of purchased works, and metadata you supply such as the synopsis, cover art, pricing band, and required AI-tool disclosure.
- Files you upload when publishing a title — the manuscript text, audio file, or video file you attach to a submission. We store these only to deliver the work to buyers who purchase it. We do not use uploaded files to train AI models.
- A pseudonymous account token — a per-device UUID we generate the first time you make a purchase and attach to every in-app purchase as an appAccountToken. Apple echoes this back in App Store Server Notifications, which is how we route refund events to the correct wallet. The token is not linked to any external identifier.
- Stripe-collected creator information — if you become a creator and connect a bank to receive payouts, Stripe Connect Express collects the identification and banking information regulators require for payouts (full legal name, date of birth, address, SSN/SIN last four, bank account / routing number, government ID image). We do not see your full identification numbers; Stripe sends us only the connected account ID and a status flag.
- Aggregated, anonymous usage signals needed to power the Top 10 and Trending charts (for example: how many users opened a title). These are aggregated and not tied back to individual users in the catalogue.
We do not track you across other companies' apps or websites, we do not use third-party advertising or analytics SDKs, and we do not run an advertising business.
3. Why we collect it
Every category above is collected solely to operate the app (App Functionality, in Apple's terms): to log you in, deliver purchases, attribute creator earnings, prevent fraud, and show the public Top 10. We do not sell personal information.
Legal bases (EEA / UK). Where the GDPR or UK GDPR applies we rely on these legal bases: performance of a contract (operating your account, delivering purchases, processing payouts); legal obligation (tax and accounting records, lawful requests); legitimate interests (fraud prevention, security, aggregate de-identified analytics) — and only consent where local law specifically requires it.
4. AI disclosure data
For every title a creator publishes, they tell us which AI systems produced or assisted it. This disclosure is shown publicly on the title page so buyers know what they are getting. If you are a creator, please publish only AI-tool names you are comfortable being public.
5. On-device storage and encryption
Sensitive data stored on your device — your identity, your library entitlements, your drafts, and your payout configuration — is encrypted at rest using AES-GCM. The encryption key is generated on first launch and held in the iOS Keychain; it is never bundled with the app or transmitted to us. Deleting the app removes the on-device encrypted store.
6. Third parties we rely on
We use a small number of trusted providers, each of which has its own privacy policy:
- Apple — processes all in-app purchases (the wallet credit you buy in the app). We receive confirmation of a completed transaction; we never receive your card number. Subject to Apple's privacy policy.
- Stripe — used solely to pay creators. If you opt to receive payouts as a creator, you complete Stripe's own onboarding (Stripe Connect Express) and Stripe collects identification details required by financial regulation. Subject to Stripe's privacy policy.
- Cloudflare — hosts our payout backend (Workers). Subject to Cloudflare's privacy policy.
7. How long we keep it
Account and library data are retained while your account is active. Purchase records may be retained longer where required for tax, accounting, or fraud-prevention purposes (typically up to 7 years for tax records). On-device data is retained until you delete the app or sign out.
8. Children
AI Marketplace is not directed to children under 13. We do not knowingly collect data from children under 13. Titles carry a maturity rating set by the creator. If you believe a child has provided us with data, contact mvalasek77@gmail.com and we will delete it.
9. International users
If you use AI Marketplace from outside the United States, your data may be transferred to and processed in the United States and other countries where we or our service providers operate. For transfers from the European Economic Area or the United Kingdom we rely on the European Commission's Standard Contractual Clauses (or, for the UK, the International Data Transfer Addendum) together with the contractual and technical safeguards described in this policy.
10. Your rights
Subject to your local law, you have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Request deletion of your account and associated data;
- Receive a copy of your data in a portable format;
- Object to or restrict certain processing;
- Opt out of the "sale" or "sharing" of personal information (we do not sell or share personal data, but you may still submit a request).
- Lodge a complaint with your local data-protection supervisory authority (for EEA / UK residents).
To exercise any of these rights, email mvalasek77@gmail.com from the email address on your account.
11. Account deletion
You can delete your account from inside the app (Profile → Account → Delete Account). You may also email mvalasek77@gmail.com from the email on file. Deletion removes your account record, library, drafts, and creator profile. Anonymised aggregate sales and chart data, and records we must retain by law (for example tax records for completed purchases), are kept.
12. Security
We use industry-standard safeguards including TLS in transit, AES-GCM encryption on device, secret storage in the iOS Keychain, and signed webhook verification for payment events. No system is perfectly secure; if we ever experience an incident that affects you, we will notify you as required by applicable law.
13. Changes to this policy
We will update the date above and, for material changes, notify you in-app or by email before the change takes effect.
14. Contact
Questions about privacy: mvalasek77@gmail.com.
General support: Support page.