Privacy Policy for ARRIVIO

1. Information We Collect

Depending on the features you use, we may collect:

• Account information, such as your name, email address, sign-in provider, and account identifiers.
• Profile and preference information you choose to provide, such as destination country, goals, work preferences, and language or coaching preferences.
• User content you submit, such as questions, conversation messages, speech transcripts, resume text, target-role details, job or interview information, and document information.
• Files or images you choose to provide for document features. PDF and DOCX files are parsed on your device; their extracted text may be shared with OpenAI when you request AI analysis. If you choose image analysis or text extraction, the selected document-image bytes may be sent to OpenAI.
• Subscription and billing status, such as plan, entitlement, product, and transaction metadata. We do not receive or store full payment-card numbers.
• Device and usage information, such as app version, device type, diagnostics, crash and performance data, and feature interactions.
• Information in support communications you send us.

2. How We Collect Information

We collect information directly when you create or manage an account, complete profile or job-related forms, enter prompts or messages, use voice or document features, contact support, or make a purchase. Some information is generated when you use the app, including service logs, diagnostics, and feature activity. Account and app information may be stored or processed through Firebase services. Apple App Store, Google Play, and subscription services provide limited transaction or entitlement information needed to manage your plan.

3. How We Use Information

We use information to:

• Provide, maintain, and improve ARRIVIO features.
• Authenticate users, secure accounts, and save user-selected profile and consent settings.
• Generate AI responses and recommendations, provide English corrections and coaching, analyze documents, and assist with resumes, job searches, and interview practice when you request those features and grant the required AI permission.
• Manage free usage limits, subscriptions, and access to paid features.
• Respond to support requests, monitor performance, prevent abuse or fraud, troubleshoot issues, and comply with legal obligations.

4. AI Features and OpenAI

ARRIVIO uses OpenAI as an AI processing provider. Before personal or user-provided data is sent to OpenAI, ARRIVIO displays an in-app disclosure naming OpenAI and the data categories and purposes, and requires your explicit permission. No applicable AI request is sent before you choose "Allow & Continue."

Depending on the AI feature you choose, and only to the extent used for that request, information sent to OpenAI may include:

• Your typed questions, prompts, and relevant conversation text.
• Text transcribed from speech. Raw microphone audio is not sent to OpenAI; voice recognition is handled by the speech-recognition service available through your device or operating system, subject to its settings and terms.
• Optional profile or job-search context you provided, such as destination country, goal, current task, location, work preferences, target role, saved job details, or relevant career context.
• Resume text and target-role, company, job, or interview details that you choose to use with resume or interview assistance.
• For document analysis, document text, document type, and destination country. PDF and DOCX files are parsed locally and the raw PDF or DOCX file is not sent to OpenAI; extracted text may be sent. If you choose image analysis or text extraction, the selected image bytes are sent to OpenAI for that request.

We use this information to generate AI responses and recommendations, provide English corrections and coaching, analyze documents, and assist with resumes and interviews. ARRIVIO sends AI requests to the OpenAI API. OpenAI processes API data under its applicable API terms and data controls.

"Not now" prevents the applicable AI request from being sent. "Allow & Continue" grants permission for the disclosed AI processing. You can review the disclosure and revoke permission for future sharing in ARRIVIO under More → Privacy → AI Data Sharing. If you revoke permission, future gated AI requests are blocked until you grant permission again. Your choice is associated with your ARRIVIO account.

OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. Under standard API settings, API content may be retained in abuse-monitoring logs for up to 30 days. Retention can vary based on the account, endpoint, security needs, or legal requirements. ARRIVIO has not verified that its OpenAI API account has Zero Data Retention enabled, and this Policy does not claim that it does.

5. Payments and Subscriptions

In-app purchases are processed by Apple App Store or Google Play and related subscription services, including RevenueCat for subscription entitlement management. ARRIVIO receives limited transaction information, such as product, purchase status, and renewal or entitlement state, to provide subscription access. Payment-card information is handled by the applicable app store or payment provider.

6. Data Sharing

ARRIVIO does not sell personal data.

We share information only as needed to provide or protect the services, including with:

• OpenAI, as a third-party processor for AI processing, only after the required explicit user permission and only for the AI request you choose to make.
• Firebase and other cloud, hosting, and infrastructure providers that support account authentication, app storage, and service operation.
• Apple, Google, and RevenueCat for app-store payments and subscription entitlement handling.
• Device or operating-system speech-recognition services when you use voice input, subject to device settings and provider terms.
• Service providers that support diagnostics, security, customer support, and app operations.
• Authorities or other parties when required by law, to protect rights and safety, or to address fraud or security issues.

Service providers are required to protect information and use it only to provide their contracted services, subject to applicable law and their service-specific terms.

7. Device Permissions

ARRIVIO requests device permissions only when a feature needs them. These may include microphone and speech-recognition access for voice input, camera or photo-library access when you choose an image for document analysis, file access when you select a document, and location access for nearby services. You can manage permissions in your device settings. Speech recognition is performed by the service available on your device; see the AI section for what may be sent to OpenAI.

8. Data Retention

ARRIVIO retains account, profile, and user-provided information for as long as needed to provide the services, maintain your account, meet legal obligations, resolve disputes, and enforce agreements. You may request account and data deletion through ARRIVIO’s account-deletion process or by contacting us. Removing information from ARRIVIO does not automatically remove information already processed by a third-party provider; provider retention is governed by that provider’s terms and settings.

OpenAI API content may be retained in abuse-monitoring logs for up to 30 days by default, subject to account, endpoint, security, and legal requirements. OpenAI API content is not used to train models by default unless the API customer opts in. ARRIVIO has not confirmed Zero Data Retention for its OpenAI API account.

9. Security

We use reasonable technical and organizational safeguards to protect information, including access controls and protections provided by our service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. User Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of your personal data, and to withdraw consent where processing is based on consent. You can revoke future OpenAI sharing in ARRIVIO privacy / AI data-sharing settings. To submit another privacy request, contact us using the details below.

11. Children’s Privacy

ARRIVIO is not intended for children under 13 (or a higher minimum age where required by local law). We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided us personal data, contact us so we can review and take appropriate action.

12. International Data Processing

ARRIVIO and its service providers may process information in countries other than the country where you live, including the United States. Where required, we use appropriate safeguards for international transfers and apply protections required by applicable law.

13. Legal Bases

Where applicable, we process personal information to perform our agreement with you, based on your consent, to pursue legitimate interests such as securing and improving our services, or to comply with legal obligations. When explicit permission is required for AI sharing, we request it in the app before sending the applicable data to OpenAI.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date and provide additional notice where required by law.

15. Contact

For privacy requests or questions, contact:

• Email: support@arrivioai.com
• Website: https://arrivioai.com