Effective [EFFECTIVE DATE — SET AT PUBLICATION] · Nonchalant is operated by Premade, LLC, a Florida limited liability company ("Nonchalant," "we," "us") · Privacy contact: privacy@staynonchalant.com · Mailing address: Premade, LLC — 6344 Autumn Berry Cir, Jacksonville, FL 32258-8415
You share a conversation; we turn it into reply suggestions; we don't keep the conversation. Screenshots and pasted text are sent over an encrypted connection to our servers and to our AI provider (Anthropic) to generate your suggestions, then deleted from our systems (Anthropic deletes its copies within 30 days — §6 has the details) — nothing you upload is stored long-term, sold, shared for advertising, or used to train AI models. What we do keep is the minimum needed to run your account: your email, your subscription and credit balance, a content-free technical summary of each read, the reply options we generated for you, and the anti-abuse and age-confirmation records described below. Everything here is AI — no human reads your conversations in the normal course of the service (the single exception: content our automated safety systems flag for legally required review, §9) — and every suggestion you see is AI-generated.
Nonchalant is an AI texting coach. You choose a conversation you are part of and share it with the app as a screenshot or pasted text. The app does not and cannot log into, connect to, monitor, or automatically read Instagram, Tinder, iMessage, or any other platform; it has no access to your accounts on other services; it never sends messages. The only conversation content it ever sees is what you hand it, when you hand it.
| Data | What it is | Kept how long |
|---|---|---|
| Account | email address, password (hashed by our auth provider), sign-in records | until you delete your account |
| Uploaded conversations | screenshots / pasted text you submit for a read | not stored: processed, then discarded; the extracted text lives in an encrypted, non-user-readable cache that expires after 1 hour — expired content is never read, and the underlying record is cleared by our scheduled purge |
| Read results | stage, timing features, verdict — a technical summary that contains no message content | until you delete your account; your readable history is stored on your device only and clears if you delete the app |
| Our suggested replies | the reply options Nonchalant generated for you on paid reads, kept so we can later measure which of our own advice works. Before storing, each line passes the same scrub as the coach's notes: any line echoing the other person's words is dropped entirely, and any detected name or handle is removed. The AI's reasoning prose is never stored. | until you delete your account |
| Coaching memory ("coach's notes") | a short, de-identified per-contact summary (stage, patterns, what's been tried) — never messages, screenshots, or the other person's name/handle/photos; deletable per contact in the app. The other person's handle is stored only as a salted one-way hash so repeat contacts are recognized without storing identity; same-name contacts never merge without your confirmation. | until you delete it — per-contact hard delete anytime |
| 18+ confirmation | the time you confirmed, and which wording you confirmed | life of the account |
| Payments | handled by Stripe (web) and Google Play / RevenueCat (mobile); we receive subscription status, credit grants, and transaction identifiers — never your card number | — |
| Referral attribution | if you sign up through a partner's referral link or code: the code you used and which partner referred you, kept for commission bookkeeping | until you delete your account; any commission amounts still owed to the partner survive deletion with the link to you removed (§8) |
| Anti-abuse | a one-way hashed device identifier used to stop free-trial cycling; it is not designed to be reversible into your device identity | life of the account system, independent of your account |
| Feedback | thumbs up/down you give a suggestion, and reports you file on a suggestion | until you delete your account |
| Service telemetry | per-read processing cost and error logs — no message content | rolling 90-day operational window |
| Effectiveness analytics | a content-free record of how our own suggestions performed (see §12 — not yet active) | until you delete your account |
What we never collect: your contacts, your photo library (you pick individual images), your location beyond coarse network-level region used for the access controls in §7, any advertising identifier. There are no advertising networks, no data brokers, and no third-party analytics SDKs in the app. (The only analytics of any kind are our own first-party, content-free effectiveness records described in §12 — currently off.)
Conversations you upload contain messages written by someone who is not our user. How we handle that is the core of this policy:
We use a small number of service providers, each processing data only on our instructions:
We do not "share" data with third parties in the advertising sense, and transfers to these processors are service-provider transfers under our instructions — which is exactly how they are declared on the Google Play Data safety form.
Nonchalant is offered to United States residents, 18 or older, and served from US infrastructure. Access from the EU/EEA, UK, and sanctioned regions is blocked at the network edge; we do not market to or serve those regions, pricing is USD-only, and this policy is not drafted for GDPR.
California note (CalOPPA): this policy is our conspicuous privacy policy for all users including Californians; material changes are announced per §13; and because we do not track users across third-party sites or services over time, we do not respond to browser "Do Not Track" or opt-out preference signals — there is no cross-site tracking to opt out of.
Cookies and our website: the app contains no advertising or analytics SDKs (§3). Our website (staynonchalant.com) uses only strictly-necessary first-party cookies (sign-in sessions, security, checkout); it runs no session-replay tools, no keystroke or chat capture, no third-party trackers, and no advertising pixels.
We give every user the same controls, regardless of state:
Our deletion promises in §3 and §8 describe our own systems, and they have one carve-out: retention required by law. (Separately, our AI provider deletes its copies on its own schedule — 30 days, longer for safety-flagged content — described in §6; that schedule operates independently of anything you delete here.) If we are legally required to preserve specific content — for example, United States law requires providers who obtain actual knowledge of apparent child sexual exploitation to report it to the National Center for Missing & Exploited Children and preserve the reported material for one year — that specific content is moved to a segregated, access-restricted legal hold instead of being deleted, for as long as the law requires, and no longer. Our automated safety screening exists to enforce our own content rules — it is not a program of searching your conversations for reportable material. This preservation duty arises only when that screening, or a user's report, puts specific unlawful content in front of us.
Encrypted transport everywhere; encryption at rest; row-level security so each account can only ever read its own rows; the analysis pipeline runs server-side with least-privilege keys; secrets live in managed vaults, never in the app; payment card numbers never touch our servers. If a breach affects your unencrypted personal information, we will notify you as required by applicable state breach-notification laws (for Florida residents, within 30 days under Fla. Stat. §501.171; other states' timelines as applicable).
Nonchalant is for adults 18+ only. We do not knowingly serve anyone under 18, we do not knowingly collect any child's data (COPPA does not apply to a service that is neither directed to nor knowingly collecting from under-13s — and our floor is 18), and the product refuses analyses involving suspected minors regardless of what anyone confirms. Where an app store provides an age signal under state app-store laws (e.g., Texas), we use it only to enforce the 18+ restriction and for legal compliance — never for advertising or profiling — and we do not retain it beyond that check.
Not yet active: this program is currently switched off, and no effectiveness data is being collected. If we turn it on, it will work exactly as described in this section, and collection will never be retroactive.
We want to know which of our own suggestions actually help, so the coaching gets better. To do that without keeping your conversations, we record a small, content-free summary when you re-read a conversation you previously analyzed:
We'll post changes here with a new effective date. For material changes, we'll notify you in-app or by email before they take effect, and where a change materially expands what we collect or how we use it, we will ask for fresh consent rather than rely on continued use.