Introduction
Welcome to FeasAI ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FeasAI mobile application and web application (collectively, the "Service").
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
Information We Collect
2.1 Account Information
When you create an account, we collect:
- Full name — provided during registration or pulled from your Google/Apple sign-in profile.
- Email address — used for authentication, account recovery, and transactional communications.
- Authentication identifiers — unique user IDs generated by our authentication system.
- Profile preferences — such as preferred language, currency, and theme (dark/light).
2.2 Project and Report Data
When you use the Service to create feasibility studies, we collect:
- Project inputs — business name, industry, country, financial parameters (investment amount, expected revenue, expected costs), market details, operational parameters, legal considerations, and analysis preferences.
- Generated reports — the AI-generated feasibility analysis results, including scores, narratives, financial projections, risk assessments, and recommendations.
- Chat messages — messages you send to the AI Chat assistant within a study context, and the AI's responses.
2.3 Subscription and Payment Data
- Subscription tier and status — Free, Pro, or Team plan level and whether the subscription is active.
- Payment provider and transaction identifiers — we receive transaction references from RevenueCat (our subscription management service) and the respective app stores. We do not directly collect or store your credit card numbers, bank account details, or other financial payment instruments.
2.4 Usage and Diagnostic Data
- Feature usage patterns — such as number of studies created, pages visited, and features used.
- Device information — device type, operating system version, app version, and language settings.
- Advertising identifiers — device advertising ID (IDFA on iOS, Google Advertising ID on Android) used to measure the effectiveness of advertising campaigns. On iOS, you will be asked for permission before this identifier is accessed.
- Crash logs and error reports — technical data to help us identify and fix issues.
2.5 Information We Do NOT Collect
We do not collect precise geolocation, contacts, photos, videos, browsing history, health data, or biometric data.
How We Use Your Information
We use the information we collect to:
- Provide the Service — create and store your feasibility studies, generate AI-powered reports, and enable features like project comparison and AI chat.
- Process AI analysis — send your project inputs to our AI provider (Anthropic) to generate feasibility reports. See Section 4 for details.
- Manage your account — authenticate your identity, manage subscription status, and apply your preferences.
- Improve the Service — analyze usage patterns to fix bugs, improve performance, and develop new features.
- Communicate with you — send transactional emails related to your account (e.g., password resets). We do not send marketing emails unless you opt in.
- Enforce our terms — detect abuse, prevent fraud, and ensure compliance with our Terms of Service.
- Measure advertising effectiveness — track app installs, sign-ups, and purchases to measure the performance of advertising campaigns on third-party platforms (Google Ads and Meta). You can limit this tracking on iOS by declining the App Tracking Transparency prompt.
How AI Processes Your Data
FeasAI uses the Anthropic Claude API to generate feasibility study reports. When you create a study:
- Your project inputs (business details, financial parameters, market information, etc.) are sent to Anthropic's API through our secure backend (Supabase Edge Functions).
- Anthropic processes these inputs to generate the feasibility report content.
- The generated report is returned to our servers and stored in your account.
Important notes about AI processing:
- Your project data is sent to Anthropic solely for the purpose of generating your feasibility report.
- Anthropic's data usage policies apply to the data processed by their API. As of the effective date of this policy, Anthropic states that they do not use API inputs or outputs to train their models. Please refer to Anthropic's privacy policy for their current terms.
- We do not send your name, email, or other personally identifiable information to Anthropic — only the business/project data needed for analysis.
Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase | Authentication, database, cloud functions, storage | Account data, project data, reports | Link |
| Anthropic | AI report generation (Claude API) | Project inputs (anonymized) | Link |
| Google Sign-In | Authentication | Email, name (via OAuth) | Link |
| Sign in with Apple | Authentication | Email (may be hidden), name | Link |
| RevenueCat | Subscription management | Anonymous app user ID, purchase status | Link |
| Google Play Store | App distribution, payments | Purchase data | Link |
| Apple App Store | App distribution, payments | Purchase data | Link |
| Firebase Analytics | App analytics, ad conversion tracking | App events, device info, advertising ID | Link |
| Meta (Facebook) SDK | Ad campaign attribution, conversion tracking | App events, device info, advertising ID | Link |
Data Storage & Security
- Storage: Your data is stored in Supabase-managed PostgreSQL databases with row-level security (RLS) policies ensuring that each user can only access their own data.
- Encryption: Data is encrypted in transit using TLS/SSL. Supabase encrypts data at rest.
- Access controls: Our backend enforces authentication and authorization checks on every request. Admin access to production data is limited and logged.
- Infrastructure: Supabase infrastructure is hosted on cloud providers with SOC 2 compliance. Please refer to Supabase's security documentation for details.
While we implement industry-standard security measures, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Access
You can view your account data, project inputs, and generated reports at any time within the app.
Export
You can export your feasibility reports as PDF files (available to Pro and Team subscribers). You may also request a full data export by contacting us at level7techs@gmail.com.
Correction
You can update your name, email, and preferences from the Settings screen.
Deletion
You can delete individual studies from within the app. You can also delete your entire account from the Settings screen, which permanently removes all associated data including your profile, studies, reports, chat history, and subscription records.
Restriction & Objection
You can contact us to request restriction of processing or to object to certain uses of your data.
Portability
You can request a machine-readable copy of your data by contacting us.
To exercise any of these rights, contact us at level7techs@gmail.com.
Data Retention
- Active accounts: We retain your data for as long as your account is active and the Service is in use.
- Deleted studies: When you delete a study, all associated data (inputs, report, chat messages) is permanently deleted from our database.
- Deleted accounts: When you delete your account, all data is permanently deleted within 30 days. Backup copies may persist in system backups for up to 90 days before being purged.
- Inactive accounts: We may delete accounts that have been inactive for more than 24 months, after providing notice to the associated email address.
Children's Privacy
FeasAI is not intended for use by anyone under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.
If we become aware that we have collected data from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at level7techs@gmail.com.
International Data Transfers
Your data may be processed in jurisdictions other than your country of residence, as our cloud infrastructure providers operate globally. By using the Service, you consent to the transfer of your data to these jurisdictions. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app and updating the "Last Updated" date at the top of this page. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: