Legal

Privacy Policy

Last updated: March 2026

Overview

Chitin ("we", "us", "our") operates the Chitin Avatar and Chitin Phone mobile applications and the chitin.net website. This policy describes how we collect, use, and protect your information.

Information We Collect

Anonymous Device Identifier

When you first open the app, a random device identifier is generated to create your anonymous account. No name, email, phone number, or personal information is required.

Usage Data

We track daily message counts to enforce free tier limits. This data is associated with your anonymous device ID, not your personal identity.

Subscription Status

If you subscribe to Chitin Plus, we store your subscription tier and expiration date to provide premium features.

Feedback

If you submit feedback through the app or website, we store your message, optional email address, and the app or platform you submitted from.

Information We Do NOT Collect

We do not store conversation content beyond the active session
We do not record or store voice audio
We do not collect your name, phone number, or physical address
We do not track your location (unless you explicitly enable weather context, which uses approximate location only)
We do not use your data to train AI models

How Conversations Are Processed

Chitin offers multiple connection modes, each with different privacy characteristics.

Free & Plus Tier (Managed)

Your messages are sent to our relay server, which forwards them to a third-party AI provider for response generation. Voice is generated by our self-hosted text-to-speech engine. Messages are processed in transit and not stored after the response is delivered.

OpenClaw Mode

When connected to your own OpenClaw gateway, messages travel directly between your device and your local machine over your WiFi network (or through our encrypted relay for Plus subscribers).We have no access to these conversations

Direct API Mode (BYOK)

When using your own API keys, messages are sent directly from your device to your chosen provider.We have no access to these conversations

Third-Party Services

Google Gemini APIProcesses chat messages for free tier users. Subject to Google's privacy policy.
Apple StoreKitProcesses subscription payments. Subject to Apple's privacy policy.
CloudflareProvides DNS services. Subject to Cloudflare's privacy policy.

Data Security

Anonymous device registration — no personal information required
Relay communications use TLS encryption (HTTPS/WSS)
OpenClaw relay uses end-to-end encryption (ECDH P-256 + AES-256-GCM)
Subscription credentials stored in iOS Keychain

Children's Privacy

Chitin is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with information, please contact us at support@chitin.net.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Questions about this privacy policy?

support@chitin.net

Chitin, LLC · Huntsville, Alabama