Privacy Policy

Effective Date: 12 September 2026

This Privacy Policy explains how Chris Slaughter, an individual operating as a sole proprietor, doing business through the Bob mobile application (“Bob,” “we,” “us,” or “our”), collects, uses, discloses, and protects information when you use Bob and related services (collectively, the “Service”).

Bob is a mobile messaging application that allows you to communicate with friends and interact with artificial intelligence agents (“AI Agents”).

By using the Service, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We collect information that you provide to us, information generated when you use the Service, and certain information collected automatically from your device.

A. Account Information

When you create or maintain a Bob account, we may collect information such as:

• your mobile phone number;
• your name, username, profile name, or display name;
• profile photographs or avatars;
• account preferences and settings;
• authentication and verification information; and
• other information you choose to associate with your account.

We may use your mobile phone number to create and authenticate your account with verification and authentication codes (2FA). We do not use your mobile phone number to send account recovery messages, login alerts, or other transactional SMS.

B. Messages and Other Content

When you use Bob, we may process content that you send, receive, upload, or otherwise make available through the Service, including:

• text messages;
• messages sent to or generated by AI Agents;
• images, files, links, and other attachments;
• group or conversation information;
• reactions and other messaging interactions; and
• other content you choose to provide.

We process this content as necessary to provide the messaging and AI features of the Service, maintain and secure the Service, comply with applicable law, and otherwise as described in this Privacy Policy.

C. AI Agent Interactions

When you communicate with an AI Agent, or generate an AI Agent avatar, we process information you and other participants provide so we can generate and deliver that AI output.

To provide these features, we send certain information to OpenAI, L.L.C. (“OpenAI”), a third-party artificial intelligence provider. We send this information to OpenAI only after you give permission in the Bob app, and only when you (or another participant in a conversation you have joined) use an AI feature.

What we send to OpenAI. Depending on the feature, this may include:

• the text of messages in a conversation that includes an AI Agent, including recent conversation history needed to generate a reply;
• display names of participants in that conversation;
• the AI Agent’s name and instructions (system prompt); and
• text descriptions you provide when generating an AI Agent avatar, together with our image-generation instructions.

How we collect that information. We collect it from content you and other users type or send in Bob, from names and agent settings associated with Bob accounts, and from the avatar description you enter in the app.

How OpenAI uses that information. OpenAI processes it on our behalf solely to generate the requested AI Agent reply or avatar image and return it to Bob. We do not send your mobile phone number, address-book contacts, precise location, or photos from your device to OpenAI.

Because AI Agents receive conversation content, you should not send information to an AI Agent that you do not want processed by Bob and OpenAI for the purpose of generating an AI response.

AI systems may also generate or infer information based on the content you provide. As described in our Terms of Service, AI-generated information may be inaccurate.

D. Contacts and Address Book Information

If Bob offers a contact-discovery feature and you choose to permit Bob to access your device contacts, we may process information from your address book, such as names and phone numbers, for purposes such as helping you find people you know who use Bob.

We will request device permission before accessing information where permission is required by your operating system.

You may revoke device permissions through your device settings.

E. Usage and Technical Information

When you use the Service, we may automatically collect certain technical and usage information, including:

• IP address;
• device type and model;
• operating system and version;
• application version;
• device or application identifiers;
• language and time zone;
• network information;
• timestamps;
• login and authentication events;
• feature usage;
• crash information;
• diagnostics and performance information; and
• information about how you interact with the Service.

We may use this information to operate, troubleshoot, secure, analyze, and improve the Service.

F. Information About Communications

We may collect information associated with communications without necessarily relying on the contents of those communications, such as:

• sender and recipient account identifiers;
• time and date of communications;
• conversation or group identifiers;
• message-delivery information; and
• information necessary to operate messaging features.

G. Information From Other Users

Other Bob users may provide information about you when they use the Service. For example, another user may have your phone number stored in their contacts, add you to a conversation, send you a message, or otherwise provide information involving you.

H. Information From Service Providers

We may receive information from companies that help us operate Bob, such as authentication providers, telecommunications providers, hosting providers, analytics providers, security providers, AI providers, and app stores.

2. How We Use Information

We may use information collected through Bob to:

• provide, operate, and maintain the Service;
• create and manage user accounts;
• authenticate users and verify phone numbers;
• send and deliver messages;
• enable conversations between users;
• provide AI Agent functionality;
• generate and deliver AI responses;
• share the information described in Section 1.C with OpenAI in order to generate and deliver AI Agent replies and avatar images;
• personalize features and settings;
• maintain conversation and account functionality;
• provide customer support;
• diagnose technical problems;
• monitor and improve performance and reliability;
• detect, investigate, prevent, and respond to fraud, abuse, spam, security incidents, and violations of our Terms of Service;
• protect Bob, our users, and others;
• develop, test, maintain, and improve features;
• comply with legal obligations;
• enforce our agreements and policies; and
• otherwise accomplish purposes disclosed to you when information is collected.

We may also create aggregated or de-identified information that does not reasonably identify you and use that information for analytics, product development, research, security, and other lawful purposes.

3. SMS and Two-Factor Authentication

When you provide a mobile phone number to Bob, we may send SMS or other text messages solely for two-factor authentication (“2FA”).

These messages are limited to verification and authentication codes used to create, access, or secure your account. We do not use your mobile phone number to send account notifications or other transactional communications.

Message frequency may vary. Message and data rates may apply.

Bob does not use your agreement to receive 2FA messages as consent to send marketing or promotional text messages.

No mobile information will be shared with third party/affiliates for marketing or promotional purposes.

We may provide your phone number to service providers, such as telecommunications or authentication providers, when necessary to send messages, authenticate your account, prevent fraud, or otherwise operate the Service.

If you change or relinquish your mobile phone number, you should update or remove the number associated with your Bob account.

4. How We Disclose Information

We may disclose information in the following circumstances.

A. Other Users

Information you choose to make available through Bob may be visible to other users.

For example, depending on how Bob is configured, other users may be able to see your:

• profile name;
• profile photograph or avatar;
• messages;
• files or other content you share; and
• participation in conversations or groups.

When you send information to another user, that user may save, copy, forward, screenshot, or otherwise use that information outside Bob. We cannot control what another user does with information you choose to share with them.

B. AI and Technology Service Providers

We may disclose information to vendors and service providers that help us operate the Service.

For AI Agent replies and AI Agent avatar generation, we disclose the information described in Section 1.C to OpenAI, L.L.C. OpenAI processes that information as our service provider to generate the requested output. We require OpenAI to provide the same or equal protection of that information as described in this Privacy Policy, including processing it only to provide the AI services we request, not using it for OpenAI’s own independent marketing, and implementing contractual and security safeguards designed to protect it. OpenAI’s practices are also described in OpenAI’s Privacy Policy.

These may include providers of:

• artificial intelligence models and services (currently OpenAI);
• cloud infrastructure and hosting;
• databases and data storage;
• SMS and telecommunications services;
• user authentication;
• content delivery;
• application monitoring;
• crash reporting;
• analytics;
• customer support;
• fraud prevention; and
• cybersecurity.

These providers may process information as necessary to provide their services to us and subject to applicable contractual terms and legal obligations.

C. Legal and Safety Reasons

We may preserve, access, or disclose information if we reasonably believe doing so is necessary to:

• comply with applicable law, regulation, legal process, or governmental request;
• enforce our Terms of Service or other agreements;
• investigate potential violations of our policies;
• detect, prevent, or investigate fraud, abuse, security incidents, or illegal activity;
• protect the rights, property, or safety of Bob, our users, or others; or
• establish, exercise, or defend legal claims.

D. Business Transfers

If Bob or assets relating to Bob are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information relating to the Service may be disclosed or transferred as part of that transaction.

Because Bob is currently operated by Chris Slaughter as a sole proprietor, this may include a future transfer of the Service to a company or other legal entity created to own or operate Bob.

E. With Your Direction or Consent

We may disclose information when you direct us to do so, consent to the disclosure, or use a feature that requires information to be shared with another party.

5. Selling and Sharing Personal Information

We do not sell personal information in exchange for money.

No mobile information will be shared with third party/affiliates for marketing or promotional purposes.

If our practices change in a way that constitutes a “sale,” “sharing,” or similar activity under applicable privacy law, we will update this Privacy Policy and provide any choices required by law.

6. Advertising

Bob does not currently use personal information to provide third-party targeted or cross-context behavioral advertising.

If we introduce advertising or advertising-related data processing, we will update this Privacy Policy and provide any notices or choices required by applicable law.

7. AI, Model Improvement, and Service Improvement

We may analyze information about how AI features perform in order to maintain, debug, evaluate, secure, and improve Bob.

Bob does not use your conversations or avatar descriptions to train or improve generalized AI models.

OpenAI processes the information described in Section 1.C as our service provider, under OpenAI’s API terms and related data-processing terms, in order to generate AI Agent replies and avatar images. Under those terms, OpenAI does not use API customer content to train its models. We require OpenAI to provide the same or equal protection of personal information we share with it: to process that information only as needed to provide the requested AI output, to maintain appropriate security measures, and not to use it for OpenAI’s own marketing or other independent commercial purposes unrelated to providing that output to Bob.

8. Data Retention

We retain personal information for as long as reasonably necessary to:

• provide the Service;
• maintain your account;
• provide messaging and AI functionality;
• satisfy the purposes described in this Privacy Policy;
• comply with legal obligations;
• resolve disputes;
• prevent fraud or abuse;
• protect the security and integrity of the Service; and
• enforce our agreements.

Different categories of information may be retained for different periods.

When information is no longer reasonably necessary for the purposes for which it is retained, we may delete, de-identify, or aggregate it, subject to applicable legal requirements and technical limitations.

Information may remain temporarily in backups or other systems after deletion from active systems.

Messages or content you have sent to other users may also remain in the possession of those users even if you delete your account or your own copy of the content.

9. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no electronic transmission, storage system, network, or security measure is completely secure.

Accordingly, we cannot guarantee that information transmitted to or through Bob will never be accessed, disclosed, altered, lost, or destroyed.

You are responsible for maintaining the security of your device and account credentials and for promptly notifying us if you believe your account has been compromised.

10. Your Choices and Controls

Depending on the features available in Bob, you may be able to:

• update your profile information;
• change account settings;
• control certain device permissions;
• grant permission to share information with OpenAI for AI features;
• manage notifications;
• block other users;
• delete certain content; or
• delete your account.

Bob asks for your permission in the app before sharing personal information with OpenAI. That permission is collected during onboarding. If you do not grant it, you cannot finish setup, and AI Agent messaging and AI Agent avatar generation will not be available.

Some information may need to be retained after an account or content is deleted for security, legal, fraud-prevention, backup, or other legitimate purposes.

11. Device Permissions

Bob may request permission to access certain device features when necessary to provide functionality you choose to use.

Depending on Bob’s features, these permissions may include access to:

• contacts;
• photographs or media;
• camera;
• microphone;
• notifications; or
• other device capabilities.

You can generally control application permissions through your mobile device settings.

Certain Bob features may not work if you disable permissions they require.

12. Privacy Rights

Depending on where you live, you may have legal rights concerning your personal information.

These rights may include the ability to request:

• confirmation of whether we process your personal information;
• access to personal information we maintain about you;
• correction of inaccurate personal information;
• deletion of personal information;
• a portable copy of certain information;
• information about categories of information we collect or disclose; or
• an opportunity to opt out of certain forms of processing where required by law.

Some rights are subject to exceptions and limitations under applicable law.

To make a privacy request, contact us at chris@bobchat.app.

We may need to verify your identity before completing certain requests.

Where applicable, you may also have a right to appeal our response to a privacy request. Instructions for doing so will be provided with our response when required.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

13. Children’s Privacy

Bob is not directed to children under 13 years of age.

We do not knowingly collect personal information from children under 13 through the Service. If we learn that we have collected personal information from a child under 13 in circumstances where parental consent or another legal basis is required, we will take appropriate steps to delete the information.

If you believe a child under 13 has provided personal information to Bob, please contact us at chris@bobchat.app.

Users who are under the age of legal majority in their jurisdiction should use Bob only with any permission required from a parent or legal guardian.

14. International Users

Bob may use service providers located in the United States and other countries.

If you access the Service from outside the United States, your information may be transferred to, stored in, or processed in countries whose privacy laws may differ from those of your jurisdiction.

Where required, we will use appropriate mechanisms for international transfers of personal information.

15. Third-Party Services and Links

Bob may integrate with or contain links to services operated by third parties.

This Privacy Policy applies to Bob and does not govern the privacy practices of third parties.

Third-party services may collect information independently and are governed by their own privacy policies and terms.

We encourage you to review the privacy practices of third-party services before providing information to them.

16. App Stores

If you download or use Bob through the Apple App Store, Google Play Store, or another application marketplace, the marketplace provider may independently collect and process information relating to your use of its services.

That information is governed by the marketplace provider’s own privacy policy rather than this Privacy Policy.

17. Do Not Track

Some browsers and devices provide “Do Not Track” or similar signals.

Because there is not necessarily a uniform industry standard for responding to all such signals, Bob may not respond to every browser-based Do Not Track signal.

Where applicable law requires us to recognize a particular privacy preference signal, we will do so as required.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, technology, or applicable legal requirements.

When we update this Privacy Policy, we will revise the Effective Date above.

If changes are material, we may provide additional notice through the Service or by another appropriate means.

We encourage you to review this Privacy Policy periodically.

19. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or Bob’s privacy practices, contact:

Chris Slaughter
Sole Proprietor
Email: chris@bobchat.app