Staitmint Privacy Policy

Effective date: October 12, 2026

Staitmint is an AI assistant app for iPhone, operated by Optaimum LLC ("we", "us"), 1100 S Miami Ave, Apt 3302, Miami, FL 33130. This policy explains what information Staitmint collects, where it goes, how long we keep it, and what you can do about it. Questions: jack@optaimum.com.

The short version

• Your conversations, the photos you attach, and the facts the assistant learns about you are stored on our servers so they sync across your devices. They are kept until you delete your account (or delete individual facts), with no automatic expiry.
• To answer you, we send your messages (and related context) to OpenAI and Google, the AI providers that generate replies.
• If you connect Google Calendar or Spotify, we store the access tokens for that connection, encrypted, and parts of your calendar can reach the AI providers.
• We use RevenueCat for subscriptions, PostHog for product analytics, and Meta and TikTok to measure our ads. We ask before tracking you (Apple's App Tracking Transparency prompt). If you don't allow it, TikTok receives nothing about you and Meta's tools run with tracking switched off.
• We email you for password resets you ask for, and occasionally with product news that has a one-click unsubscribe.
• We do not sell your personal information.
• You can delete your account in the app at any time. That deletes everything we store about you, immediately.

1. Information we collect

Account information

• Your email address and name.
• How you signed in: email and password, Sign in with Apple, or Google Sign-In. If you use Sign in with Apple and hide your email, we receive an Apple private-relay address instead.
• If you use a password, we store only a one-way hash of it (bcrypt), never the password itself.
• A count of the free replies you've used, and whether you've finished onboarding.
• When you confirmed you're 18 or older at sign-up (accounts created from app version 1.0.4).

What you put into the app

• Chat messages. Everything you send the assistant and everything it replies, with conversation titles and timestamps.
• Photos you attach to a message. These are stored with the message on our servers, not only processed. A photo you send for a one-off style analysis (outside a conversation) is processed and not stored.
• Wardrobe items you add, including their photos and details (category, colour, pattern, seasons, occasions).
• Reminders (title, notes, due time), saved items (hotels, flights, places, studios, clothing links), your style profile and saved colour palettes.
• Your onboarding answers.

Facts the assistant learns about you

As you chat, Staitmint saves short facts it infers about you, such as preferences, goals, things to avoid, and upcoming plans. It uses them to personalise replies. Your onboarding answers are also saved as facts. Each fact carries a confidence score, and time-bound facts (for example, a trip date) carry an expiry date after which the assistant stops using them. You can read, edit, export and delete your facts under Facts in the app.

Connected accounts (optional)

• Google Calendar. Read-only access (calendar.readonly, calendar.events.readonly). We store the access and refresh tokens for the connection, encrypted at rest, together with the Google account email and the permissions granted. We read your events when the assistant needs them (for example, to plan around your day) and to send calendar-prep notifications. We don't store your calendar events.
• Spotify. Permission to read your top and recently played music, your current playback and your private playlists, and to create and edit playlists for you. We store the tokens (encrypted at rest), your Spotify account email, and the permissions granted.

Location (optional)

If you allow location access and use a nearby search (studios, restaurants and similar), your device's approximate coordinates are sent with that search to Google Places. We don't store your location.

Notifications

If you allow notifications we store your device's push token, platform, and time zone (so reminders and evening briefs arrive at the right local time). We also keep a history of the notifications we send you: their title and text, and when each was sent and opened. A calendar-prep notification includes the title of the event it's about.

Subscription information

When you subscribe, Apple processes the payment. We receive the product, subscription status and billing period through RevenueCat, plus a RevenueCat customer ID. We never see your card or payment details.

Email

We use your email address to send password-reset emails when you ask for one, and occasional product emails (section 9). We keep a record of each email we send you (which email, when, and whether it was delivered), and a list of addresses that have unsubscribed, bounced or marked our email as spam, so we never send to them again.

Product analytics

We send usage events to PostHog: app opened, message sent, first message sent, onboarding completed, paywall shown, and subscription started. Each event carries your internal Staitmint user ID. We deliberately strip email addresses and names before anything is sent.

Ad measurement

See section 4.

Server logs

Our hosting provider, Render, records technical logs of requests to our servers and of errors.

2. How we use it

• To run the assistant: generate replies, remember context and your facts, show your history, send the notifications you asked for.
• To provide connected features: calendar-aware planning, playlists, nearby places, travel search.
• To manage your subscription and free-reply allowance.
• To understand and improve the product (analytics), and to measure whether our ads work (section 4).
• To keep the service secure, prevent abuse, and meet legal obligations.

We don't use your conversations to train our own AI models. We don't have any.

3. AI processing: what goes to OpenAI and Google

Staitmint's replies are generated by third-party AI models: OpenAI (GPT-4o and GPT-4o mini) and Google (Gemini). Each time you send a message, the provider handling it receives:

• your message and any photo you attached;
• recent conversation history;
• your style profile and the facts about you that are relevant to the request;
• if you've connected Google Calendar and your request needs it, the title, start and end time, and location of the relevant events (not their descriptions);
• if you've connected Spotify and ask for music, your listening profile (for example, top artists and tracks).

OpenAI also processes your messages to classify which assistant should answer, to extract the facts described above, and to write evening-brief text.

These providers process the data under their own API terms.

4. Ad measurement (Meta and TikTok)

We advertise Staitmint on Meta (Facebook and Instagram) and TikTok, and use their tools to measure which ads lead to installs and subscriptions. What we share depends on your answer to Apple's App Tracking Transparency prompt, which the app shows once, after onboarding (or on your first launch of version 1.0.4 or later if you'd already signed up). You can change your answer at any time in your iPhone's Settings → Privacy & Security → Tracking; the app applies the change the next time it opens.

If you allow tracking:

• The Meta SDK in the app reports app events to Meta, with your device's advertising identifier (IDFA). The events are: install and launch, account registration, your first chat, when the paywall is shown, and subscription purchases (price, currency and product). The SDK's automatic event logging can also report in-app purchases. It also receives standard device and network information, such as device model, OS version and IP address.
• The TikTok Business SDK in the app starts and reports install, launch, registration and subscription purchase events to TikTok, with your IDFA, the app's vendor identifier (IDFV), your IP address and user agent.
• Our server tells TikTok when your account registers, starts a free trial or subscribes. It sends a one-way hash of your Staitmint user ID and a one-way hash of your email address, and, for registration, your device's IP address and user agent.

If you don't allow tracking, or haven't been asked yet:

• The TikTok SDK does not run, and our server sends TikTok nothing about you.
• The Meta SDK still reports the app events above, with advertiser tracking switched off and without your advertising identifier. That setting tells Meta the data may not be used to track you. Meta still receives standard device and network information, such as device model, OS version and IP address, as part of those requests.

For everyone, whatever your answer: installs are also attributed through Apple's SKAdNetwork. It lets an ad network learn that an install came from one of its ads, along with a coarse value for what happened next (for example, a registration or a purchase), in aggregate, with a delay, and without identifying you or your device. Apple doesn't require permission for it. The Meta SDK reports these SKAdNetwork values for all users, and it's the only part of the app that does.

5. Who we share information with

We share personal information only with the service providers below, to run Staitmint, and as required by law.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

We do not sell your personal information.

6. How long we keep it

Copies held by the providers in section 5 are governed by their own retention. See section 8.

7. Security

Data travels between the app and our servers over HTTPS. Passwords are stored as one-way hashes, password-reset codes are stored only as hashes, and the tokens for connected Google and Spotify accounts are encrypted at rest with a key held outside the database. No system is perfectly secure, but we work to protect your information and limit who can access it.

8. Your choices and rights

• Delete your account. Open Accounts (or the subscription screen) and tap Delete account. Deletion is immediate and permanent: we delete your account and everything stored with it. That covers conversations, photos, facts, wardrobe, reminders, saved items, style profile, palettes, notification history, push tokens, connected-account tokens and your subscription record.
  • One exception: if you unsubscribed from our emails, we keep your email address on our unsubscribe list so we never email you again.
  • Deleting your account does not cancel an Apple subscription. Cancel it in your iPhone's Settings → [your name] → Subscriptions.
  • Deletion covers the data we store. Copies of events already sent to PostHog, RevenueCat, Meta and TikTok, and requests already processed by OpenAI and Google, are held under those companies' own retention. To have your PostHog analytics deleted as well, email jack@optaimum.com.
• Delete individual data. Delete facts under Facts, and wardrobe items, reminders, saved items and palettes where they appear in the app. There's no in-app control to delete a single conversation yet. To have specific conversations deleted without deleting your account, email jack@optaimum.com.
• See and export your data. Read and export your facts under Facts. For a copy of anything else we hold, email us.
• Disconnect Google Calendar or Spotify under Accounts. This deletes the tokens we store. To remove Staitmint's access on Google's or Spotify's side as well, also remove it in your Google Account permissions or Spotify's app settings.
• Notifications and location. Turn them off at any time in your iPhone's Settings.

Depending on where you live (for example, the EU, the UK or California), you may have additional rights to access, correct, delete or port your data, to object to or restrict processing, and to complain to a data protection authority. Email jack@optaimum.com to exercise them; we'll respond within the time the law requires. We won't treat you differently for exercising your rights.

9. Email

We send email through Resend, from a Staitmint address.

• Password resets. When you ask to reset your password, we email you a link. It works once, for 30 minutes.
• Product emails. Occasionally we email people who've created an account, for example about what Staitmint can do or a subscription offer. Every product email has a one-click unsubscribe link, and supports the unsubscribe button in Gmail and Apple Mail. Once you unsubscribe, we won't send you product emails again. Password-reset emails you ask for still arrive.

We don't use tracking pixels or click tracking in our emails.

10. International transfers

Our service providers may process your information in the United States and other countries whose data protection laws differ from yours.

11. Children

Staitmint is for adults: you must be at least 18 to use it, and it is not directed to anyone under 18. We don't knowingly collect personal information from anyone under 18. If you're a parent or guardian and believe someone under 18 has given us information, email us at jack@optaimum.com and we'll delete their account and data.

12. Changes to this policy

If we make material changes, we'll update the effective date and tell you in the app before they take effect.

13. Contact

Optaimum LLC 1100 S Miami Ave, Apt 3302, Miami, FL 33130 jack@optaimum.com