Privacy Policy

Pummel.ai ("Pummel," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service.

We built Pummel to help people think more clearly with AI. Part of that mission means being transparent about how we handle your data.

Account Information: When you create an account, we collect your email address and password (encrypted). If you subscribe to a paid plan, we collect billing information through our payment processor, Stripe.

Usage Data: We collect information about how you use Pummel, including the prompts you submit, which AI providers you select, and response metadata (such as token counts and latency).

Technical Data: We automatically collect certain technical information, including your IP address, browser type, and device information, to ensure the service functions properly and to prevent abuse.

We use your information to:

• Provide and maintain the Pummel service
• Process your prompts through AI providers (OpenAI, Anthropic, Google)
• Manage your account and subscription
• Enforce usage limits and prevent abuse
• Improve our service and develop new features
• Communicate with you about your account or the service
• Comply with legal obligations

When you submit a prompt, we send it to the AI providers you've selected (OpenAI, Anthropic, and/or Google). Each provider processes your prompt according to their own privacy policies and terms of service.

Important: We use API access to these providers, which typically means your data is not used to train their models. However, we encourage you to review each provider's policies directly:

• OpenAI Privacy Policy
• Anthropic Privacy Policy
• Google Privacy Policy

Pummel does not use your prompts or responses to train any AI models. Your conversations are your own. We store prompt and response data solely to provide the service, maintain your history (if applicable), and improve system performance.

We retain your account information for as long as your account is active. Usage data (prompts, responses, and metadata) is retained for up to 90 days for operational purposes, after which it may be deleted or anonymized.

If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of sensitive data at rest
• Secure password hashing
• Access controls and authentication
• Regular security reviews

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We use the following third-party services to operate Pummel:

• Supabase: Database and authentication
• Stripe: Payment processing
• Vercel: Hosting and infrastructure
• OpenAI, Anthropic, Google: AI model providers

Each of these services has their own privacy policies governing how they handle data.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Export your data in a portable format
• Opt out of certain data processing activities

To exercise these rights, please contact us at privacy@pummel.ai.

Pummel is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of Pummel after changes are posted constitutes your acceptance of the updated policy.

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: privacy@pummel.ai