DropMic™ — Privacy Policy

Effective Date: July 16, 2026 Version: 1.1 Entity: DropMic LLC (Texas)

This Privacy Policy explains how DropMic LLC ("DropMic™," "we," "us") collects, uses, shares, and protects your information when you use the DropMic™ apps, website, and services (the "Service"). By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

DropMic™ is designed for people who paste sensitive conversations into it. We take that seriously, and this Policy is written to describe honestly what happens to that data.

1. Information We Collect

a. Information you provide. - Account information: email address and display name. - Date of birth: collected at signup to verify you meet our 16+ age requirement. - User Content: the text ("tough conversations," posts, messages) you submit for analysis, screenshots or images you upload so we can extract their text, voice recordings you submit for transcription, and the responses generated for you. This is your MicDNA™ history.

b. Information collected automatically. - Usage data: number of requests, feature interactions, subscription tier, daily usage counters, timestamps. - Device and technical data: IP address, device type, operating system, app version, and diagnostic data. - Error and performance data: crash reports and performance metrics.

c. Subscription information. Purchases are processed by the Apple App Store or Google Play. We receive subscription status and lifecycle events (for example, purchase, renewal, cancellation) from our subscription management provider, RevenueCat. We do not receive or store your full payment-card number.

2. How We Use Your Information

We use your information to:

• provide the core Service — analyze your submitted text and generate responses;
• maintain your MicDNA™ history so personalization features work;
• manage your account, subscription, and usage limits;
• secure the Service, enforce rate limits, prevent abuse, and debug errors;
• understand aggregate product usage to improve the Service; and
• comply with legal obligations.

We do not use your User Content to train AI models (see Section 3), and we do not sell your personal information (see Section 5).

3. AI Processing and Your Content

When you submit text, it is sent to a third-party AI provider to generate your response. If you submit a screenshot or image, it is sent to a third-party provider solely to extract its text, which is then handled the same as text you type directly. If you submit a voice recording, it is sent to a third-party provider solely to transcribe it to text, which is then handled the same as text you type directly. Our current AI, transcription, and text-extraction providers are Anthropic (Claude), Groq, and Google Cloud Vision.

These providers are contractually prohibited from using your inputs or outputs to train or fine-tune their AI models.

To be precise about what this does and does not mean:

• We do not train AI models on your content, and neither do our providers.
• Providers may transiently process and, in limited cases, temporarily log inputs and outputs to operate the service, troubleshoot errors, or detect abuse. Such logs are short-lived and are not used for training. In rare cases, content that triggers a provider's safety systems may be subject to human review for abuse enforcement — this is standard for AI services and cannot be fully disabled.
• We cache AI responses (keyed to identical inputs) to improve speed and reduce cost. Cached responses expire automatically within 24 hours.

4. How We Share Information

We share information only with:

• Service providers ("sub-processors") who help us operate the Service, listed in Section 6;
• App stores (Apple, Google) that process your purchases;
• Legal and safety recipients when required by law, to enforce our Terms, or to protect rights, safety, and property; and
• A successor entity in the event of a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

5. Sale of Data and Advertising

We do not sell your personal information, and we do not currently show third-party advertising in the Service.

If we introduce advertising or any data-sharing that could be considered a "sale" or "sharing" under laws like the California Consumer Privacy Act (CCPA), we will update this Policy, provide notice, and offer any opt-out rights required by law before doing so.

6. Sub-Processors

We rely on the following third-party providers to operate the Service:

Provider	Purpose	Data involved
Netlify	Website hosting and serverless functions	Site traffic, submitted text passed through to AI processing, usage data
Supabase	Database, authentication, hosting, edge functions	Account data, User Content, usage data
Upstash (Redis)	Caching and rate limiting	Cached AI responses, usage counters
Anthropic (Claude)	AI processing	Submitted text and generated responses
Groq	AI processing and voice transcription	Submitted text, voice recordings, and generated responses
Google Cloud Vision	Text extraction (OCR) from uploaded screenshots	Uploaded screenshot images
RevenueCat	Subscription management	Subscription status and lifecycle events
PostHog	Product analytics	Usage and device data (not User Content)
Sentry	Error monitoring	Crash and error data

7. Data Retention

• User Content and MicDNA™ history: retained until you delete it, or until your account is deleted.
• Cached AI responses: expire automatically within 24 hours.
• Usage and subscription records: retained as needed for billing, security, dispute resolution, and legal compliance.
• Backups and logs: may persist for a limited period after deletion before being fully purged.

We are developing an automated process to delete accounts after an extended period of inactivity; until that is in place, inactive accounts are retained under the terms above and can be deleted at any time using the methods in Section 8.

8. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing (for example, under GDPR or CCPA).

Self-service deletion. You can delete your account and all associated User Content directly in the app, at any time, from your Profile settings. You can also request deletion from dropmicapp.com/delete-account without the app installed. Deletion removes your account, MicDNA™ history, and associated records, and cannot be undone.

Other requests. For access, correction, or export requests, contact us at legal@dropmicapp.com. We will respond within the timeframes required by applicable law (generally 30–45 days).

We do not discriminate against you for exercising your privacy rights.

9. Security

We protect your information using:

• Encryption in transit (TLS) for all data moving between your device and our servers;
• Encryption at rest provided by our infrastructure providers;
• Access controls, authentication, row-level database security, and rate limiting; and
• Monitoring for errors and abuse.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for anyone under 16. We do not knowingly collect personal information from children under 16. If we learn we have, we will delete it. Contact legal@dropmicapp.com with any concerns.

11. International Users and Data Transfers

DropMic™ is operated from the United States, and your information is processed in the U.S. and in the locations of our sub-processors. If you access the Service from outside the U.S., you consent to processing in the U.S., which may have different data-protection laws than your country.

12. California Privacy Rights

If you are a California resident, the CCPA gives you rights to know, delete, and correct your personal information, and to opt out of "sale" or "sharing." We do not sell or share your personal information as those terms are defined. You may exercise your rights as described in Section 8. You may use an authorized agent, and we will not discriminate against you for exercising these rights.

13. Changes to This Policy

We may update this Policy. If we make material changes, we will provide reasonable notice (in-app or by email) and update the Effective Date above. Continued use after changes take effect constitutes acceptance.

14. Contact

DropMic LLC Email: legal@dropmicapp.com

DropMic™ Privacy Policy v1.1 — Effective July 16, 2026.