SAY SUMTHIN PRIVACY POLICY
Effective Date: 9 October 2026
Last Updated: 9 October 2026
1. Introduction
Welcome to Say Sumthin (“Say Sumthin,” “we,” “us,” or “our”). Say Sumthin is a mobile application that provides messaging features and AI Mirror, an AI-powered feature.
This Privacy Policy explains how Red Pill Lens LLC collects, uses, stores, discloses, and protects personal information when you use Say Sumthin, our website, and related services (collectively, the “Service”).
Company: Red Pill Lens LLC
Location: Los Angeles, California, United States
2. Information We Collect
2.1 Account Information
We may collect:
•
Your birth month and birth year.
•
Your account identifier and preferences.
•
Information required to authenticate your account.
•
Account status and settings associated with your use of the Service.
We use this information to create and manage accounts, authenticate users, provide account-related functionality, and help enforce applicable eligibility requirements.
2.2 Google Sign-In
If you choose to sign in using Google, we may receive information that Google makes available through the permissions and authentication process, such as your email address, Google account identifier, and basic profile information where provided.
We use this information to authenticate you and associate your Google sign-in with your Say Sumthin account. Google's processing of information is governed by its own policies.
2.3 Messages and Conversation Content
We process messages and other content you submit through Say Sumthin's messaging features. This may include message text, conversation history, and information associated with sending, receiving, and managing messages.
We use this information to provide messaging functionality, display conversation history, maintain the Service, investigate technical problems, and address abuse or security incidents where appropriate.
2.4 AI Mirror
When you use AI Mirror, we process the prompts, messages, and contextual information you submit to generate AI responses.
To provide this feature, your submitted content may be transmitted to our AI service provider, OpenAI. That provider may process submitted information under its applicable service terms, privacy policy, and configuration.
Please avoid submitting passwords, payment credentials, government identification numbers, or other sensitive personal information to AI Mirror.
2.5 Push Notification Tokens
We may collect a device push token or similar identifier to deliver notifications. We use Firebase Cloud Messaging (FCM) and related Firebase services, where applicable, to support push notifications.
You can manage notification permissions through your device settings. Disabling notifications may prevent you from receiving certain alerts but does not necessarily delete your account.
2.6 Subscription and Paywall Information
We use RevenueCat to support subscription and purchase management and Superwall to support paywalls and subscription-related experiences.
Depending on the features used and the integrations enabled, these services may process an app-specific user identifier, subscription status, product identifiers, purchase-related information, paywall events, and technical information required to provide their services.
Apple App Store or Google Play may separately process payment and purchase information when you buy a subscription through those stores.
2.7 Technical and Diagnostic Information
We may process technical information necessary to operate, maintain, and secure the Service, such as app version, device and operating-system information, error reports, timestamps, and security events, depending on the features and services enabled.
3. How We Use Information
We may use personal information to:
1.
Create, authenticate, and manage accounts.
2.
Provide messaging and conversation functionality.
3.
Generate responses through AI Mirror.
4.
Deliver push notifications.
5.
Manage subscriptions and access to paid features.
6.
Maintain, troubleshoot, and improve the Service.
7.
Protect accounts, detect misuse, and investigate security incidents.
8.
Respond to support requests and privacy inquiries.
9.
Enforce our terms and policies.
10.
Comply with applicable legal obligations and resolve disputes.
We do not sell personal information to data brokers.
4. How We Share Information
We may share information with the following providers and categories of recipients, as necessary to operate the Service.
Google Sign-In: Supports account authentication.
Firebase and Firebase Cloud Messaging: Support push notifications and related technical functionality.
RevenueCat: Supports subscription management, purchase validation, and entitlement tracking.
Superwall: Supports paywalls and subscription-related user experiences.
AI provider — OpenAI: May process prompts, messages, and relevant context submitted to AI Mirror to generate responses.
App stores and payment providers: May process transactions, subscriptions, and purchase records.
We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect users, investigate fraud or security incidents, enforce our policies, or complete a corporate transaction, subject to applicable law.
We do not authorize service providers acting on our behalf to use personal information for purposes unrelated to their services except where permitted by their role and applicable law.
5. Data Retention
We retain information for as long as reasonably necessary to provide the Service, fulfil the purposes described in this policy, meet legal obligations, resolve disputes, and protect the Service.
Our intended retention approach is:
•
Account information: While the account is active and for any additional period reasonably necessary for lawful purposes after a deletion request.
•
Messages and AI Mirror conversations: While needed to provide conversation history and related features, subject to our implemented deletion and retention procedures.
•
Push tokens: While needed to deliver notifications or maintain the relevant notification functionality.
•
Subscription and transaction records: As needed for purchase validation, subscription management, accounting, disputes, and legal obligations.
•
Technical and security records: For a limited period appropriate to troubleshooting, security, and compliance.
Actual retention periods: 90 days.
Deletion from active systems may not immediately remove all copies from backups, technical logs, or independent third-party systems. Those copies may remain until they expire under the applicable retention processes or must be retained for a lawful purpose.
6. Account and Data Deletion
You may request account deletion through the deletion feature in the application, if available, or by contacting [support@saysumthinapp.com](mailto:support@saysumthinapp.com) with the subject line “Account Deletion Request – Say Sumthin.”
After verifying a valid request, we will take reasonable steps to delete or de-identify personal information covered by our deletion process, subject to legal obligations, security needs, and the exceptions described below.
We may retain limited information where necessary for transaction records, legal compliance, fraud prevention, security, dispute resolution, or the establishment or defence of legal claims.
Information held by third-party providers may be subject to their own deletion processes and retention obligations. Deleting your Say Sumthin account may not remove copies already received by another user or immediately erase all copies held in backups.
7. Security
We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, loss, alteration, disclosure, and misuse.
No internet-based service can guarantee absolute security. You are responsible for keeping your authentication credentials secure and should contact us promptly if you suspect unauthorized access.
8. International Processing
Our service providers may process information in countries other than the country in which you live. Where required by applicable law, we will use appropriate safeguards for international transfers of personal information.
9. Your Privacy Rights
Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or restrict certain processing.
You may exercise applicable rights by emailing [support@saysumthinapp.com](mailto:support@saysumthinapp.com) with the subject line “Privacy Request – Say Sumthin.” We may need to verify your identity before responding.
California residents may have additional rights under applicable California privacy laws, subject to the law's definitions, scope, and exceptions. Depending on applicability, these may include rights to know or access, correct, or delete certain personal information and to opt out of certain forms of sale or sharing. We do not sell personal information to data brokers. Contact us to submit a request or ask about the rights available to you.
If you are located elsewhere, you may have rights under the data protection laws applicable to your location.
10. Children's Privacy and Minimum Age
Say Sumthin is intended for users who meet the minimum age requirement specified for the Service and permitted by applicable law.
Minimum age and eligibility rule: 18.
We do not knowingly collect personal information from children who are not permitted to use the Service. If you believe a child has provided information in violation of this policy, contact
support@saysumthinapp.com so we can investigate and take appropriate action.
11. Notifications and Marketing
We may send service-related notifications concerning messaging, account activity, security, subscriptions, or changes to the Service.
Where required by law, we will obtain consent before sending marketing communications. You can manage push notification permissions through your device settings and use an unsubscribe mechanism where one is provided for marketing emails.
12. Changes to This Policy
We may update this policy to reflect changes in the Service, our data practices, or applicable law. We will update the “Last Updated” date and provide additional notice where required.
13. Contact Us
For privacy questions, account-related requests, or concerns about this policy:
Company: Red Pill Lens LLC
Location: Los Angeles, California, United States
Please use “Privacy Request – Say Sumthin” in the subject line for requests involving personal information.