Privacy Policy

1. Data We Collect

We collect only the minimum data needed to operate the service:

• Account information — phone number, email address, or Google account (if you register)
• Conversation history — messages sent to the AI (stored for cross-device sync)
• Usage data — IP address, browser type, and pages visited (for analytics and security)
• Cookies — session and theme cookies, plus analytics cookies only with your consent (see section 10)

2. How We Use Data

Your data is used only to:

• Provide and improve the 4DGPT service
• Sync your conversation history across your devices
• Prevent abuse and protect platform security
• Generate anonymous usage statistics

3. Data Sharing

We do not sell your personal data to any third party. Data is only shared with:

• Supabase — database and authentication provider (at-rest encryption included)
• Google AI (Gemini) — to process AI conversations (messages are sent but not stored by Google)
• Authorities — only when required by Malaysian law

4. Data Security

We take the following steps to protect your data:

• At-rest encryption for all database data
• Row Level Security (RLS) — each user can only access their own data
• HTTPS for all communication
• API keys are never exposed to the client browser

5. Retention

• Conversation history — retained while the account is active
• Usage logs — retained for 90 days for security purposes
• Account data — deleted within 30 days of a deletion request

6. Your Rights

You have the right to:

• Request a copy of your personal data
• Request correction of inaccurate data
• Request deletion of your account and all related data
• Withdraw consent at any time

To exercise these rights, please contact us by email at [email protected].

7. Cookies

4DGPT uses essential cookies by default. With your consent, analytics cookies (Google Analytics, PostHog) are also used — see section 10. The essential cookies we use:

• Authentication session — to keep you signed in
• Theme preference — to remember your light/dark choice

8. Changes to This Policy

We reserve the right to update this policy at any time. Changes take effect immediately upon publication on this page. We encourage you to review this page periodically.

9. Contact Us

If you have any questions about this privacy policy, please contact us at [email protected].

10. Analytics & Cookies

With your consent, we use third-party analytics tools to understand traffic and improve the site. These stay off until you accept:

• Google Analytics 4 — aggregate traffic, sources, device and approximate location. Processed by Google (United States / global).
• PostHog — heatmaps and session recordings showing how the site is used, hosted in the European Union.
• Privacy protection — all input fields are masked and the AI chat box is fully excluded from recordings. We never record what you type.
• Cross-border transfer — enabling these tools transfers data outside Malaysia (to Google US/global and PostHog EU) under their data-processing terms and your consent.
• Your choice — analytics stays off until you accept, and you can change or withdraw your choice at any time using the button below.