Privacy Policy

1. Introduction                                                                                                                        

  RiteUPAi ("we", "us", "our") operates the Margah Gateway platform and the PromptGuard application for iOS and macOS. This Privacy Policy

  explains how we collect, use, and protect your information when you use our products and services.

  2. Information We Collect

  2.1 Account Information

  When you create a Margah Gateway account or submit a contact form, we collect your name, email address, company name, and any additional

  information you provide.

  2.2 Usage Data

  We collect anonymized usage analytics through Firebase Analytics, including app launch events, feature usage patterns, and crash reports

  via Firebase Crashlytics. This data does not include prompt content or personally identifiable information.

  2.3 Prompt Data (On-Device Analysis)

  When you use PromptGuard's on-device analysis features, all prompt text is processed locally on your device using our bundled ML model

  and rule-based detection engine. This data is never sent to our servers or any third party.

  2.4 Prompt Data (Third-Party AI Services)

  When you choose to connect cloud AI providers (such as OpenAI or Anthropic) or connect to Margah Gateway, PromptGuard will send prompt

  text and conversation messages to those services only when you explicitly execute a prompt. The specific data sent includes:

  - Prompt text and conversation messages

  - Model preferences and configuration parameters

  - API keys you provide (stored securely in your device's Keychain, never on our servers)

  2.5 Subscription Information

  Subscription purchases are processed by Apple through the App Store. We do not collect or store payment information. Apple provides us

  with transaction receipts to verify subscription status.

  3. Third-Party AI Services

  PromptGuard allows you to optionally connect to the following third-party AI services:

  - OpenAI — Prompt text is sent to OpenAI's API for model inference. Subject to https://openai.com/policies/privacy-policy.

  - Anthropic — Prompt text is sent to Anthropic's API for model inference. Subject to https://www.anthropic.com/privacy.

  - Margah Gateway — When connected, prompts are sent to the Margah Gateway API for server-side analysis and governance. Margah stores only

   redacted input (first 1,000 characters) for audit purposes; no raw prompt text is retained.

  - Local/Self-Hosted Providers — When you connect to local AI servers (Ollama, LM Studio, or OpenAI-compatible endpoints), data is sent to

   servers you control on your local network. We have no access to this data.

  You are always in control of when data is sent. PromptGuard requires your explicit consent before configuring any cloud AI provider, and

  data is only transmitted when you explicitly execute a prompt. You can revoke consent and disconnect providers at any time in Settings.

  4. How We Use Your Information

  - To provide and improve our products and services

  - To process your subscription and manage your account

  - To respond to your inquiries and support requests

  - To send you service-related communications (not marketing)

  - To monitor and improve app stability through crash reporting

  5. Data Storage and Security

  - API keys are stored in your device's Keychain (hardware-backed on devices with Secure Enclave), never in plain text or on our servers

  - On-device analysis history is stored locally and can be deleted at any time

  - Margah Gateway uses TLS encryption for all data in transit

  - Server-side audit logs store only redacted content; raw prompt text is never persisted

  - Contact form submissions are stored in a secure database and used only to respond to your inquiry

  6. Data Sharing

  We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

  - With third-party AI providers you explicitly choose to connect (as described in Section 3)

  - With Firebase (Google) for anonymized analytics and crash reporting

  - With Apple for subscription management

  - When required by law or legal process

  All third parties we work with provide equivalent or greater protection for your data as described in this policy.

  7. Your Rights and Choices

  - Consent — You can grant or revoke consent for AI data sharing at any time in Settings > Privacy

  - Disconnect — You can disconnect from any AI provider or Margah Gateway at any time

  - Delete History — You can delete your analysis history from Settings

  - Account Deletion — You can request deletion of your Margah Gateway account and all associated data by contacting us

  - Analytics Opt-Out — You can disable analytics collection in device settings

  8. Children's Privacy

  Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

  9. Changes to This Policy

  We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page

  and updating the "Last updated" date.

  10. Contact Us