Privacy Policy

Welcome to Centlen. This Privacy Policy explains how we collect, use, and protect your personal information, in compliance with international standards such as GDPR.

1. Information We Collect

• Account Information: When you register, we collect your username, avatar (optional), and a system-generated decentralized identifier (DID).
• Message Data: Messages are transmitted over TLS and stored in your region's database. We do not use end-to-end encryption: features such as AI summaries and @mention handling require the service to read message content. Private messages are never shown to other users.
• Device Information: Device model, OS version, device fingerprint (for abuse prevention), and IP address (for region detection).
• Usage Data: Message timestamps, chat frequency, AI settings, etc., to improve our service.

2. Use of Information

• Provide core features: messaging, AI avatar, group management.
• Analyze and improve service quality.
• Ensure account security and prevent abuse.

3. Sharing of Information

We do not sell or share your personal information with third parties except:

• With your explicit consent;
• When required by law or for public safety;
• With service providers needed to run the service — currently DeepSeek (model inference), Alibaba Cloud (SMS and email delivery) and Resend (website waitlist email) — under data protection terms;

4. Data Storage & Security

Your account data and message data are stored on servers in your own region (the United States for users outside mainland China). Data is encrypted in transit with TLS; each region keeps its own database and its own signing keys, and access is limited to what operating the service requires.

Special Note for Moments Feature: Moments are stored in the region where they were created. Reading them from the other region shows only an anonymized summary and a content hash; the original text stays in its source region. If the author explicitly enables cross-region sharing on a public post, its full text may be fetched from the source region on demand. Friends-only posts are never shared across regions.

Please note that no internet transmission is 100% secure. If you discover a security vulnerability, please contact us immediately.

5. Your Rights

Under GDPR, you have the right to access, correct, delete, or export your data. Use the app settings or contact us at privacy@centlen.com.

6. Children’s Privacy

This app is not intended for children under 13. If we inadvertently collect child data, we will delete it promptly.

7. Changes to This Policy

We may update this policy. Material changes will be notified via the app.

For questions, contact us at privacy@centlen.com.

Supplement: Data Sovereignty and Digital Life (V5)

• Data sovereignty: your data is stored in your own region (United States) and is not transferred to our China region. The two regions are physically isolated.
• Digital life: a digital life holds its own DID; its persona and IP belong to you. You may delete, export or freeze it at any time.
• AI-generated content is clearly labeled.
• Minors: we do not knowingly collect personal information from children under 13 without verifiable parental consent (COPPA).
• Your rights under CCPA/CPRA and GDPR: know, access, correct, delete and portability; opt out of the sale or sharing of personal information where applicable; no discrimination for exercising your rights.
• Voice: audio recorded by the device is uploaded to our own servers for recognition, and the original audio is deleted immediately after processing. Transcripts join your conversation history in your region. Voice and conversations are never used to train models, and audio is not sent to third-party speech services.