SpecPilot Privacy Policy

This Privacy Policy explains how SpecPilot: AI PRD Builder ("SpecPilot", "we", "us", or "our") collects, uses, stores, and protects information when you use the SpecPilot mobile app and related services.

Effective date: June 8, 2026

Quick Summary

Purpose We use your information to provide PRD generation, chat history, model configuration, usage limits, and export features.

Your API Keys If you configure a third-party AI provider, your API key is used to call that provider on your behalf.

AI Providers Your prompts, messages, and generated content may be sent to the AI provider you configure.

No Sale of Data We do not sell your personal information.

Information We Collect

Device identifier: a device-level identifier used to load your settings, sessions, and usage records.
Model configuration: provider name, base URL, model name, and API key if you choose to save one.
Conversation content: messages, prompts, generated PRD drafts, session titles, and exportable content.
Usage records: usage count, session type, session ID, and timestamps used to enforce free or paid usage limits.
Support information: information you choose to send when contacting us for help.

How We Use Information

Provide and improve the SpecPilot app experience.
Save your model settings and load your chat history.
Generate PRDs, product specs, and structured drafts.
Let the app connect directly to the AI provider you configure.
Track monthly usage limits and prevent abuse.
Respond to support requests and troubleshoot issues.

Third-Party AI Providers

SpecPilot supports bring-your-own-model workflows. When you configure a third-party AI provider, the app may send your prompts, messages, conversation context, and generated content to that provider in order to produce responses. Your use of that provider is also subject to that provider's own terms and privacy policy.

Do not enter sensitive personal data, confidential business information, trade secrets, or regulated data unless you are allowed to share that information with your selected AI provider.

API Keys

API keys are stored only on your device using the platform keychain. SpecPilot servers do not save your API key. When model functionality is used, the app connects directly to your selected AI provider from your device. You should use provider-side controls, spending limits, and key rotation where available.

Storage and Security

We use reasonable technical and organizational measures to protect the information we process. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Data Retention

We keep information for as long as needed to provide the app, maintain your history and settings, comply with legal obligations, and resolve disputes. You may contact us to request deletion of data associated with your device identifier.

Children's Privacy

SpecPilot is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Your Choices

You may choose not to save an API key.
You may delete or rotate API keys through your provider.
You may contact us to request deletion of your app data.
You may stop using the app at any time.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and publish the new policy on this page.

Contact Us

If you have questions about this Privacy Policy or want to make a data request, contact us at 865522455@qq.com.

For product support, visit SpecPilot Support.