Align privacy disclosures with OpenAI usage and actual app data practices.

Document shared free-trial limits, Reddit session handling, and user content in the privacy manifest so policy and App Store metadata match how the app works.

Co-authored-by: Cursor <cursoragent@cursor.com>

App AI for Reddit/PrivacyInfo.xcprivacy

@@ -7,7 +7,20 @@
 	<key>NSPrivacyTrackingDomains</key>
 	<array/>
 	<key>NSPrivacyCollectedDataTypes</key>
-	<array/>
+	<array>
+		<dict>
+			<key>NSPrivacyCollectedDataType</key>
+			<string>NSPrivacyCollectedDataTypeOtherUserContent</string>
+			<key>NSPrivacyCollectedDataTypeLinked</key>
+			<false/>
+			<key>NSPrivacyCollectedDataTypeTracking</key>
+			<false/>
+			<key>NSPrivacyCollectedDataTypePurposes</key>
+			<array>
+				<string>NSPrivacyCollectedDataTypePurposeAppFunctionality</string>
+			</array>
+		</dict>
+	</array>
 	<key>NSPrivacyAccessedAPITypes</key>
 	<array>
 		<dict>

website/privacy/index.html

@@ -82,6 +82,13 @@
       color: var(--text);
     }
     .legal-section p { margin: 0 0 12px; color: var(--text-secondary); }
+    .legal-section a { color: var(--purple); text-decoration: none; }
+    .legal-section a:hover { text-decoration: underline; }
+    .legal-section code {
+      font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+      font-size: 0.9em;
+      color: var(--text);
+    }
     .legal-section ul {
       margin: 0 0 12px;
       padding-left: 1.35rem;
@@ -115,7 +122,7 @@
 
   <section class="page-hero">
     <h1>Privacy Policy</h1>
-    <p class="page-hero__meta">Last updated: June 30, 2026</p>
+    <p class="page-hero__meta">Last updated: July 1, 2026</p>
   </section>
 
   <main class="page-content">
@@ -137,13 +144,14 @@
 
         <h3>What you enter</h3>
         <ul>
-          <li><strong>AI tool inputs:</strong> Text you enter in Post Generator, Title Optimizer, and Comment Writer, such as subreddit names, topics, titles, drafts, and tone preferences.</li>
+          <li><strong>AI tool inputs:</strong> Text you enter in Post Generator, Title Optimizer, and Comment Writer, such as subreddit names, topics, titles, drafts, tone preferences, post URLs, post excerpts, and parent comments you want to reply to.</li>
         </ul>
 
         <h3>Stored on your Mac</h3>
         <ul>
           <li><strong>AI History:</strong> Past AI prompts and responses saved locally on your device. You can delete individual entries or clear all history in the app.</li>
-          <li><strong>App preferences:</strong> Settings such as appearance mode and cached subscription status.</li>
+          <li><strong>App preferences:</strong> Settings such as appearance mode, cached subscription status, and your remaining free live AI trial count (if applicable).</li>
+          <li><strong>Reddit sign-in data:</strong> If you sign in to Reddit in the embedded browser, cookies and session data are stored locally by the app&apos;s web view so you can stay signed in. We do not receive your Reddit password.</li>
         </ul>
 
         <h3>From Apple</h3>
@@ -153,7 +161,7 @@
 
         <h3>From Reddit</h3>
         <ul>
-          <li>If you sign in to Reddit inside the app, you interact directly with Reddit&apos;s website. We do not receive your Reddit password.</li>
+          <li>If you sign in to Reddit inside the app, you interact directly with Reddit&apos;s website. Sign-in may also involve third-party identity providers you choose (such as Google or Apple). Those providers handle authentication under their own policies.</li>
         </ul>
       </section>
 
@@ -171,21 +179,22 @@
       </section>
 
       <section class="legal-section">
-        <h2>4. AI Processing</h2>
-        <p>Live AI generation is powered by OpenAI. When you submit a request, the relevant text from your input is transmitted to OpenAI to produce a response.</p>
+        <h2>4. AI Processing (OpenAI)</h2>
+        <p>Live AI generation is powered by <strong>OpenAI</strong>. When you trigger a generation, the relevant text from your input is sent over an encrypted connection to OpenAI&apos;s API (<code>api.openai.com</code>) to produce a response. We do not operate a separate server that stores your AI inputs.</p>
         <ul>
           <li>AI requests are sent only when you actively trigger a generation.</li>
           <li>Premium subscribers receive unlimited live AI generations.</li>
-          <li>Free users receive up to 3 live AI trial generations; after that, the app uses local sample responses instead of sending data to OpenAI.</li>
+          <li>Users who have never purchased premium receive up to <strong>3 live AI trial generations total</strong> across all AI tools. After that, the app uses on-device templates instead of sending data to OpenAI.</li>
           <li>Generated responses may be saved in AI History on your Mac.</li>
         </ul>
+        <p>OpenAI processes submitted text under its own privacy policy: <a href="https://openai.com/policies/privacy-policy" rel="noopener noreferrer">openai.com/policies/privacy-policy</a>.</p>
         <p>Do not submit sensitive personal information, such as passwords, financial data, government IDs, or health information, into AI tools.</p>
       </section>
 
       <section class="legal-section">
         <h2>5. Reddit Integration</h2>
         <p>App AI for Reddit includes embedded Reddit browsing for premium subscribers. App AI for Reddit is not affiliated with Reddit, Inc.</p>
-        <p>Content you view or post on Reddit is handled by Reddit under its own policies. We are not responsible for Reddit&apos;s data practices.</p>
+        <p>When you browse or post on Reddit inside the app, your interactions are handled directly by Reddit and any identity providers you choose during sign-in. We do not receive your Reddit credentials, but Reddit may collect usage and account information under its own policies.</p>
       </section>
 
       <section class="legal-section">
@@ -197,7 +206,7 @@
         <h2>7. Data Retention</h2>
         <ul>
           <li><strong>On your Mac:</strong> AI History, preferences, and subscription cache remain on your device until you delete them or uninstall the app.</li>
-          <li><strong>AI requests:</strong> Text sent to OpenAI is processed to fulfill your request. We do not operate a separate server that stores your AI inputs.</li>
+          <li><strong>AI requests:</strong> Text sent to OpenAI is processed to fulfill your request. Retention on OpenAI&apos;s systems is governed by OpenAI&apos;s policies.</li>
         </ul>
       </section>
 
@@ -206,6 +215,7 @@
         <p>We do not sell your personal information. Information may be shared only in these cases:</p>
         <ul>
           <li><strong>OpenAI:</strong> AI inputs you submit when you trigger a live generation (premium or free trial).</li>
+          <li><strong>Reddit:</strong> Browsing, posting, and sign-in activity when you use the embedded Reddit browser.</li>
           <li><strong>Apple:</strong> Subscription verification through the Mac App Store.</li>
           <li><strong>Legal requirements:</strong> When required by law or to protect rights, safety, and security.</li>
         </ul>
@@ -222,7 +232,12 @@
       </section>
 
       <section class="legal-section">
-        <h2>11. Changes</h2>
+        <h2>11. Contact</h2>
+        <p>Questions about this Privacy Policy or your data can be sent through our support page: <a href="https://sites.google.com/view/appforreddit/get-support" rel="noopener noreferrer">Get Support</a>.</p>
+      </section>
+
+      <section class="legal-section">
+        <h2>12. Changes</h2>
         <p>We may update this Privacy Policy from time to time. The &quot;Last updated&quot; date at the top of this page will reflect the latest version. Continued use of the app after changes take effect means you accept the updated policy.</p>
       </section>
     </article>