Privacy Policy | PSL Max

Effective Date: [Month Day, Year]Last Updated: [Month Day, Year]Company: [Hardtosay LLC / Full Legal Company Name] (“PSL Max,” “we,” “us,” or “our”)Contact: HardtosayLLC@gmail.comMailing Address: [Company Mailing Address]

This Privacy Policy explains how PSL Max collects, uses, stores, shares, and protects information when you use the PSL Max mobile application, websites, backend services, AI image-generation features, face-scan features, analytics, routine features, community features, support channels, paid features, and related services (collectively, the “Service”).

PSL Max is an AI-assisted appearance analysis, image generation, routine, analytics, and community app. Because the Service may process face images, scan-derived appearance information, body-related inputs, generated images, preferences, and public community content, this Policy is designed to explain our practices in plain language and in detail.

This Policy should be read together with our Terms of Service. If you do not agree with this Policy, do not use the Service.

Summary of Key Points

This summary highlights important parts of the Policy. The full Policy below controls.

What personal information do we process? We may process information you provide, information created when you use PSL Max, camera/scan/photo data, AI generation data, community content, purchase entitlement data, device data, diagnostics, and usage data.

Do we process sensitive information? Yes, depending on the features you use. Face images, scan-derived appearance data, body-related inputs, health-adjacent preferences, birth date, generated images, and community content may be sensitive. We do not use this information for third-party targeted advertising or data brokerage.

Do we use face data to identify you? PSL Max is designed for appearance analysis and image generation, not face identification. We do not use face images, facial geometry, AR/depth data, or scan-derived data to identify or authenticate you as a unique person, build a face-recognition database, or track you across apps or websites.

Do we share information with third parties? Yes, in limited ways needed to operate the Service. For example, we may share data with hosting providers, AI providers such as OpenAI, Apple payment systems, diagnostics providers, moderation/safety vendors, support providers, and professional advisors. We also disclose community content to other users when you post it publicly.

Do we use third-party AI? Yes. When you use Generate, PSL Max may send your selected or latest scan image and generation details to our generation server and OpenAI, our third-party AI provider, to create your requested image. We ask for explicit Generate consent before doing this.

Do we sell personal information? We do not sell your personal information for money. We do not sell or share face images, scan-derived facial data, generated images, body-related inputs, or community content with data brokers.

Do we use tracking for advertising? PSL Max is not designed to track you across third-party apps and websites for targeted advertising. If this changes, we will update this Policy, update App Store disclosures, and obtain required consent.

How do we use information? We use information to provide and improve the Service, run scans, display results, generate images, personalize routines and analytics, operate community features, process entitlements, provide support, prevent abuse, secure the Service, comply with law, and enforce our Terms.

How long do we keep information? Retention depends on the feature and data type. On-device data generally remains until deleted by you, reset through the app, or removed by uninstalling the app. Server-side data is kept only as long as reasonably necessary for the disclosed purposes, subject to the retention table below. Replace any bracketed retention items before publishing this Policy.

What are your privacy choices? You can manage device permissions in iOS settings, decline or withdraw Generate consent for future AI requests, delete local data where supported, manage community controls, unsubscribe from marketing where offered, and contact us to request access, deletion, correction, portability, restriction, objection, or consent withdrawal where applicable.

Is PSL Max for children? No. PSL Max is intended for users who are at least 17 years old, or older where local law requires. We do not knowingly collect personal information from children under 13.

Scope
Information We Collect
Information Created or Inferred by PSL Max
Information We Receive From Third Parties
How We Use Information
AI Image Generation and Third-Party AI Consent
Legal Bases for Processing
How and When We Share Information
Data We Do Not Sell or Use for Advertising
Cookies, SDKs, Tracking Technologies, and Do-Not-Track Signals
Data Retention
Your Choices and Controls
Regional Privacy Rights
California Notice at Collection and Privacy Rights
Children and Minors
Security
International Data Transfers
Third-Party Services
Changes to This Policy
Contact Us
How to Review, Update, or Delete Your Data

1. Scope

This Policy applies to information processed through:

The PSL Max iOS application;
PSL Max websites and landing pages that link to this Policy;
PSL Max servers, APIs, databases, and backend services;
Face scan, photo, and analysis features;
AI image generation features;
Routine, analytics, onboarding, and personalization features;
Community features, username systems, posts, comments, replies, votes, saves, reports, and blocks;
Support, email, feedback, and contact channels;
Paid features, subscriptions, in-app purchases, trials, and entitlement systems;
Security, diagnostics, logging, abuse-prevention, and moderation systems.

This Policy does not apply to third-party websites, apps, services, or platforms that we do not control. Third-party services may have their own privacy policies and terms.

2. Information We Collect

The information we collect depends on how you use PSL Max, what features are enabled, what information you choose to provide, and what device permissions you grant.

2.1 Information You Provide Directly

We may collect information you enter, choose, upload, or submit, including:

First name, display name, or profile name;
Community username;
Gender or gender-related selections, if provided;
Birth date, age, or age range;
Height, weight, and other body-related inputs, if provided;
Looksmaxxing preferences, including Natural, Softmaxxing, Hardmaxxing, or Experimental;
Routine goals, preferences, selections, check-ins, completion states, or progress notes;
Medical disclaimer acknowledgment status;
AI generation consent status;
Community posts, comments, replies, reports, blocks, votes, saves, reactions, and moderation appeals;
Support requests, email address, message content, screenshots, attachments, and correspondence;
Feedback, survey responses, bug reports, or feature requests;
Any other information you voluntarily provide.

Please do not submit information you do not want PSL Max to process.

2.2 Camera, Face Scan, Photo, and Generated Image Data

Depending on the feature, PSL Max may process:

Camera frames or captures used for face-scan flows;
Front-facing and side-profile scan images;
Latest scan preview images;
Images selected or used for Generate;
Generated images created by AI image generation;
Face position, pose, alignment, crop, framing, lighting, quality, and capture metadata;
Facial landmark, geometry, mesh, depth, head-pose, or similar analysis data if used by the app;
Scan-derived appearance measurements, category scores, PSL estimates, potential estimates, tier labels, and similar app-generated outputs;
Local file paths and lightweight metadata used to find images stored on your device.

Some image data may remain only on your device. Some image data may be transmitted off-device when needed to provide cloud-backed features such as AI image generation, backend scoring, support, debugging, abuse prevention, safety, moderation, or service security.

2.3 AI Image Generation Data

When you use Generate, PSL Max may send some or all of the following to our generation server and our AI provider:

Source image, selected image, or latest scan image;
Current PSL estimate;
Current potential estimate;
Target PSL, selected transformation target, or requested generation goal;
Tier label;
Generation mode;
Timestamp;
Category ID;
Option ID;
Prompt profile ID;
Option title;
Prompt and configuration metadata;
Request status, latency, error, and model metadata;
Safety, abuse-prevention, and diagnostic metadata.

We use this information to create the generated image you requested, operate the feature, troubleshoot errors, prevent abuse, enforce safety rules, maintain security, and improve reliability.

2.4 Community Data

If you use Community features, we may collect and process:

Permanent username and username claim status;
Posts, comments, replies, titles, text, media, and other content you submit;
Upvotes, saves, reactions, reports, blocks, and moderation actions;
User IDs, device-linked identifiers, session identifiers, account identifiers, or community identifiers;
Content status, visibility, timestamps, edit/delete status, and abuse-prevention metadata;
Moderator notes, takedown reasons, enforcement history, and safety records.

Community content may be visible to other users. Do not post private information, non-consensual images, images of minors, or content you do not have permission to share.

2.5 Usage, Analytics, Diagnostics, and Technical Data

We may collect technical and usage information such as:

Device type, hardware model, operating system version, app version, language, region, and general configuration;
IP address, approximate location derived from IP address, network information, and server logs;
Device identifiers, app instance identifiers, session identifiers, or similar identifiers used for app functionality, security, diagnostics, analytics, fraud prevention, or abuse prevention;
App interactions, screens viewed, buttons tapped, feature usage, onboarding progress, scan attempts, generation attempts, routine activity, and Community interactions;
Performance data, crash reports, latency, API response status, errors, diagnostic events, and system activity;
Dates and times of access, referring URLs for websites, browser type for websites, and similar log data.

We do not use tracking technologies for third-party targeted advertising unless we update this Policy, update platform disclosures, and obtain any required permission.

2.6 Purchase and Subscription Data

If PSL Max offers paid features, subscriptions, trials, consumables, non-consumables, or in-app purchases, purchases in the iOS app are generally processed through Apple. We may receive and store information needed to provide access to paid features, such as:

Product purchased;
Subscription status;
Trial status;
Renewal, expiration, cancellation, grace period, refund, or revocation status;
Transaction identifiers or receipt validation results;
Entitlement status;
Limited purchase analytics, if enabled.

We do not receive your full payment card number from Apple.

2.7 Device Permissions and Application Data

PSL Max may request iOS permissions such as Camera, Photos, Notifications, or other permissions depending on features.

Camera: used for face scans, capture guidance, latest scan previews, analysis, and related features.
Photos: used to select images for supported features or save generated images if you grant access.
Notifications: may be used for reminders, routine prompts, scan reminders, feature updates, service messages, or community notifications if enabled.

You can manage permissions through iOS settings. If you deny a permission, some features may not work.

3. Information Created or Inferred by PSL Max

PSL Max may create or infer information from your inputs and app activity, including:

PSL estimates and potential estimates;
Feature-level appearance categories, such as eyes, midface, lower third, upper third, skin, facial harmony, jawline, symmetry, or similar categories if offered;
Progress analytics, scan history, improvement estimates, and countdowns;
Routine recommendations and task priorities;
Generation prompts, prompt profiles, image-generation metadata, and AI outputs;
Community trust, safety, spam, abuse, and moderation signals;
Subscription entitlements and feature access status.

These outputs are estimates, generated content, or product personalization signals. They are not medical, dental, surgical, psychological, dating, employment, financial, legal, or professional advice.

4. Information We Receive From Third Parties

We may receive information from third parties in limited circumstances, including:

Apple: purchase status, subscription status, transaction identifiers, receipt validation data, App Store download/refund-related signals, and device/platform information made available through Apple services;
AI providers: generated images, model response metadata, safety metadata, error metadata, or moderation signals related to a request you initiated;
Cloud, hosting, analytics, diagnostics, or security providers: logs, diagnostics, crash reports, security alerts, or usage metrics;
Support and email providers: support ticket metadata, email delivery status, or correspondence metadata;
Community users: reports, moderation flags, block signals, or content involving your username or Community content;
Legal, safety, or compliance sources: information needed to investigate abuse, protect users, respond to legal requests, or enforce our Terms.

We do not currently require social media login. If PSL Max later offers social login, we will update this Policy and describe what profile information we receive from the relevant social platform.

5. How We Use Information

We process information to:

Provide, operate, maintain, and improve PSL Max;
Capture, process, and display face-scan results;
Estimate appearance-related scores, potential estimates, feature categories, and progress analytics;
Store and display scan previews, generated images, and local app content;
Generate AI images requested by you;
Personalize onboarding, routines, recommendations, insights, analytics, and feature access;
Operate Community features, including username claims, posts, comments, replies, upvotes, saves, reports, blocks, and moderation;
Filter, moderate, and enforce rules against harassment, bullying, impersonation, exploitation, objectification of real people, spam, scams, and other abuse;
Process purchases, subscriptions, trials, entitlements, restores, refunds, and billing support;
Provide customer support and respond to requests;
Send administrative notices, service messages, safety notices, policy updates, and support communications;
Send notifications if you enable them;
Debug errors, monitor performance, improve reliability, and maintain backend operations;
Secure our systems, prevent fraud, detect abuse, investigate incidents, and protect users;
Analyze aggregated or de-identified usage trends to improve the Service;
Comply with law, respond to lawful requests, enforce our Terms, and protect rights, safety, and security.

We do not use face images, facial mapping data, scan-derived facial data, or generated images for third-party advertising, targeted advertising, data brokerage, or use-based data mining.

PSL Max includes AI image generation features. These features may require us to send your source image and related generation metadata to a third-party AI provider, currently OpenAI, through our generation server.

Before sending personal data to a third-party AI provider for Generate, PSL Max will request your explicit consent. Consent for device-level camera or photo access is separate from consent to send personal data to a third-party AI provider.

When you consent to AI image generation, you authorize PSL Max to process and share the relevant image and generation metadata with our service providers for the purpose of creating your requested image, operating the feature, enforcing safety rules, preventing abuse, debugging, and maintaining service security.

You may withdraw AI generation consent for future Generate requests in the app where available, or by contacting us. Withdrawing consent will stop future third-party AI generation requests that require consent. It may not delete information that has already been processed where retention is required or permitted for security, legal, billing, support, abuse-prevention, or provider-retention reasons.

We do not intentionally allow third-party AI providers to use your personal data for their own advertising or marketing. We do not intentionally opt in to allow OpenAI to use PSL Max API inputs or outputs to train or improve OpenAI models unless we first update this Policy and obtain any required consent.

AI-generated outputs may be inaccurate, unrealistic, incomplete, biased, or visually imperfect. They are not medical, psychological, dental, surgical, dating, or professional advice.

7. Legal Bases for Processing

This section applies where laws such as the GDPR, UK GDPR, Canadian privacy laws, or similar laws require us to identify a legal basis for processing personal information.

Depending on the context, we may process information based on:

Consent: for example, when you grant Camera or Photo permissions, enable Notifications, consent to third-party AI generation, submit optional information, or opt in to marketing.
Contract: to provide the Service you requested, operate your account or community identity, process purchases and entitlements, provide support, and enforce feature access.
Legitimate interests: to improve the Service, maintain security, prevent fraud and abuse, debug issues, analyze usage trends, protect users, moderate Community content, and enforce rules, where those interests are not overridden by your rights.
Legal obligations: to comply with law, tax/accounting obligations, lawful requests, platform requirements, consumer protection obligations, and safety obligations.
Vital interests or public interest: in rare cases, to protect someone’s life, safety, or security, or where required by applicable law.

Where we rely on consent, you may withdraw consent at any time, subject to limitations described in this Policy and applicable law. Withdrawal does not affect processing that occurred before withdrawal.

We may share information with the following categories of recipients.

8.1 Service Providers and Vendors

We may share information with vendors, contractors, and service providers that help us operate PSL Max, including:

Cloud hosting and backend infrastructure providers;
AI image generation providers, including OpenAI;
Database, storage, logging, and security providers;
Analytics, diagnostics, and crash reporting providers, if enabled;
Customer support and email providers;
Payment, receipt validation, subscription, and entitlement providers;
Moderation, anti-abuse, trust, and safety tooling providers;
Legal, accounting, compliance, and professional advisors.

These providers may access information only as needed to provide services to us, subject to contractual, technical, or policy restrictions where applicable.

8.2 Apple and App Store Services

If you download PSL Max through the Apple App Store or purchase paid features through Apple, Apple may process information under its own policies. We may receive purchase status and entitlement information from Apple to operate subscriptions or in-app purchases.

8.3 Community Visibility

Community content you submit may be visible to other users. This may include your username, posts, comments, replies, votes, saves, timestamps, profile-related information, and other information depending on the feature.

8.4 Safety, Legal, and Rights Protection

We may disclose information if we believe it is reasonably necessary to:

Comply with law, legal process, court orders, subpoenas, or government requests;
Enforce our Terms or Community rules;
Investigate security incidents, fraud, spam, abuse, harassment, exploitation, threats, or illegal conduct;
Protect the rights, property, or safety of PSL Max, users, or others;
Respond to intellectual property, privacy, safety, or moderation claims;
Prevent death, serious injury, self-harm, exploitation of minors, or other serious harm where permitted by law.

8.5 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to this Policy or another policy disclosed to you.

8.6 Aggregated or De-Identified Information

We may use and share aggregated or de-identified information that does not reasonably identify you for analytics, research, product improvement, reporting, or business purposes. We do not attempt to re-identify information that we maintain as de-identified except as permitted by law.

9. Data We Do Not Sell or Use for Advertising

We do not sell your personal information in the ordinary meaning of selling data for money.

We do not share your face images, generated images, facial mapping data, scan-derived facial data, body-related inputs, or Community content with data brokers.

We do not use data gathered from depth or facial mapping tools, Camera APIs, ARKit, or Photo APIs for advertising, marketing, or use-based data mining, including by third parties.

We do not use sensitive data such as face images, scan-derived appearance data, body-related inputs, or health-adjacent preferences for targeted advertising.

If we ever introduce advertising, tracking, cross-context behavioral advertising, or data-sharing practices that require additional notice or consent, we will update this Policy and obtain any required permission before doing so.

10. Cookies, SDKs, Tracking Technologies, and Do-Not-Track Signals

The PSL Max app and websites may use cookies, local storage, SDKs, pixels, device identifiers, or similar technologies for necessary functionality, security, diagnostics, analytics, entitlement management, support, abuse prevention, and service improvement.

We do not currently use these technologies to track you across third-party apps or websites for targeted advertising unless otherwise disclosed and consented to where required.

Some web browsers offer “Do Not Track” signals. Because there is no uniform industry standard for responding to such signals, our websites may not respond to Do Not Track signals unless required by applicable law. Where legally required, we will honor recognized opt-out preference signals, such as Global Privacy Control, in the manner required by law.

You may be able to control cookies through your browser settings and app permissions through iOS settings.

11. Data Retention

We keep information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, maintain security, comply with law, resolve disputes, enforce agreements, support users, and operate backups.

Actual retention depends on the data type and feature:

Data Type	Typical Retention
On-device onboarding preferences, profile inputs, cooldowns, scan history, local image paths, and routine data	Until you delete/reset it in the app, uninstall the app, or the data is otherwise removed according to app behavior
Local scan images and generated images stored on your device	Until you delete them, clear app data, uninstall the app, or use an in-app deletion/reset feature where available
Generation request source images and generated outputs processed by PSL Max servers	[Confirm before publication. Recommended default: transient processing only, with deletion after the request is fulfilled or within a short defined period such as 24 hours, unless needed for debugging, safety, support, abuse prevention, or legal reasons.]
AI provider processing records	Subject to provider retention, abuse-monitoring, security, legal, and account settings
Community username and Community content	Until deleted, removed, or disabled, subject to moderation, backup, audit, legal, safety, and abuse-prevention retention
Reports, blocks, moderation records, and abuse-prevention data	As long as reasonably necessary to protect the Service and users
Support emails and correspondence	As long as reasonably necessary to handle the request, maintain records, and comply with legal obligations
Purchase and entitlement records	As long as needed to provide access, comply with tax/accounting/legal requirements, and resolve disputes
Logs, analytics, diagnostics, and crash records	Typically retained for a limited period needed for security, debugging, analytics, and service operation, unless longer retention is needed for safety, legal, or fraud-prevention purposes
Backups	Retained for a limited backup lifecycle and deleted according to backup rotation schedules

When we no longer need information, we may delete it, anonymize it, aggregate it, or securely retain it in backups until deletion is possible according to backup cycles.

Before publishing this Policy, replace bracketed retention language with actual app and backend behavior.

12. Your Choices and Controls

Depending on your location and the features you use, you may have the following choices.

12.1 Device Permissions

You can manage Camera, Photos, Notifications, and other device permissions through iOS settings. If you deny a permission, some features may not work.

You may decline or withdraw consent for AI image generation that shares personal data with a third-party AI provider. If you withdraw consent, Generate features that require third-party AI processing may stop working unless and until you consent again.

12.3 Local Data Deletion

Where available, you may delete local scan images, generated images, routine data, preferences, and other local app data through in-app controls. You may also delete the app from your device, though deleting the app may not delete information already transmitted to our servers or third-party providers.

12.4 Community Controls

Where available, you may delete or edit your content, report content, block users, and request moderation assistance. Some information may remain in backups, moderation logs, safety records, or legal records.

12.5 Marketing Communications

If we send marketing emails, you may opt out by following the unsubscribe instructions or contacting us. We may still send service, safety, legal, purchase, or account-related messages.

12.6 Privacy Requests

You may contact us to request access, deletion, correction, portability, restriction, objection, or withdrawal of consent where applicable. We may need to verify your request and may retain certain information where permitted or required by law.

Contact: HardtosayLLC@gmail.com

13. Regional Privacy Rights

Depending on where you live, privacy laws may provide additional rights. These may include the right to:

Know what personal information we collect, use, disclose, sell, or share;
Access a copy of your personal information;
Correct inaccurate personal information;
Delete personal information;
Receive a portable copy of personal information;
Object to or restrict certain processing;
Withdraw consent;
Opt out of certain sales, sharing, targeted advertising, or profiling where applicable;
Limit certain uses or disclosures of sensitive personal information where applicable;
Appeal a denied privacy request where required by law;
Lodge a complaint with a privacy authority.

To exercise rights, contact HardtosayLLC@gmail.com. We may ask you to provide information needed to verify your identity and process your request. If you use an authorized agent, we may require proof of authorization where permitted by law.

We will not discriminate against you for exercising privacy rights, though some features may not work if we cannot process information needed to provide them.

EEA, UK, and Switzerland

If you are located in the EEA, UK, or Switzerland, you may have rights to access, correct, delete, restrict, object, transfer your information, and complain to a data protection authority. Where we rely on consent, you may withdraw consent at any time.

Canada

If you are located in Canada, you may have rights to access, correct, and withdraw consent to certain processing, subject to legal exceptions. We may rely on express or implied consent depending on the context and applicable law.

Other Regions

Users in other regions may have similar rights under local privacy laws. Contact us and we will respond in accordance with applicable law.

14. California Notice at Collection and Privacy Rights

This section applies to California residents and is intended to supplement the rest of this Policy.

14.1 Categories of Personal Information We May Collect

Category	Examples in PSL Max	Collected?
Identifiers	Username, app instance ID, device identifiers, email address if you contact support	Yes
Customer records information	Contact/support information, purchase entitlement records	Yes, if applicable
Protected classification characteristics	Age/birth date, gender-related selections if provided	Yes, if provided
Commercial information	Subscription or in-app purchase entitlement status	Yes, if paid features are used
Internet or network activity	App usage, server logs, feature interactions, diagnostics	Yes
Geolocation	Approximate location from IP address or region settings	Possibly
Audio, electronic, visual, or similar information	Face scan images, selected photos, generated images, support attachments	Yes
Biometric information	Face-related geometry or scan-derived face data, if collected and considered biometric under applicable law	Possibly
Health or body-related information	Height, weight, routine preferences, health-adjacent inputs	Possibly
Inferences	PSL estimates, potential estimates, routine personalization, generated insights	Yes
Sensitive personal information	Face images, body-related inputs, birth date, generated images, account credentials if any	Possibly

14.2 Sources

We collect personal information from you, your device, your use of the Service, Apple, service providers, AI providers, community users, and security/support systems.

14.3 Purposes

We collect and use personal information for the purposes described in Sections 5 and 6, including app functionality, product personalization, security, fraud prevention, analytics, support, legal compliance, and service improvement.

14.4 Disclosure

We may disclose personal information to the categories of recipients described in Section 8.

We do not sell personal information for money. We do not knowingly sell or share personal information of users under 16. We do not use sensitive data for targeted advertising. If our practices change, we will update this Policy and provide required opt-out rights.

14.6 Retention

We retain personal information as described in Section 11.

14.7 California Rights

California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit certain sensitive personal information uses, and not be discriminated against for exercising rights. Contact HardtosayLLC@gmail.com to exercise these rights.

15. Children and Minors

PSL Max is not intended for children. You must be at least 17 years old to use PSL Max, or older if required by local law.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without required consent, we will take reasonable steps to delete it.

Users may not upload, generate, post, or share images of minors through Community or AI generation features unless expressly permitted by the app and lawful guardian consent has been obtained. Sexual, exploitative, humiliating, harassing, or objectifying content involving minors is strictly prohibited.

Parents or guardians may contact us at HardtosayLLC@gmail.com regarding privacy concerns.

16. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. These may include encryption in transit, access controls, provider controls, logging, monitoring, data minimization, and security review practices.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk. You are responsible for protecting your device, credentials, and account access.

17. International Data Transfers

We may process and store information in the United States and other countries where we or our service providers operate. These countries may have data protection laws different from those in your jurisdiction.

Where required, we use appropriate safeguards for international transfers, such as contractual protections or other legally recognized transfer mechanisms.

18. Third-Party Services

PSL Max may rely on third-party services for hosting, AI generation, analytics, diagnostics, payments, moderation, support, infrastructure, and security. Third-party services may process information according to their own policies and our agreements with them.

We are not responsible for third-party websites, apps, platforms, or services that are not controlled by PSL Max.

19. Changes to This Policy

We may update this Policy from time to time. The updated version will be indicated by an updated “Last Updated” date and will be effective when posted or when otherwise stated.

If we make material changes, we may notify you in the app, by email, through the App Store, or by other reasonable means. If a change materially affects how we share personal data with third-party AI providers or how we use sensitive data, we will request additional consent where required.

We encourage you to review this Policy regularly.

20. Contact Us

For privacy questions, requests, or complaints, contact:

[Hardtosay LLC / Full Legal Company Name] Email: HardtosayLLC@gmail.com Mailing Address: [Company Mailing Address]

21. How to Review, Update, or Delete Your Data

You may review, update, or delete certain data directly in the app where controls are available. You may also contact us at HardtosayLLC@gmail.com to request help reviewing, updating, deleting, or exporting information.

When you make a request, include enough information for us to identify your data, such as your Community username, support email address, device/app identifier if available, and a description of the request. Do not send unnecessary sensitive information in your request.

We may need to verify your identity before fulfilling a request. We will respond in accordance with applicable law. Some information may be retained where required or permitted for security, legal, billing, tax, accounting, dispute-resolution, safety, moderation, backup, or abuse-prevention reasons.

PSL Max Privacy Policy