Privacy Policy

Setepenra, Inc. ("Setepenra," "we," "our," or "us"), a Delaware corporation, operates the Histou mobile application ("App") and the website at histou.com ("Website"). This Privacy Policy explains how we collect, use, and protect information when you use them (collectively, the "Services").

By using the Services, you agree to the practices described here. If you do not agree, do not use the Services.

1. Who we are

Setepenra, Inc.
1111B S Governors Ave, Suite 97583
Dover, DE 19904, United States
Email: contact@histou.com

Setepenra is the data controller for personal information processed in connection with the Services.

2. Information we collect

2.1 Information you provide

• Account information: email address, display name, and (optionally) profile photo.
• Authentication credentials, managed through Sign in with Apple or email/password.
• Communications you send us, such as support requests.

2.2 Information collected automatically

• Conversation content: text and voice messages exchanged with AI representations of historical figures, processed to generate responses.
• Usage data: figures you interact with, content you view, quiz results, learning progress, saved items, streaks, session duration, feature interactions.
• Device information: device type, operating system version, language and locale, unique device identifiers, push notification tokens (if enabled).
• Diagnostic data: crash logs and performance metrics.

2.3 Payment information

Subscriptions are processed by Apple through the App Store. We receive subscription status from Apple. We do not collect, store, or have access to your payment card details.

3. How we use information

• Operate and improve the Services, including generating AI conversations, narrations, quotes, and quizzes.
• Personalize content recommendations and track learning progress.
• Manage subscriptions and account preferences.
• Send push notifications you have opted in to.
• Serve advertisements to free-tier users (where applicable).
• Detect, prevent, and address security issues and abuse.
• Comply with legal obligations.

4. Legal basis (EU / UK / Switzerland users)

We process your personal information under the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): to provide the Services you have signed up for.
• Legitimate interests (Art. 6(1)(f) GDPR): to improve the Services, ensure security, and prevent abuse.
• Consent (Art. 6(1)(a) GDPR): for push notifications and any analytics or advertising that requires it.
• Legal obligation (Art. 6(1)(c) GDPR): where we must process data to comply with applicable law.

5. Third-party service providers

We rely on the following categories of providers, each contractually bound to process information only as needed to deliver services to us:

• AI providers, for generating conversations, voice responses, and narrations.
• Cloud infrastructure and storage providers, for authentication, databases, and media.
• Analytics and crash reporting providers.
• Subscription management providers.
• Advertising networks (for free-tier users).
• Apple, for app distribution and payment processing.

6. Advertising

Free-tier users may see advertisements served by third-party ad networks, which may use device identifiers and usage data to serve relevant ads. Subscribers do not see advertisements. You can limit ad personalization in your device settings (iOS: Settings > Privacy & Security > Apple Advertising).

7. Data retention

• Account data: retained while your account is active. Deleted on request within 30 days, except where retention is required by law.
• Conversation history: retained while your account is active to provide learning continuity. Deleted with account deletion.
• Voice audio: processed in real time. Audio recordings are not stored after the response is generated. Transcripts may be retained as part of conversation history.
• Diagnostic data: retained for up to 90 days unless needed for ongoing investigations.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Receive a portable copy of your data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact contact@histou.com.

EU/UK users have the right to lodge a complaint with their local data protection authority. A list of EU supervisory authorities is at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

9. California residents (CCPA / CPRA)

If you are a California resident, you have additional rights:

• Right to know what categories of personal information we collect (see Section 2).
• Right to access, delete, and correct your personal information.
• Right to opt out of "sales" or "sharing" of personal information as defined under California law.
• Right to limit use of sensitive personal information.
• Right to non-discrimination for exercising your rights.

We do not sell personal information for money. We do not knowingly sell or share personal information of minors under 16. To the extent advertising on the free tier involves "sharing" personal information as defined under California law, you can opt out by turning off ad personalization in your device settings (iOS: Settings > Privacy & Security > Apple Advertising) or by contacting us at contact@histou.com.

To exercise CCPA rights, contact contact@histou.com.

10. International data transfers

Setepenra is based in the United States. Information may be processed in the United States and in other countries where our service providers operate. For transfers from the EU, UK, or Switzerland to countries without an adequacy decision, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

11. Children

Histou is rated 16+ on the App Store and is not directed to children under 16. We do not knowingly collect personal information from children under the relevant age of consent in their jurisdiction (16 in most EU countries; 13 in the United States under COPPA). If you believe a child has provided us with information, contact us and we will delete it.

12. Cookies and local storage

The Website may use cookies and local storage to maintain your session, remember preferences (such as theme), and provide core functionality. We do not use tracking cookies for cross-site advertising on the Website. The App uses local device storage to cache content and save preferences.

13. Security

We use appropriate technical and organizational measures to protect personal information, including encrypted transport (TLS) and access controls. No system is fully secure; we cannot guarantee absolute security.

14. Changes

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date and, where appropriate, by notice in the App or by email. Continued use of the Services after changes take effect constitutes acceptance.

15. Contact

Setepenra, Inc.
1111B S Governors Ave, Suite 97583
Dover, DE 19904, United States
Email: contact@histou.com