Privacy Policy

Yo Coney Bot (“the app”) is an AI assistant that answers questions about The Coney Island restaurant — the menu, hours, events, and amenities. You can use it without an account and without giving us your name, email, phone number, or other contact details.

This policy explains, in plain terms, what data the app handles, why, and who it is shared with.

The short version

• We don’t make you sign in, and we don’t ask for personal contact details.
• To answer you, the text of your message is sent to OpenAI, our AI provider, which generates the reply. We send these requests with storage turned off.
• We don’t keep a copy of your conversations. There’s no account, no chat history on our servers, and no advertising profile.
• We don’t sell your data, and we don’t share it with advertisers.
• Your conversation history is stored on your own device so you can scroll back, and you can clear it anytime.

1. What the app handles

• Your messages. The text you send — whether you type it or dictate it — and the recent messages in the current conversation, which are sent along as context so the assistant’s answers make sense.
• Voice input (if you use it). Your device or browser’s built-in speech recognition converts your speech to text. We receive only the resulting text — your microphone audio is never sent to us or stored by us. Depending on your device or browser, speech-to-text may be performed by your operating system or browser provider under their own terms.
• Limited technical data. When the app contacts our service, our servers briefly process your IP address to apply rate limits and protect the service from abuse. We don’t use it to identify you, we don’t link it to your messages, and we don’t keep it as part of any profile. Our servers may also record request timestamps and basic technical metadata (such as response timing) in operational logs.

We do not ask for or collect your name, email address, phone number, precise location, contacts, or any account credentials.

2. How we use it

• To answer your question. Your message text and recent context are sent to OpenAI to generate a reply (see Section 3).
• To operate and secure the service — rate-limiting, abuse prevention, and reliability.
• To produce spoken replies, if you use voice (text-to-speech).
• To keep the assistant working well. We use de-identified, privacy-redacted diagnostics to find questions the assistant answered poorly and improve them (see Section 4).

We do not use your data to build an advertising profile, and we do not sell it.

3. Who we share it with

OpenAI (our AI provider)

To generate answers, the text of your messages and the recent conversation is sent to OpenAI (OpenAI, L.L.C.), which processes it and returns a reply.

• We send these requests with OpenAI’s storage turned off, so OpenAI does not keep the conversation for us.
• OpenAI acts as our service provider and is contractually bound to protect this data to a standard at least equivalent to this policy. Under OpenAI’s API terms, data submitted through the API is not used to train OpenAI’s models and is retained only transiently for abuse monitoring.
• OpenAI’s privacy policy: openai.com/policies/privacy-policy

This is the only place the content of your messages is sent outside our own systems.

Google Analytics (our website and web chat only)

On our website and web chat, we use Google Analytics (GA4) to understand aggregate usage — things like page views, general region, and device type. This relies on cookies/identifiers set by Google and is subject to Google’s privacy policy. Google Analytics does not receive the content of your messages.

• Google’s privacy policy: policies.google.com/privacy
• Opt out across sites: tools.google.com/dlpage/gaoptout

Our own infrastructure

We use reputable hosting providers to run the service, and our own text-to-speech service to generate spoken replies. If you use voice, only the assistant’s reply text is sent to our text-to-speech service (never your messages), and the resulting audio is deleted automatically a few minutes after it is created.

We do not sell your personal information or share it with advertisers.

4. Where your data lives, and what we keep

• On your device. Your conversation history and your app settings (such as light/dark theme) are stored locally on your device or in your browser, so the app can show you your recent chat. You can remove this anytime — start a new chat to clear the conversation, or clear the app’s data / your browser storage.
• On our servers. We do not keep a personal, identity-linked record of your conversations. Your message is processed to produce a reply and is not stored by us as a chat log. Our operational logs contain de-identified, technical metadata (for example: response time, which topic was asked about, and whether the answer succeeded). To improve answers, these logs may also include a privacy-redacted note of questions the assistant couldn’t answer, plus a small sample of others — with emails, phone numbers, and long number sequences automatically removed, and not linked to your identity. They exist only in our operational logs — not in any database — and are used solely to operate and improve the service.
• With OpenAI and Google. Any data handled by OpenAI or Google is retained according to their own policies, linked in Section 3.

5. Your consent and choices

• Consent. Before the app sends your messages for AI processing, it asks for your agreement. You can withdraw your consent at any time from within the app; if you do, the assistant can’t be used again until you agree.
• Clear your history. Start a new chat, or clear the app’s data / your browser storage, to remove your conversation from your device.
• Voice. Voice input is optional — simply don’t use the microphone if you’d prefer not to.
• Analytics. On the web, you can opt out of Google Analytics using the browser add-on linked in Section 3, or by using your browser’s cookie controls.

6. Your rights

Depending on where you live (for example, California’s CCPA/CPRA, or the EU/UK GDPR), you may have the right to access, correct, or delete your personal data, and to object to certain processing. Because the app has no account and collects no contact details, most data is either on your device (which you can clear or delete yourself) or de-identified. To make a request, contact us at [email protected].

7. Children

The app is intended for a general audience and is not directed to children under 13 (or under the minimum age required in your region). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us.

8. Changes to this policy

We may update this policy from time to time. When we do, we’ll revise the “Effective date” above. If we materially change what data is shared or who receives it, the app will ask for your consent again.