Last Updated: November 6, 2025
We respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Data we collect from or about you when you use our website, applications, and services (collectively, "Services").
Unfamiliar City Limited, a company registered in England and Wales (company number 15456796), with its registered office at 86-90 Paul Street, London EC2A 4NE, is the controller (the organisation responsible for your data) and is responsible for the processing (collecting, storing, and using) of your Personal Data as described in this Privacy Policy.
We collect personal data relating to you ("Personal Data") as described below:
Personal Data You Provide: We collect the following Personal Data when you create an account or communicate with us:
Personal Data We Receive Automatically From Your Use of the Services: When you visit, use, or interact with the Services, we receive the following information ("Technical Information"):
Personal Data We Receive From Other Sources: We receive information from authentication providers (Google sign-in) and payment processors (Stripe) as necessary to provide our Services. We do not collect publicly available data or use your data to train AI models. The AI models that power our Services are provided by third parties (OpenAI, Anthropic, Google) and we do not develop or train AI models ourselves.
Website Visitors (Non-Users): If you visit our website without creating an account or using our Services, we collect limited information:
Website visitors have the same rights as users (access, deletion, objection, restriction) regarding this data. Contact privacy@imadeitup.ai to exercise your rights.
We may use Personal Data for the following purposes:
Aggregated or De-Identified Information. We aggregate or de-identify (combine and anonymise) Personal Data so that it can no longer be used to identify you and use this information to analyse the effectiveness of our Services, to improve and add features to our Services, to conduct research and for other similar purposes. In addition, from time to time, we may share or publish aggregated information like general user statistics with third parties. We collect this information through the Services, through cookies, and through other means described in this Privacy Policy. We will maintain and use de-identified information in anonymous or de-identified form and we will not attempt to re-identify (link back to you) the information, unless required by law.
Automated Content Moderation. We use automated systems (OpenAI's content safety system) to protect against harmful content that violates our Terms of Use, including content related to hate speech, violence, sexual content, and self-harm.
How it works: Content is analyzed before processing. If flagged as potentially harmful, your request will be blocked and you'll need to rephrase your input.
Questions about moderation? Contact support@imadeitup.ai if you believe content was incorrectly blocked. We rely on third-party moderation systems and cannot override their determinations, but we can help you understand why content was flagged and how to rephrase your request.
Legal basis: This processing is necessary to comply with legal obligations, enforce our Terms of Use, and keep our Services safe for all users.
In certain circumstances we may disclose your Personal Data to:
We retain your Personal Data only as long as necessary to provide our Services and comply with legal obligations. Here are our specific retention periods:
Backup Practices: As an early-stage service, we do not currently maintain regular backups beyond standard infrastructure redundancy provided by Cloudflare. When you request deletion of your data, we delete it from our production systems within 30 days. As our service grows, we will implement backup procedures and update this policy accordingly.
You have the following statutory rights in relation to your Personal Data:
You have the following rights to object:
You can exercise some of these rights through contacting support@imadeitup.ai.
Please note these rights may be limited, for example if fulfilling your request would reveal Personal Data about another person, or if you ask us to delete information that we are required by law or have compelling legitimate interests to keep.
We hope that we are able to address any questions or concerns you may have. If you have any unresolved complaints, you can contact:
A note about accuracy: Services like I Made It Up generate responses by reading a user's request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models.
Our Services are not directed to, or intended for, children under 13. We do not knowingly collect Personal Data from children under 13. If you have reason to believe that a child under 13 has provided Personal Data to I Made It Up through the Services, please email us at support@imadeitup.ai. We will investigate any notification and, if appropriate, delete the Personal Data from our systems. Users under 18 must have permission from their parent or guardian to use our Services.
When we process your Personal Data for the purposes described above, we rely on the following legal bases:
To provide and maintain our Services
Type of Personal Data processed: Account Information, User Content, Communication Information, Other Information You Provide, Log Data, Usage Data, Device Information, Cookies and Similar Technologies
Legal basis: Where necessary to perform a contract with you, such as processing a user's prompts to provide a response.
To improve and develop our Services and new features and conduct research
Type of Personal Data processed: Account Information, User Content, Communication Information, Other Information You Provide, Data We Receive From Other Sources, Log Data, Usage Data, Device Information, Cookies and Similar Technologies
Legal basis: Where necessary for our legitimate interests and those of third parties and broader society, including in developing, improving, or promoting our Services.
To communicate with you, including to send you information or marketing about our Services and events
Type of Personal Data processed: Account Information, Communication Information, Social Media Information, Other Information You Provide, Log Data, Usage Data, Device Information, Cookies and Similar Technologies
Legal basis: Where necessary to perform a contract with you, such as processing your contact information to send you a technical announcement about the Services. Your consent when we ask for it to process your Personal Data for a specific purpose that we communicate to you, such as processing your contact information to send you certain forms of marketing communications.
To prevent fraud, criminal activity, or misuses of our Services, and to protect the security of our systems and Services
Type of Personal Data processed: Account Information, User Content, Communication Information, Social Media Information, Other Information You Provide, Data We Receive From Other Sources, Log Data, Usage Data, Device Information, Cookies and Similar Technologies
Legal basis: Where necessary to comply with a legal obligation. Where we are not under a specific legal obligation, where necessary for our legitimate interests and those of third parties, including in protecting our Services from abuse, fraud, or security risks, such as processing data from security partners to protect against fraud, abuse and security threats in our Services.
To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, us, our affiliates, or any third party
Type of Personal Data processed: Account Information, User Content, Communication Information, Social Media Information, Other Information You Provide, Data We Receive From Other Sources, Log Data, Usage Data, Device Information, Cookies and Similar Technologies
Legal basis: Where necessary to comply with a legal obligation, such as retaining transaction information to comply with record-keeping obligations. Where we are not under a specific legal obligation, where necessary for our legitimate interests and those of third parties and broader society, including in protecting our or our affiliates', users', or third parties' rights, safety, and property, such as analysing log data to identify fraud and abuse in our Services.
Where we rely on legitimate interests as our legal basis, we have balanced our interests against your rights and freedoms:
Service Improvement: Processing usage data and feedback to improve our Services benefits all users through better functionality and security. Impact on users is minimal as we process only aggregate usage patterns and do not use data for purposes beyond service provision.
Security and Fraud Prevention: Processing account and usage data to prevent fraud and abuse is essential to protect all users and maintain service integrity. This overrides individual privacy interests where fraud or abuse risk exists.
Marketing to Existing Customers: Sending service updates and relevant feature announcements to existing customers about products you already use serves your interests in staying informed about services you've chosen to use. You can opt-out at any time.
Right to Object: You have the right to object to processing based on legitimate interests at any time. Contact privacy@imadeitup.ai to exercise this right. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
We will transfer your Personal Data to recipients outside of the EEA (European Economic Area), Switzerland and the UK for the purposes described in this Privacy Policy. If you are based in the EEA, Switzerland or the UK and your Personal Data is transferred to a third country, that third country may not offer the same level of data protection as your home country. However, we transfer Personal Data pursuant to applicable data protection laws. To transfer your Personal Data outside of the EEA, Switzerland or the UK, we rely on the European Commission's adequacy decisions (official approval of a country's privacy protections) on certain countries and, for other jurisdictions, we rely on the Standard Contractual Clauses (legally approved data protection contracts) as approved by the European Commission and any applicable country addenda.
By using our Services, you understand and acknowledge that your Personal Data will be processed and stored in our facilities and servers in the United States and may be disclosed to our service providers and affiliates in other jurisdictions.
We may update this Privacy Policy from time to time. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law.