Effective and last updated: 2 November 2026

Privacy Policy

This policy explains how FYR GPT at fyrgpt.com handles information when you chat, connect Google Drive or submit payment proof.

Who operates this service

FYR GPT is an independently operated AI chat project. For privacy questions, access or deletion requests, contact the FYR GPT operator by SMS at +65 9086 8808. Do not send passwords, full card details or Google authorization codes.

Information we process and why

• Chats and attachments: your prompts, relevant conversation context, supported attached text and simulated emotion settings are processed to produce responses. Free chat uses Cloudflare Workers AI; the paid text model uses OpenAI. Sending a prompt sends its included content to the selected provider.
• Google identity: after permission is granted, we receive your Google account identifier, verified email address and display name to identify your session and separate browser conversations.
• Google Drive: if you connect Drive, the app requests read-only access. This permission can read files accessible to your account; it is broader than access to a single selected file. The current interface searches file names on your request and reads a supported file when you choose Attach text. It does not edit or delete Drive files or read Gmail. An attached excerpt is sent to the selected AI provider when you submit the chat, and may be included in later conversation context.
• Payments, when enabled: we process your entered sender name, receipt image, extracted recipient, amount, currency, timestamp and transaction reference to assess your claim. Receipts are sent to OpenAI for extraction and can be reviewed by the operator to reconcile payment with bank records. We record consent, access status, expiry and metered usage.
• Security: random browser identifiers, OAuth state and nonce values, receipt fingerprints and a hash derived from the request IP address help protect sessions, limit receipt submissions and prevent reuse. Cloudflare also receives network information necessary to serve and protect the site.

Storage and retention

• Chat history and preferences are stored in your browser. Where used, generated downloads are stored in browser IndexedDB. These may remain until you delete them or clear this site's storage. Local storage does not mean chats stay entirely on your device: submitted content is also processed by the selected AI provider.
• Google access and refresh tokens are encrypted before storage in Cloudflare KV. Each saved token record has an eight-hour expiry, renewed when the token record is saved again. Temporary OAuth state expires after ten minutes. The Google browser-session cookie lasts up to eight hours.
• The paid-access browser cookie lasts up to 180 days; this does not extend the purchased access period.
• Receipt images become unavailable to the review endpoint after 35 days. A scheduled daily cleanup removes images and most extracted fields after that point, normally on the next cleanup run. Transaction references, receipt fingerprints, access and usage records, consent records and abuse-control records have no automatic deletion deadline in the current implementation; contact us to request review or deletion.
• AI providers and hosting providers may retain service or security records under their own policies and account settings. OpenAI response requests used for paid chat and receipt checks set store to false; this is not a promise of zero provider retention.

Sharing and Google data use

We use Cloudflare for hosting, storage and Free AI processing; Google for sign-in and Drive access; and OpenAI for paid AI responses and receipt extraction. These providers may process information outside Singapore. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. Google-derived content is shared only as needed for the user-requested feature, subject to the applicable provider terms.

FYR GPT's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. The operator does not routinely read your Drive content; human access is limited to your specific consent, necessary security investigations, legal requirements, or other uses permitted by that policy.

Your choices and deletion

You can use Free chat without connecting Google. Only attach files you want processed, and remove an attachment before sending if you change your mind. Disconnect Drive in Settings to delete the current session's stored Google tokens and attempt to revoke Google access. You can also revoke FYR GPT in your Google account's connections. Previously sent excerpts and local chats are not erased by disconnecting.

Delete conversations in the app or clear browser storage for fyrgpt.com to remove local information. Clearing cookies can also remove access to a browser-linked purchase. For server-side access, correction or deletion requests, SMS the operator with enough information to identify the record, such as your payment reference; identity checks may be needed. Some records may need to be retained to address fraud, disputes or legal obligations. We will explain applicable limits. Provider-held records are also subject to those providers' processes.

Security and younger users

We use HTTPS, encrypted Google token storage and server-side access checks. No system can guarantee complete security. Avoid uploading information you do not have permission to share. Users under 18 should involve a parent or guardian before purchasing or sharing sensitive information.

Changes

We will update the date on this page when the policy changes. Material new uses of Google data will require appropriate notice and consent before they begin.