Privacy & Cookies Policy
1. Introduction
This Privacy and Cookies Policy ("Policy") explains how MK-01 Studios Ltd ("MK-01," "we," or "us") collects, uses, and shares information about you when you access or use our products, websites, mobile applications, and any related services (collectively, the "Services").
MK-01 Studios Ltd is a company registered in England and Wales (registration number 17034900), with a registered office at 20-22 Wenlock Road, London, N1 7GU.
We may update this Policy from time to time. While we will notify you of material changes, we encourage you to review this Policy regularly. Continued use of the Services after updates become effective constitutes your acceptance of the revised Policy.
Last Updated: 9th July 2026
2. Information We Collect and Use
Personal Data Collected
| Information | When Collected | Purpose of Use | Legal Basis |
|---|---|---|---|
| First name, email address, address, date of birth (if an individual user), billing info, other account-related info | When you sign up for the Services | To create and manage your account, enable access to the Services | Contractual necessity |
| First name, email address | When you subscribe to marketing emails | To send updates about future releases, partnerships, or other features | Consent (opt-in) |
| Competition/promotion details | When entering promotions or competitions | To allow participation | Consent |
| Data you enter into the Services (e.g., conversational data or other user content) | When using the Services | To enable functionality of the Services | N/A (processed as a data processor) |
3. Plugins
We enable developers to create Plugins that interact with our Services via APIs or other integration methods. Each Plugin provider is an independent data controller for any data it processes. MK-01 typically acts as a data processor for user data, as outlined in the table above.
Important Notes:
- MK-01 does not verify or endorse Plugins at present.
- Please review each Plugin provider's privacy policy for details on how they collect and handle data.
4. Sharing Your Information with Third Parties
MK-01 may share the information it collects with the following third parties to help operate, enhance, and analyze our Services:
- Infrastructure & Hosting: MongoDB Atlas (database), Railway (application hosting), Cloudflare R2 (media and image storage), and Supabase (authentication).
- Payments: Stripe (payment processing) and RevenueCat (in-app subscription management for our mobile applications).
- AI Model Providers: OpenRouter, which routes the content you submit in chat to AI model providers in order to generate responses.
- Analytics: Google Analytics and Hotjar.
- Advertising: Meta Platforms (Meta Pixel and Meta Ads, for advertising measurement and audience building).
- Third-party analytics & cookie providers (see paragraph 8 below).
- Future group companies of MK-01, if applicable.
- Regulatory authorities, if required by law.
In anonymized form, MK-01 may share data with:
- Third parties in the event of a sale, restructuring, or reorganization of MK-01's business.
- Data aggregators and platform providers for user metrics or performance analysis.
- Law enforcement agencies, as required by law or legal process.
5. Links to Third-Party Websites
Our Services may contain links to third-party websites or services. MK-01 is not responsible for the privacy policies or practices of these third parties, even if you access them through our Services. We encourage you to review each site's privacy policy and contact its owner or operator for questions or concerns.
6. Security
MK-01 employs industry-appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. While we strive to safeguard your information, no system is completely secure. Therefore, we cannot guarantee absolute security of your data.
7. Storage and Data Retention
- Location: Personal data is stored on secure cloud infrastructure provided by the partners listed in paragraph 4, which may be located in the UK, EEA, or other jurisdictions.
- Data Transfers: For any transfers of data outside the UK/EEA, MK-01 ensures appropriate safeguards (e.g., Standard Contractual Clauses).
- Retention: We retain personal data no longer than necessary for the original purpose. However, MK-01 may anonymize data and retain it indefinitely for refining and improving our Services.
8. Cookies
8(a) What Are Cookies?
Cookies are small text files placed on your device to help websites and apps function more efficiently. MK-01 uses both session cookies (deleted when you close your browser) and persistent cookies (which remain on your device for a set duration or until manually deleted).
8(b) Disabling Cookies
You can disable cookies in your browser or device settings. However, doing so may limit certain functionalities or features of our Services.
8(c) Third-Party Cookies
Third-party advertisers or analytics providers may place cookies on your device. This Policy only covers how MK-01 uses cookies; it does not govern third-party cookie practices.
8(d) More Information
For more info on managing cookies, visit:
Cookies Used on Our Platform
| Type | Cookie Name | Purpose |
|---|---|---|
| Strictly Necessary | Supabase | Authenticates users and maintains your login session. |
| Analytics | Google Analytics | Measures how users interact with our Services. |
| Advertising | Meta Pixel | Measures the effectiveness of our advertising campaigns. |
| User Experience | Hotjar | Helps us understand how users experience our Services (e.g., heatmaps and session insights). |
| Payments | Stripe | Enables secure checkout and fraud prevention. |
9. Advertising and Analytics Tools
We use the Meta Pixel to measure and improve the effectiveness of our advertising campaigns, alongside Google Analytics and Hotjar to understand how our Services are used.
- Types of Data Collected: These tools may collect device and usage information (e.g., browser type, IP address, pages visited, and actions taken) via cookies and similar technologies.
- How This Data Is Used: This data is used to measure ad performance (e.g., conversions and click-through rates), build audiences for our campaigns, and improve the Services.
- Sharing of Data: Device and event data may be shared automatically with Meta, Google, and Hotjar. MK-01 does not share the content of your conversations with advertising or analytics providers.
- Your Choices: You may opt out of personalized advertising through your browser or device settings, Meta's Ad Preferences, and Google's Ad Settings. Please see each provider's privacy policy for details.
- Legal Basis: Depending on your region, we rely on consent or other lawful grounds for processing data in relation to advertising.
10. Exercising Your Rights
You have the right (subject to applicable law) to:
- Access a copy of the personal data we hold about you.
- Correct any inaccuracies in your personal data.
- Request erasure of your personal data or object to its processing.
Note: These rights apply only to personal data.
MK-01 retains the right to anonymize collected data and use it indefinitely for refining and improving the Services. Anonymized data is not subject to these rights.
11. Contact Details
If you have any questions, concerns, or requests regarding this Policy or your personal data, please contact us at:
Email: support@carter.chat
Post: Data Protection Query
MK-01 Studios Ltd
20-22 Wenlock Road, London, N1 7GU
United Kingdom
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). For more information, visit: https://ico.org.uk/global/contact-us/
Effective Date: 9th July 2026
By using the Services, you acknowledge you have read and understood this Policy. If you do not agree to these practices, please do not use our Services.