Privacy Policy
What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Anonymous account identifier, display name, date of birth (age verification) | Account operation, 18+ enforcement |
| Chat content | Messages you send, character replies | Providing the service, safety moderation, character memory |
| Derived memory | Facts the AI extracts from your messages ("likes oat-milk lattes") | The character-memory feature; viewable and deletable in-app |
| Photos | Photos you share in chat | Derive-and-discard: a text description is generated on your device and the image is not retained |
| Purchases | Product IDs, transaction receipts, gem ledger | Fulfillment, fraud prevention |
| Usage data | Feature events, crash logs, device model, locale | Reliability and product improvement |
What we do NOT do
- We do not sell your personal data.
- We do not use your private conversations for advertising.
- We do not retain shared photos beyond on-device processing, except where safety scanning legally requires evidence preservation.
AI processing
Your messages are processed by AI model providers acting as our processors to generate replies, extract memories, and score conversation safety. Safety systems screen conversations for prohibited content; content that violates child-safety laws is preserved as evidence and reported to NCMEC as required by law.
Your controls
- Memory viewer: see and delete anything a character remembers about you (tap the character's name in chat).
- Account deletion: Settings → Delete account & all data removes your data from this device and our servers.
- Export: request a copy of your data at the contact address below.
- Notifications: character-initiated messages honor your quiet hours and can be disabled entirely.
Legal bases (GDPR)
Contract performance (providing the service), legitimate interest (safety, fraud prevention), consent (notifications, optional features), and legal obligation (child-safety reporting).
Sharing
Service providers only, bound by data-processing agreements: cloud hosting (Google Firebase), AI model providers (Anthropic), and payment processing (Apple). We will update this list if providers change.
Retention
Chat and memory data: until you delete it or your account. Transaction records: as required by tax law. Safety evidence: as required by law.