We collect the following categories of information:

• Account information. When you sign in, we collect your email address. Sign-in is handled by our authentication provider (WorkOS) using a one-time email code or a social login such as Google or Apple. We do not store passwords.
• Profile data. Optional information you choose to add, such as a username, display name, avatar, and the characters or stories you create.
• Chat and user content. The messages you send to characters, the characters and stories you create, images you generate or upload, and your in-app activity are stored so the Service can function.
• Purchase data. When you buy coins or a subscription, the transaction is processed by Apple (App Store) and brokered by RevenueCat. We receive a record of the purchase and entitlement; we never receive or store your full payment card details.
• Usage and analytics data. We use analytics (PostHog) to understand how the Service is used, including events, screens viewed, approximate device and app information, and crash diagnostics.
• Photos (optional). If you set an avatar or save a generated image, we access your photo library. This is used only for the feature you invoke and requires your permission.

• To provide, operate, and maintain the Service.
• To generate character responses. Your messages are sent to third-party large language model providers to produce replies.
• To process purchases and manage subscriptions and coins.
• To understand usage, improve features, debug problems, and keep the Service secure.
• To enforce our Terms of Service and prevent abuse or prohibited content.
• To communicate with you about your account or support requests.

We do not sell your personal information. We share information only with service providers that help us operate the Service, including:

• WorkOS for authentication.
• Convex for backend hosting and data storage.
• Large language model and image providers for generating character replies and images from your prompts.
• RevenueCat and Apple for processing in-app purchases and subscriptions.
• PostHog for product analytics.

We may also disclose information if required by law, to protect our rights or the safety of users, or in connection with a merger, acquisition, or sale of assets.

We retain your information for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated data at any time by emailing yashseth.vik@gmail.com. We will delete or anonymize your data within a reasonable period, except where we are required to retain it by law.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at yashseth.vik@gmail.com.

The Service is intended for adults and is not directed to children. You must be at least 18 years old, or the age of majority in your jurisdiction, to use the Service. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We use industry-standard measures to protect your information, including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We operate in the United States and may process and store information there and in other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these locations.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice within the Service.

If you have questions about this Privacy Policy or your data, contact us at yashseth.vik@gmail.com.