Draft privacy notice — founder and counsel approval required

Privacy draft

What the service uses, and why.

This working draft describes the current implementation. It is not approved for publication.

Still required: verified legal operator, effective date, retention schedule, processor terms, privacy rights, and a tested privacy contact.

Information used by the service

The app creates an anonymous account identifier so conversations and remembered details remain separate from other users. The service stores messages, AI responses, condensed conversation memories, follow-up schedules, message-allowance records, and purchase-access information associated with that identifier.

Categorical safety-event metadata is recorded to operate and assess safety protections; those records are designed not to contain the triggering message text. Operational diagnostics help identify failures. Hosting and service providers may process network and device information needed to provide their services.

The adult-access screen checks a date of birth locally and stores an adult-access approval rather than the birth date. During the invite-only U.S. beta, the app also stores self-reported two-letter state codes for residence and current location to enforce beta availability.

Voice and conversations

Conversation text and relevant context are processed by configured AI providers. Voice handling depends on the supported experience and app version. Temporary recordings and provider behavior must be described against the final production configuration before publication.

Why information is processed

Information is used to provide conversations and continuity, enforce allowances, verify purchases, apply safety protections, respond to data requests, and maintain the service.

Retention and your choices

Conversation data remains available until deleted, subject to a retention schedule and exceptions that must be finalized. In Settings, Export My Data provides a machine-readable export of server-held account data. Delete My Account removes the active account and linked application data.

Deleting the app alone does not delete server-held data. Deleting an account does not cancel an app-store subscription.

Contact and rights

The verified privacy contact, applicable privacy rights, response periods, appeals, and jurisdiction-specific disclosures will be added before publication. The service is intended for adults 18 and older.