Legal
Privacy Policy
Last updated: February 25, 2026
1. Introduction
AI Companion ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and iOS application (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.
Important: To provide our core features, certain user data is sent to third-party AI services as described in Section 6. By using the Service, you acknowledge and consent to this data processing.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you register, we collect your name, email address, and password (hashed). If you use Sign in with Apple, we receive your Apple ID and associated email.
- Profile Data: Display name, bio, and preferences you choose to set.
- Conversation Data: Messages you send to AI companions, including text and uploaded images.
- Character Creations: Details of AI characters you create, including personality traits, backstories, and reference images.
- Payment Information: Billing details processed through Stripe (web) or Apple (iOS). We do not store your full credit card numbers.
2.2 Information Collected Automatically
- Usage Data: Interaction patterns, feature usage, and session information.
- Device Information: Device type, operating system, and push notification tokens.
- AI Memory Data: Our AI system extracts and stores contextual memories from your conversations (facts, preferences, events) to improve your experience. These are tied to your account and specific AI companions.
- Behavioral Insights: The AI may observe patterns in your communication style and schedule to provide a more personalized experience.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process transactions and manage your subscriptions
- Personalize your AI companion interactions through memory and behavioral learning
- Send push notifications for proactive messages and updates (with your consent)
- Generate AI images and videos based on your requests
- Ensure platform safety and enforce our Terms of Service
- Respond to customer support requests
4. AI-Generated Content
Our Service uses artificial intelligence to generate text responses, images, and videos. AI-generated content is created based on your inputs and character configurations. We do not use your conversations to train AI models. AI-generated images and videos are stored in our secure cloud storage and are accessible only to you.
5. Data Storage and Security
Your data is stored using industry-standard security measures:
- Passwords are cryptographically hashed and never stored in plaintext
- Media files are stored in encrypted cloud storage (S3-compatible)
- Authentication uses JWT tokens with secure refresh mechanisms
- iOS app stores sensitive data in the encrypted Keychain
While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Sharing and Third-Party AI Services
We do not sell your personal information. To deliver our core features, your data is processed by the following third-party services:
6.1 AI Chat and Language Processing — OpenRouter
Your conversation messages (text content and uploaded images) are sent to OpenRouter (openrouter.ai), which routes requests to third-party AI model providers including Moonshot AI (Kimi K2.5), Qwen (Alibaba Cloud), and OpenAI. These providers process your messages to generate AI companion responses, extract conversation memories, classify content, and create text embeddings. OpenRouter and its upstream model providers process data according to their respective privacy policies.
- Data sent: Chat messages, uploaded images, character personality configurations, conversation context, and timezone
- Purpose: AI response generation, memory extraction, content moderation, and personalization
- Providers: OpenRouter (openrouter.ai), Moonshot AI, Alibaba Cloud (Qwen), OpenAI
6.2 AI Image and Video Generation — RunPod
When you request AI-generated images or videos, your text prompts, character attributes, and reference images are sent to RunPod (runpod.io), a serverless GPU infrastructure provider. RunPod hosts our custom image generation models (PuLID/Flux) and video generation models (Kling). Generated media is downloaded and stored on our own servers.
- Data sent: Image generation prompts, character physical attributes, reference face images (base64-encoded), and video source images
- Purpose: AI image generation, AI video generation, and character avatar creation
- Provider: RunPod (runpod.io)
6.3 Payment Processors
Stripe (web) and Apple (iOS) process payment information under their respective privacy policies. We do not store your full credit card numbers.
6.4 Cloud Infrastructure
Conversation data, user profiles, and generated media are stored on secure cloud servers using S3-compatible encrypted storage and a cloud database service (Turso). Push notifications are delivered through Apple Push Notification service (APNs).
6.5 Legal Requirements
We may disclose information when required by law, legal process, or to protect our rights, safety, or property.
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data.
- Correction: Update or correct inaccurate information.
- Deletion: Delete your account and all associated data. This can be done through the app settings. Account deletion removes all conversations, memories, generated media, and personal information.
- Portability: Request your data in a portable format.
- Opt-Out: Disable push notifications or specific AI features through your settings.
8. Data Retention
We retain your data for as long as your account is active. When you delete your account, we permanently delete your conversations, AI memories, behavioral insights, generated media, and personal information. Some data may be retained in backups for up to 30 days after deletion.
9. Children's Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected data from a user under 18, we will promptly delete that information.
10. Cookies and Tracking
Our web application uses essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising trackers.
11. International Data Transfers
Your data may be processed in countries other than your own. By using the Service, you consent to the transfer of your information to facilities outside your jurisdiction, where data protection laws may differ.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by posting a notice within the app or sending an email. Continued use after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Email: privacy@aicompanion.app