Privacy Policy

1. Information We Collect

A. Information You Provide Directly

• Account information: email address and password when you register
• Messages and content: all messages you send and receive in conversations with the AI character
• Personal facts: information you voluntarily share during conversations (name, interests, life details), which may be stored to personalize your experience
• Payment information: processed through our third-party payment provider. We do not store your full credit card number or payment credentials
• Communications with us: emails or messages you send to our support address

B. Information Collected Automatically

• Device and network data: browser type, operating system, IP address, general location (country/city level)
• Usage data: pages visited, time spent on the Service, actions taken
• Cookies: we use essential cookies for authentication (JWT session tokens) and basic functionality. We do not use advertising or tracking cookies

C. Sensitive Information

The conversational nature of the Service may lead you to share sensitive information (health, relationships, emotions). We do not require or solicit such information. If you include it in your messages, it is processed as conversation data solely for generating AI responses. Sensitive information is never used for marketing, advertising, or any purpose other than providing the Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: creating your account, authenticating logins, delivering AI-generated responses, personalizing conversations based on facts you share
• Memory and personalization: storing facts you share (e.g., your name, interests, life events) so the AI character can reference them in future conversations, creating a more personalized experience
• Processing payments: managing subscriptions and billing through our payment provider
• Service improvement: analyzing usage patterns (in aggregate and anonymized form) to improve features and performance
• Safety and security: detecting and preventing fraud, abuse, and unauthorized access
• Legal compliance: complying with applicable laws, regulations, and legal processes
• Communication: sending service-related notices (account verification, subscription changes, policy updates). We do not send marketing emails unless you explicitly opt in

We do not use your conversation content for marketing or advertising purposes. We do not sell your personal information.

3. How We Share Your Information

A. Third-Party AI Language Model Provider

Your messages are processed by a third-party AI language model provider (currently Anthropic, via the Claude API) to generate conversational responses. This provider:

• Processes your messages solely for the purpose of generating AI responses
• Does not use your data to train their own AI models
• Is contractually required to implement appropriate security measures
• Does not retain your conversation data beyond what is necessary to generate responses

B. Payment Provider

Payment information is shared with our third-party payment processor to manage subscriptions, process transactions, and handle billing disputes.

C. Hosting Provider

Your data is stored on servers provided by our hosting provider (currently Hetzner, located in Helsinki, Finland, within the European Union).

D. Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal obligations, protect our rights or safety, or protect the rights or safety of others.

E. Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

4. Data Storage & Security

Your data is stored on secure servers located in the European Union (Helsinki, Finland). Messages processed by the AI provider may be temporarily processed in the United States.

We implement industry-standard security measures to protect your data, including:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of passwords (hashed, never stored in plain text)
• Firewall protection and restricted server access
• Regular security monitoring

While we take reasonable measures to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach, we will notify affected users as required by applicable law.

5. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this Policy, unless a longer retention period is required by law.

• Account information: retained for the duration of your account and for up to 30 days after account deletion
• Messages and conversation data: retained for the duration of your account. Deleted within 30 days of account deletion
• Personal facts (memory): retained for the duration of your account. You may request deletion of specific facts at any time
• Payment and transaction records: retained for up to 7 years after the transaction as required by financial regulations
• Usage and device data: retained for up to 12 months, then deleted or anonymized

Data transmitted to our third-party AI provider for generating responses is processed transiently and not retained beyond the duration necessary to generate the response.

6. International Data Transfers

Your data is primarily stored in the European Union (Finland). However, your messages are processed by Anthropic (United States) to generate AI responses.

For transfers from the EEA to countries outside the EEA that have not received an adequacy decision from the European Commission, we rely on appropriate safeguards including Standard Contractual Clauses to ensure your data receives an adequate level of protection.

By using the Service, you acknowledge and consent to the transfer and processing of your data as described in this section.

7. Your Rights & Choices

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete personal data
• Deletion: request deletion of your personal data ("right to be forgotten")
• Portability: request your data in a portable, machine-readable format
• Restriction: request restriction of processing of your personal data
• Objection: object to processing of your personal data based on our legitimate interests
• Withdrawal of consent: withdraw your consent at any time where we rely on consent for processing. Withdrawal does not affect the lawfulness of processing prior to withdrawal

To exercise any of these rights, contact us at support@tylerdebronxx.com. We will respond to your request within 30 days, or as required by applicable law.

You may also delete your account at any time, which will initiate deletion of your personal data in accordance with our retention schedule.

You have the right to exercise these rights without discrimination. If you are unsatisfied with our handling of your request, you may lodge a complaint with your local data protection authority.

8. Cookies

We use essential cookies that are strictly necessary for the operation of the Service:

• Authentication cookies: JWT session tokens to keep you logged in
• Security cookies: to prevent cross-site request forgery and protect your account

We do not use advertising cookies, tracking cookies, or analytics cookies from third parties. We do not participate in advertising networks or share cookie data with advertisers.

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using the Service.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18.

If we discover that a user is under 18, we will promptly terminate the account and delete all associated personal data. If you believe that a minor under 18 has provided us with personal information, please contact us immediately at support@tylerdebronxx.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent update is indicated at the top of this page.

Material changes will be communicated via email or prominent notice on the Service. We encourage you to review this Policy periodically.

Your continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.

11. Contact Us

For questions about this Privacy Policy, to exercise your data rights, or to raise any privacy concerns, contact us at:

support@tylerdebronxx.com