Privacy Policy

1. Information we handle

• Content you create: characters, personas, images and sprites, room scenes, stories, voices, messages you send to characters, and comments.
• Account information (once accounts are available): such as an email address or sign-in identifier from a provider you choose.
• Age signals: if you enable adult content, we check the date of birth you enter and do not store it. We keep only that your account was confirmed 18+ and when. If the date shows you are under 18, we record that adult content is locked on your account and when (not the date itself), and place a small marker in your browser so new accounts there start locked. We do not use a third-party age-verification service and do not receive or store any government ID. If we introduce third-party verification in the future, it would return only a yes/no result, and we would update this Policy first.
• Usage & device data: basic technical information such as app settings, approximate usage, and error logs needed to run and improve the Service.
• How you found us: if you arrive through a tagged link (for example from an ad or a post), we remember the tag for up to 30 days and attach it to your account if you sign up, so we can count which links bring players. It is never sold or used for advertising. We may ask how you found PersonaChat; answering is optional, and your answer is stored without your account.
• Server logs: when your device contacts our servers we record the request and your IP address, along with a random device identifier the app generates. These are used to apply rate limits, investigate crashes, and detect abuse — not to build a profile of you. Security alerts (for example repeated attempts to reach a private endpoint) may be sent to a private operator channel on Discord, and can include the IP address involved. We keep these logs only as long as they are useful for those purposes.

2. How we use information

• to provide the Service — including generating AI text, images, and voices;
• to enforce safety, moderation, and our Content Guidelines, and to protect minors;
• to review safety flags: an automatic check reads adult (18+) chat replies for content our Content Guidelines and payment partners don’t allow — such as non-consent, or anything involving minors. When it flags a turn, that one message and the reply to it (not the rest of your chat) are stored with your account name and may be read by PersonaChat’s administrators to decide whether to act. Other players never see them. Flagged text is deleted within 90 days; if we did act on it, we keep only a record that we did, without the text;
• to send character emails, only if you turn them on: if your sign-in (Google or Discord) gives us an email address and you switch on “Let my characters email me” (and confirm it from the email we send), a character you’ve played with may email you a short note after a few quiet days, and occasionally a site update. Notes are written by AI from that character and may draw on one of your memories with them. Every email has a one-click unsubscribe, and you can turn it off in Settings at any time;
• to protect minors: an automatic check looks for players saying in chat that they are under 18. A match is logged (the matching phrase, not your whole message) and may lead to adult content being locked on the account and an admin review;
• to maintain, debug, secure, and improve the Service;
• to process payments, subscriptions, renewals, and refunds for paid plans; and
• to comply with legal obligations.

3. AI processing

When you chat with a character, generate an image caption, or use a voice, the necessary content (such as your message and relevant character details) is transmitted to third-party AI providers so they can produce a response. Don’t share information you wouldn’t want processed by an external AI provider. We do not use this to publicly identify you, and we do not sell your personal data.

4. Third-party providers

We use a small number of providers to deliver features. They act as processors for the data we send them:

• AI model routing — to generate character replies and story text.
• Image & video understanding — to classify uploads (including our adult-content safety check) and power watch-along features.
• Text-to-speech & voice processing — to generate spoken audio and voice clones.
• Hosting & storage — to run the Service and store synced data.
• Payments— Stripe processes subscription payments, renewals, and refunds. Card details are entered on Stripe’s own checkout and are never sent to or stored by PersonaChat; we receive only your billing email, plan, and subscription status. See Stripe’s Privacy Policy.
• Email — Resend sends the character and confirmation emails, using your email address and the email’s text.
• Age verification — not currently used; if we add it in the future, only to confirm you are 18+ (yes/no result).

5. Storage, sync & retention

PersonaChat is local-first: your library lives primarily in your browser’s storage on your device. If you enable sync, a copy is stored on our servers so your data is available on your other devices. Safety-flagged 18+ excerpts (see section 2) are stored on our servers for review whether or not sync is on. We keep information for as long as needed to provide the Service or as required by law. You can clear conversation memory with the Forget controls in the app, delete individual characters and chats, or clear your device data at any time.

6. Children’s privacy

PersonaChat is not for children under 13 (or under the minimum digital-consent age in your country). Adult content is restricted to verified 18+ users. If we learn that we have collected personal information from a child under our minimum age, we will delete it. If you believe a child has provided us information, contact us.

7. Your choices & rights

Depending on where you live (for example under the GDPR or CCPA/CPRA), you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Many of these you can exercise directly in the app; for others, contact us and we’ll respond as required by law. We won’t discriminate against you for exercising your rights.

8. Security

We use reasonable technical and organizational measures to protect data. No method of storage or transmission is perfectly secure, so we can’t guarantee absolute security, but we work to protect your information and to respond appropriately if an incident occurs.

9. Cookies & local storage

We use browser local storage and similar technologies to keep you signed in, remember your settings, and store your local library. We aim to use only what’s needed to run the Service.

10. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

11. Changes

We may update this Policy. If we make material changes, we’ll take reasonable steps to let you know. The “Last updated” date above reflects the current version.

12. Contact

Privacy questions or requests? Email support@personachat.gg.