Privacy Policy
This Privacy Policy explains how Companion AI Team ("we", "us", "our"), based in Germany, collects, uses, and protects your information when you use the Companion AI mobile application (the "App"). We act as the data controller for your personal data. For any privacy question or request, contact us at support@companionsai.org. By using the App, you agree to this policy. You must be at least 18 years old to use the App.
1. Information we collect
- Account information: your email address, and — if you sign in with Google — your name and basic Google profile information. If you register with a password, we store only a securely hashed version of it, never the password itself.
- Profile details you choose to give us: the information you enter during onboarding or in your account settings — such as your display name or nickname, age, gender, a short "about you" description, your hobbies, and your likes and dislikes. All of these are optional, you can change or clear them at any time, and they are used to personalise your companion's responses.
- Content you create: the messages you send in the App (text and any images you upload), your AI companion's configuration and appearance settings, saved "memories," roleplay stories, and any event reminders you add.
- Time zone: your device's time zone (e.g. "Europe/Berlin"), so scheduled features such as the daily check-in fire at your real local time rather than ours.
- Usage and analytics information: counts used to enforce free-tier limits (e.g. daily message counts), aggregate product-analytics counters, activity information derived from your account (such as when messages were sent, used to calculate retention and engagement statistics), and basic technical logs needed to operate and secure the service. See section 2 for details.
- Subscription information: your subscription status, plan, and expiry. Purchases are processed by the app stores; we and our subscription processor receive confirmation of your purchase and status, but never your full payment card details.
- Device & technical data: a device/app identifier, a push-notification token if you enable notifications, app version, general device type, and IP address (used transiently for security, rate limiting, and to deliver the service).
- Feedback: any feedback and optional images you choose to submit, together with the name and email address on your account so we can respond.
We do not collect your precise location or your contacts, and the App does not use advertising trackers.
2. Identifiers, SDKs & analytics
As a mobile app, we don't use web cookies, but we and our processors use device identifiers and on-device storage to make the App work:
- Local storage on your device holds your login token and small display caches so you stay signed in and the App loads quickly.
- Our subscription processor (RevenueCat) uses an app-generated user identifier plus basic device data to manage your subscription and provide us with aggregate subscription analytics (e.g. how many users subscribe or cancel). It does not track you for advertising.
Our own (first-party) analytics
We measure how the App is used so we can fix problems and decide what to build. We do this ourselves, on our own servers — there is no third-party analytics SDK in the App, and no analytics data is sent to an advertising network or data broker.
Our analytics has two parts:
- Anonymous event counters. When certain things happen — for example you finish onboarding, open the roleplay screen, save a check-in time, view the upgrade screen, a message or image is generated, a generation fails, or a subscription is started or cancelled — the App or our server increments a plain daily counter (a date, an event name, and a number). These counters contain no user ID, no device ID, and no content; they cannot be traced back to you or to your account, and they simply tell us "this happened N times today". We also record how long story generation takes, as a duration, for performance tuning.
- Aggregate statistics calculated from account data. To measure things like sign-ups, active users, retention, and average session length, our administrators run a report over the data we already hold — specifically account creation dates and the timestamps of messages. This report reads only when activity happened, never the content of your messages, and it displays only totals and averages across all users, never an individual profile.
We do not use third-party advertising, attribution, or cross-app tracking SDKs, we do not build advertising or marketing profiles about you, and the App does not request an advertising identifier.
Push notifications. If you allow notifications, we register a device push token through Firebase Cloud Messaging (Google) so we can deliver your companion's messages — such as daily check-ins — when the App is closed. You can turn notifications off at any time in your device settings, and the token is deleted when you delete your account.
3. How we use your information, and our legal bases
Under the GDPR we rely on the following legal bases:
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and running your account; storing your conversations; generating your companion's responses; processing your subscription. | Performance of a contract (Art. 6(1)(b)). |
| Securing the service, preventing abuse and fraud, and enforcing usage limits. | Our legitimate interests (Art. 6(1)(f)). |
| Measuring how the App is used through our own analytics (section 2), to fix problems, understand which features work, and improve the App. | Our legitimate interests (Art. 6(1)(f)) in maintaining and improving a service you use. We use aggregate figures rather than individual profiling, and you can object at any time (section 8). |
| Sending you push notifications, including your companion's proactive messages such as daily check-ins. | Performance of a contract (Art. 6(1)(b)) together with the permission you grant your device; you can revoke it at any time in your device settings. |
| Sending you essential service emails, such as sign-in codes. | Performance of a contract / legitimate interests. |
| Any optional marketing emails (only if we introduce them and you opt in). | Your consent (Art. 6(1)(a)), which you can withdraw at any time. |
| Meeting legal, tax, and accounting obligations. | Compliance with a legal obligation (Art. 6(1)(c)). |
4. AI processing of your messages
Companion AI is powered by third-party AI models. To generate responses, the content of your conversations — along with the profile details and companion settings that shape the reply — is sent to Anthropic (the Claude models). When you generate images (such as companion avatars, character art, or chat backgrounds), your prompts are sent to our image providers, fal.ai (which runs the FLUX models) and/or OpenAI; which one handles a given image depends on the type of image and our current configuration. These providers process this data to return a result in accordance with their own terms. Under these providers' API terms, your content is used only to generate a response for you and is not used to train their AI models. Please still avoid sharing information in the App that you would not want processed by these providers. We do not actively solicit sensitive information (such as data about health, religion, or sexual orientation); if you choose to include it in a conversation, it is processed only to generate your response, and you can delete it at any time.
Automatically created "memories." So your companion can remember you between conversations, the App periodically sends a recent extract of your companion chat to Anthropic to pull out a handful of short, durable facts about you (for example "user loves hiking on weekends"). These facts are saved to your account as "memories" and fed back into later conversations. This is an automated process, but it has no legal or similarly significant effect on you — it only changes how your companion talks to you. You can view, edit, and delete your memories at any time in the App's memories panel, and deleting a memory stops it being used.
Image prompts also pass through automated safety filtering at our image providers so that generated images stay within our content rules.
5. Who we share your information with
We do not sell your personal data. We share it only with service providers who help us run the App, each under appropriate data-protection terms:
- Anthropic — generates companion responses and extracts memories.
- fal.ai and OpenAI — image generation.
- Google — optional "Sign in with Google" authentication, and Firebase Cloud Messaging for delivering push notifications.
- RevenueCat, and the Apple App Store / Google Play — subscription management and billing.
- Resend — delivery of sign-in and service emails.
- Railway — hosting for our application server and database.
- Cloudflare — hosting for this website, and storage and delivery of uploaded and generated images.
We do not use any third-party analytics or advertising provider — our analytics is calculated on our own servers (see section 2).
We may also disclose information where required by law, to protect our or others' rights and safety, or in connection with a business transfer (e.g. merger or acquisition).
6. Where your data is stored and transferred
Your data is stored on secure cloud servers operated by our infrastructure providers. Some processors (including the AI providers and RevenueCat) are based in, or process data in, countries outside the European Economic Area, including the United States. Where we transfer personal data outside the EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. How long we keep your data
- Conversations, memories, companion settings, uploaded images, profile, and push tokens: kept while your account is active. When you delete your account, they are removed from our live database promptly, and purged from routine backups within about 30 days.
- Sign-in codes: expire within minutes and are automatically deleted within 24 hours.
- Feedback you submit: kept for as long as needed to act on it and to keep a record of support requests, normally no more than 2 years.
- Subscription and transaction records: retained for up to 10 years where required by German tax and commercial law (e.g. §147 AO, §257 HGB), even after account deletion.
- Anonymous analytics counters (section 2) contain no identifiers, are not linked to your account, and are kept indefinitely as long-term trend data. Because they cannot identify you, deleting your account does not remove them — there is nothing in them to remove. Any statistic calculated from account data disappears for you as soon as that account data is deleted.
- Other aggregated or anonymized data that can no longer identify you may be kept to understand and improve the service.
8. Your rights (EU/EEA/UK)
You have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing (including our analytics, which relies on legitimate interests); and to withdraw consent where we rely on it. Many of these you can exercise directly in the App — including permanently deleting your account and all associated data (Account → More account options → Delete account), or wiping your conversations, memories, stories, and profile details while keeping your account (Account → More account options → Reset). Our deletion page explains exactly what each option removes. You can also contact support@companionsai.org. You also have the right to lodge a complaint with your local data protection authority; in Germany this is the supervisory authority for your federal state.
9. Your rights (United States)
Depending on your state (for example California under the CCPA/CPRA, and similar laws in other states), you may have the right to know what personal information we collect, to access or delete it, to correct it, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. You can exercise your access and deletion rights in the App or by contacting us, and we will not discriminate against you for doing so.
10. Age requirement
Companion AI is intended for adults and you must be at least 18 years old to use it. The App is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
11. Security
We use technical and organizational measures to protect your data, including encrypted connections, hashed credentials, rate limiting, and access controls that scope each user's data to their own account, so no user can read another user's conversations. A small number of authorized administrators can access our systems where it is necessary to operate, secure, and support the service — for example to investigate a fault or a support request. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where the law requires.
12. Changes to this policy
We may update this policy from time to time. We will update the "Last updated" date above and, where appropriate, notify you in the App. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
13. Contact
Questions about this policy or your data? Email support@companionsai.org.