Privacy Policy
This Privacy Policy explains how Companion AI Team ("we", "us", "our"), based in Germany, collects, uses, and protects your information when you use the Companion AI mobile application (the "App"). We act as the data controller for your personal data. For any privacy question or request, contact us at support@companionsai.org. By using the App, you agree to this policy. You must be at least 18 years old to use the App.
1. Information we collect
- Account information: your email address, and — if you sign in with Google — your name and basic Google profile information. If you register with a password, we store only a securely hashed version of it, never the password itself.
- Content you create: the messages you send in the App (text and any images you upload), your AI companion's configuration, saved "memories," and roleplay stories you create.
- Usage information: counts used to enforce free-tier limits (e.g. daily message counts) and basic technical logs needed to operate and secure the service.
- Subscription information: your subscription status, plan, and expiry. Purchases are processed by the app stores; we and our subscription processor receive confirmation of your purchase and status, but never your full payment card details.
- Device & technical data: a device/app identifier, app version, general device type, and IP address (used transiently for security and to deliver the service).
- Feedback: any feedback and optional images you choose to submit.
We do not collect your precise location or your contacts, and the App does not use advertising trackers.
2. Identifiers, SDKs & analytics
As a mobile app, we don't use web cookies, but we and our processors use device identifiers and on-device storage to make the App work:
- Local storage on your device holds your login token and small display caches so you stay signed in and the App loads quickly.
- Our subscription processor (RevenueCat) uses an app-generated user identifier plus basic device data to manage your subscription and provide us with aggregate subscription analytics (e.g. how many users subscribe or cancel). It does not track you for advertising.
We do not use third-party advertising or cross-app tracking SDKs.
Push notifications. If you allow notifications, we register a device push token through Firebase Cloud Messaging (Google) so we can deliver your companion's messages — such as daily check-ins — when the App is closed. You can turn notifications off at any time in your device settings, and the token is deleted when you delete your account.
3. How we use your information, and our legal bases
Under the GDPR we rely on the following legal bases:
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and running your account; storing your conversations; generating your companion's responses; processing your subscription. | Performance of a contract (Art. 6(1)(b)). |
| Securing the service, preventing abuse and fraud, enforcing usage limits, and maintaining and improving the App. | Our legitimate interests (Art. 6(1)(f)). |
| Sending you essential service emails, such as sign-in codes. | Performance of a contract / legitimate interests. |
| Any optional marketing emails (only if we introduce them and you opt in). | Your consent (Art. 6(1)(a)), which you can withdraw at any time. |
| Meeting legal, tax, and accounting obligations. | Compliance with a legal obligation (Art. 6(1)(c)). |
4. AI processing of your messages
Companion AI is powered by third-party AI models. To generate responses, the content of your conversations is sent to Anthropic (the Claude models). When you generate images (such as avatars or backgrounds), your prompts are sent to OpenAI. These providers process this data to return a result in accordance with their own terms. Under these providers' API terms, your content is used only to generate a response for you and is not used to train their AI models. Please still avoid sharing information in the App that you would not want processed by these providers. We do not actively solicit sensitive information (such as data about health, religion, or sexual orientation); if you choose to include it in a conversation, it is processed only to generate your response, and you can delete it at any time.
5. Who we share your information with
We do not sell your personal data. We share it only with service providers who help us run the App, each under appropriate data-protection terms:
- Anthropic — generates companion responses.
- OpenAI — image generation.
- Google — optional "Sign in with Google" authentication.
- RevenueCat, and the Apple App Store / Google Play — subscription management and billing.
- Resend — delivery of sign-in and service emails.
- Cloud hosting and infrastructure providers (for our servers, database, and this website) — to store data and run the service.
We may also disclose information where required by law, to protect our or others' rights and safety, or in connection with a business transfer (e.g. merger or acquisition).
6. Where your data is stored and transferred
Your data is stored on secure cloud servers operated by our infrastructure providers. Some processors (including the AI providers and RevenueCat) are based in, or process data in, countries outside the European Economic Area, including the United States. Where we transfer personal data outside the EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. How long we keep your data
- Conversations, memories, companion settings, and profile: kept while your account is active. When you delete your account, they are removed from our live database promptly, and purged from routine backups within about 30 days.
- Sign-in codes: expire within minutes and are automatically deleted within 24 hours.
- Subscription and transaction records: retained for up to 10 years where required by German tax and commercial law (e.g. §147 AO, §257 HGB), even after account deletion.
- Aggregated or anonymized data that can no longer identify you may be kept to understand and improve the service.
8. Your rights (EU/EEA/UK)
You have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent where we rely on it. Many of these you can exercise directly in the App — including permanently deleting your account and all associated data (Account → Delete Account) — or by contacting support@companionsai.org. You also have the right to lodge a complaint with your local data protection authority; in Germany this is the supervisory authority for your federal state.
9. Your rights (United States)
Depending on your state (for example California under the CCPA/CPRA, and similar laws in other states), you may have the right to know what personal information we collect, to access or delete it, to correct it, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. You can exercise your access and deletion rights in the App or by contacting us, and we will not discriminate against you for doing so.
10. Age requirement
Companion AI is intended for adults and you must be at least 18 years old to use it. The App is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
11. Security
We use technical and organizational measures to protect your data, including encrypted connections, hashed credentials, and access controls that scope each user's data to their own account. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where the law requires.
12. Changes to this policy
We may update this policy from time to time. We will update the "Last updated" date above and, where appropriate, notify you in the App. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
13. Contact
Questions about this policy or your data? Email support@companionsai.org.