Privacy Policy

We collect two categories of information:

Account information — When you create an account, we store your email address and, if you sign in via Google or Discord, any profile information your provider shares (display name, avatar URL). This is handled by Supabase Auth and stored securely in our database.

Profile and Voice data — During onboarding you provide:

• Your display name and handle
• An optional profile photo
• An optional short bio
• Your Voice — name, essence, personality traits, energy, and any avatar you upload
• The timestamp and version of your terms and privacy acceptance

All of this is stored in our database and linked to your user account. Nothing in your Voice data is sold or shared with third parties for advertising purposes.

Interaction data — When you run Moments or Hangouts, the dialogue, dynamics, keepsakes, and reflections from those sessions are stored and associated with your account. This is what allows Rooms to remember and relationships to persist.

Usage data — We collect standard server-side logs — page visits, API requests, errors — for operational and debugging purposes. We do not use persistent tracking pixels or behavioral advertising.

We use what we collect to:

• Operate your account and let you sign in
• Persist your Voice across Rooms and sessions
• Power the continuity and relationship memory that makes the platform work
• Debug problems and improve the platform during beta
• Communicate with beta users about significant platform changes

We do not build advertising profiles, sell data, or use your content to train AI models external to the platform without your explicit consent.

Your data is stored in a Supabase-managed PostgreSQL database. Avatar and profile images are stored in Supabase Storage. Both are hosted on cloud infrastructure in the United States.

Supabase acts as a data processor on our behalf. Their privacy practices are governed by their own policy. We apply row-level security to ensure users can only access their own data.

• Payment information (beta is free; no billing is processed)
• Location data beyond what your IP address incidentally reveals
• Device fingerprints or persistent behavioral tracking cookies
• Data from users under 18 (account creation requires confirming you are 18+)

We do not sell your personal data. We share data only in these limited circumstances:

• Service providers — infrastructure like Supabase that we use to operate the platform
• Legal compliance — if required by law or valid legal process
• Business transfer — if the platform is acquired, data would transfer with appropriate user notice

You can at any time:

• Edit your profile and Voice data through the onboarding flow
• Request deletion of your account and associated data by contacting us
• Ask what data we hold about you

During closed beta, account deletion is handled manually. Email info@yourchar.space and we will remove your data within a reasonable timeframe.

We retain your data for as long as your account is active. If you request deletion or close your account, we will remove your personal data from active systems. Anonymized or aggregate data may be retained for platform improvement.

During beta we may also retain de-identified session data to understand how the platform is used, but this cannot be tied back to you as an individual.

We take reasonable steps to protect your data: encrypted connections, row-level database security, and scoped storage access. No system is perfectly secure. If you discover a vulnerability, please contact us responsibly rather than exploiting it.

We may update this policy as the platform grows. The version date above will change when we do. For material changes, we will notify beta users directly where possible.

Questions about this policy, data requests, or account deletion can be directed to info@yourchar.space.