Privacy Policy

1. Information we collect

Information you give us:

• Account details: email address, password (stored only as a salted hash), display name, timezone and your confirmation that you are 18 or older.
• Conversations: the messages you send to Companions and the replies, pictures and proactive messages they send you, on the web and by SMS.
• Memories: facts about you that a Companion extracts from your conversations (for example where you live, what you like, what you are working on), stored as short text entries so they can be recalled later.
• Phone number, if you enable texting, and the verification codes we send to it.
• Payment information: Paystack collects and processes your card or bank details. We receive a customer reference, the plan you bought, the amount, currency and payment status. We never see or store your full card number.
• Support requests and anything else you send us.

1b. Information collected automatically

Technical data such as IP address, browser and device type, pages viewed and timestamps; usage counts (messages, pictures and SMS used against your plan); and product events (for example that a relationship reached a new stage or a payment succeeded). We use a session cookie to keep you logged in and a referral cookie to attribute sign-ups to creators. We do not use third-party advertising cookies.

AI usage records: for every AI request we store which model was used, how many tokens it consumed and its cost. These records are tied to your account so we can enforce plan limits and understand costs; they do not contain the text of your messages.

2. How we use information

We use information to:

• run the Service: generate Companion replies and pictures, build and recall memories, deliver SMS, enforce plan limits and take payments;
• keep people safe: run automated safety checks on messages, detect content involving minors or self-harm, prevent abuse and fraud, and investigate reports;
• improve the Service: measure which features are used, diagnose errors and tune Companion behaviour using aggregated statistics;
• communicate with you: account, billing, security and legal notices, and product news you can opt out of;
• comply with law and enforce our Terms.

3. AI providers and model training

To generate replies, memories, safety classifications and pictures we send the relevant parts of your conversation (the Companion's instructions, recent messages and recalled memories) to third-party AI providers. Our current providers include Anthropic and OpenAI for language models and embeddings, and Replicate or fal.ai for image generation; the set may change and the current list is available on request.

These providers process your data under agreements that prohibit using it to train their own models and that limit retention to what is needed to provide the service and enforce abuse policies (typically up to 30 days). We do not use your private conversations to train our own general models. If we ever want to use conversations for training, we will ask for your explicit opt-in first.

Conversations are never used for advertising and are never sold.

4. Who we share information with

We share information only with service providers that help us operate, and only what each needs:

• AI providers, as described above.
• Paystack, for payments, subscriptions and refunds.
• Twilio (or an equivalent carrier gateway), to send and receive SMS, if you enable texting. Twilio sees your phone number and message text.
• Hosting, database and file-storage providers that store our systems and your pictures.
• Professional advisers, and authorities where required by law, to protect someone's safety, or to enforce our Terms. We report child sexual abuse material to the relevant authorities.
• A successor if the business is sold or merged; we will notify you before your data becomes subject to a different privacy policy.

5. Memories and how to control them

Memories are the core of the Service and also the most personal data we hold. Each Companion keeps its own memories about you; they are not shared between Companions or with other users. You can see every memory in your account, delete any of them individually, and set a nickname you would like the Companion to use. Deleting a memory removes it permanently; the Companion may re-learn it if you mention it again.

Please avoid sharing information you would not want stored, such as government identifiers, financial details, health information about others, or information about third parties who have not consented.

6. SMS and phone numbers

If you verify a phone number we store it to deliver messages and to route your replies to the right Companion. We keep a log of texts sent and received for support, billing and abuse prevention. Reply STOP to any text to turn SMS off; remove your number from your account to delete it from our systems. Carrier and gateway providers may keep their own records under their policies.

7. Retention

We keep information for as long as needed for the purposes above:

• Conversations, memories and pictures: for as long as your account exists, subject to your plan's storage limits and your own deletions.
• Account deletion: when you delete your account, conversations, memories, pictures, phone number and profile are deleted within 30 days. Backups are overwritten within a further 30 days.
• Safety records: content flagged for serious violations may be retained for up to 2 years, or longer where the law requires.
• Billing and tax records: 7 years, as required by accounting law. These contain payment references and amounts, not conversations.
• Technical logs: up to 90 days.

8. Your rights

Wherever you live, you can: access the information we hold about you; correct your profile; delete memories or your entire account from your account page; export your conversations and memories by asking us; and opt out of marketing emails using the link in each one.

If you are in the European Economic Area, the United Kingdom, Switzerland, Kenya, Nigeria, South Africa, California or another jurisdiction with data-protection law, you may have additional rights, including to object to or restrict processing, to data portability, to withdraw consent, and to lodge a complaint with your supervisory authority. Our legal bases for processing under such laws are: performance of our contract with you (running the Service), your consent (SMS, marketing, optional features), our legitimate interests (security, fraud prevention, product improvement) and legal obligations.

To exercise any right, email [email protected]. We will respond within 30 days and may ask you to verify your identity. We do not discriminate against you for exercising your rights. We do not "sell" or "share" personal information as those terms are defined in US state privacy laws.

9. Security

All traffic is encrypted in transit. Passwords are hashed with a modern key-derivation function. Access to production data is restricted to staff who need it, logged, and protected by multi-factor authentication. Conversations are visible to staff only when flagged by safety systems or when you ask for support and grant access. No system is perfectly secure; if we discover a breach affecting your data we will notify you and the relevant authorities as the law requires.

10. International transfers

We are based in Kenya. Our hosting and AI providers may process data in the United States and other countries whose laws differ from yours. Where required we rely on standard contractual clauses or equivalent safeguards for those transfers.

11. Children

The Service is for adults only. We do not knowingly collect information from anyone under 18. If we learn that an account belongs to a minor we delete it. If you believe a minor is using the Service, contact us.

12. Cookies

We use strictly necessary cookies: a session cookie to keep you logged in and a 30-day referral cookie so creators get credit for sign-ups. We do not use tracking or advertising cookies. You can block cookies in your browser, but the Service will not work without the session cookie.

13. Changes to this policy

We will post changes here and update the date at the top. For material changes we will email you or show a notice in the app at least 14 days before they take effect.

14. Contact

Kindrie Ltd, Kangundo Road, Kileleshwa, Nairobi, Kenya. Privacy questions and requests: [email protected]. General support: [email protected].