Privacy Policy

In this policy, 'Avatar AI', 'we' and 'us' mean the team that operates the Avatar AI app and service. 'You' means the person using it. Avatar AI is an iOS-first mobile app built with Expo and React Native, backed by our own API server and a PostgreSQL database.

We are a small team and we do not publish a mailing address. Email is how we do business, and it reaches us quickly: liuwilliam12@gmail.com. Use it for any privacy question, any request about your data, and any complaint.

This policy covers the Avatar AI mobile app, our API, and the website at https://avatar-ai-umber.vercel.app. It does not cover services you reach from the app but that are run by other companies, such as Apple's App Store and its purchase sheet. Those have their own policies.

The rest of this page is the detail. This is the shape of it.

Everything below is stored in our own PostgreSQL database unless we say otherwise. The names in brackets are the actual database tables, so you can hold this list against what the software really stores.

We use what we collect to run the product you asked for, and for very little else.

If you are in the EEA, the UK or Switzerland, we process your personal data on these bases under the GDPR and UK GDPR.

This is the most important section, so it is blunt. To generate a character's reply, our server sends a request over HTTPS to a third-party AI provider. That request contains the character card (its description, example dialogue, appearance text and tags), your persona text if you use one, the rolling summary of older turns, any recalled memories, and up to the last 30 messages of that chat, which includes everything you typed.

Which company receives that text is decided by a single server setting. The default is OpenAI, whose GPT models we call directly. The alternative is Anthropic, whose Claude models we call directly instead. Only one provider is active at a time. If we change the default we will update this page.

Because we call the selected provider directly, that provider's own terms govern what it does with the content of the request. Please keep that in mind, and do not type anything into a chat that you would not want that company to process.

Two other features send conversation text to a model. 'Suggest a reply' asks the model for reply ideas based on your recent messages. Requesting a photo asks the model to write a scene description from roughly the last dozen messages, which is then sent on to the image provider (see section 8).

No. We do not train, fine-tune or evaluate AI models on your conversations, and we do not build models at all. Avatar AI is an application on top of other companies' models.

Our providers receive your messages because that is the only way a reply can be produced. They handle that content under their own terms and privacy policies. Standard API terms at the major providers exclude API content from model training, but we cannot make that promise on their behalf, which is exactly why we name every one of them in section 9 so that you can read their policies yourself.

We look at individual conversations only in narrow situations: when you send us feedback or a support request that points at one, when we are investigating a specific abuse, safety or security report, or when the law requires it. We do not read chats for curiosity, for marketing, or to build profiles.

There is one image feature that generates anything: in-chat photos. When you ask a companion for a photo, we send the scene description written from your recent messages, together with that character's own reference photos, to OpenAI's image models. The reference photos are what keep a character's face consistent from one photo to the next. The request goes directly to OpenAI, which returns the result to us. The picture on a character you create is not generated: you upload it yourself from your photo library, and we store it as you sent it.

The image is written to our file storage under a random identifier, and the message in your chat points at it. Our production storage is a private bucket, so the address the app loads is a short-lived signed link that stops working once it expires.

Please read this part anyway. A signed link is still a link: for as long as it is valid, anyone you forward it to can open the image without an Avatar AI account. We do not publish a list of these addresses and we do not feed them to search engines, but treat a generated image link you share as public until it expires. If you want particular images deleted from our storage, email us and we will remove them.

We keep the list short on purpose, and each company gets the minimum it needs. These are our processors and service providers as of the date at the top of this page.

Buying Gems or a plan uses Apple's in-app purchase sheet inside the app. The payment runs entirely through your Apple account, on Apple's side. We never receive or store your card number, its expiry, or its security code. We do not have access to your bank.

What we do store on our side: a Purchase row for each gem pack (product, gem count, amount, currency, status, App Store transaction id), a Subscription row for each plan (tier, status, renewal state, period end, App Store subscription id), the matching Gem ledger rows, and the ids and types of the App Store server notifications we have processed.

Subscriptions are managed and cancelled in your Apple account settings; the Manage button in the app takes you there. Apple's handling of your payment is covered by Apple's own privacy policy. If we ever add a second way to pay, such as a web checkout through a payment provider, we will name that company here first.

We keep your account data for as long as your account exists. Chats and messages stay until you delete them or delete your account. There is no automatic expiry on conversation history, because the product is built around continuity.

Deleting your account from Settings runs a single database transaction that removes your personas, your chats, every message and every alternate reply in them, your likes, the characters you created, your referral rows, feedback that was linked to your account, your Gem ledger, your purchases, your subscriptions, and the user record itself. Where we hold the necessary key, we also delete your Supabase login.

Two consequences are worth knowing before you press it. First, deleting your account deletes the characters you created, and because a chat cannot exist without its character, it also deletes other people's chats with those characters. Second, the image files generated in your chats live in file storage: the messages that point at them are deleted, but the files themselves are not removed in the same step. Email us if you want specific image files deleted and we will do it.

Feedback you sent as a guest is not linked to your account and is not removed by account deletion, because there is nothing connecting it to you. Apple keeps its own record of a transaction under its retention and legal obligations, and we may keep the minimum billing record required for tax and accounting. Operational logs are short-lived. If our hosting provider keeps automated database backups, deleted rows can persist in those backups until they age out.

Wherever you live, you have real rights over the data we hold. We do not charge for them, and we will not treat you differently for asking.

In the app: open Settings and choose Delete account. It calls our API's account deletion endpoint and performs the deletion described in section 11 immediately, without you having to contact us. Signing out clears the session from the device without deleting anything.

By email: write to liuwilliam12@gmail.com and tell us which account you mean (your username, or the email you signed in with). We answer within 30 days, and sooner in practice. For access, export or deletion requests we may ask you to write from the email address on the account, because for most accounts that is the only way we can tell it is really you.

Guest accounts are a real limit on what we can do for you: a guest has no email address, so we have no way to verify that a guest account is yours. Delete a guest account from Settings on the device that holds it.

The rights themselves:

If you live in California, the California Consumer Privacy Act as amended by the CPRA gives you specific rights, and we honour them for everyone.

The categories we collect are: identifiers (user id, username, email address, Supabase login id, App Store transaction ids, and IP addresses in server logs); commercial information (purchases, subscriptions and the Gem ledger); internet or app activity (chats opened, message counts, feature use); and the content you create yourself, which includes messages, personas, characters and feedback. Because you decide what to type, that content can contain anything, including information California treats as sensitive. We do not ask for sensitive information and we recommend you do not enter it.

You have the right to know what we collect and why, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of these.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as California defines those terms. We never have. There is no advertising in Avatar AI and no ad or analytics SDK in the app, so there is nothing to opt out of. We do not use sensitive personal information to infer characteristics about you.

Our referral program credits Gems for inviting a friend. It is a product feature, not a financial incentive in exchange for personal information, and no personal information is sold or shared through it. To exercise any right, or to have an authorized agent do it for you with proof of authority, email liuwilliam12@gmail.com.

For people in the EEA, the UK and Switzerland, Avatar AI is the data controller for the processing described here, and the contact point is liuwilliam12@gmail.com. Section 5 lists our legal bases and section 12 lists your rights.

Our servers and our providers are based in the United States, and some providers operate globally. Using Avatar AI means your data is transferred to and processed in the United States and potentially other countries, whose privacy laws differ from your own.

Where personal data leaves the EEA or the UK, we rely on the transfer mechanisms in our providers' data processing terms, which are typically the European Commission's standard contractual clauses together with the UK addendum, or another lawful mechanism that provider offers. You can ask us which mechanism applies to a specific provider.

Traffic between the app and our API travels over HTTPS. Passwords are handled entirely by Supabase: we never see them, never receive them and never store them. Your session is a signed token that expires after 30 days and lives in the app's local storage on your device.

Chat data sits in a PostgreSQL database that is not exposed to the public internet. Every endpoint that touches your chats, characters, personas, purchases or profile requires a valid token tied to your user id, so one account cannot read another's data. Private characters return 'not found' to everyone but their creator, so even their existence is not leaked.

Two honest exceptions to all of that: generated image files are served without authentication, as explained in section 8, and character artwork shipped with the app is public by design.

We do not claim any certification, audit or compliance standard. We are not SOC 2 audited, not ISO 27001 certified, and not HIPAA compliant, and you should not treat Avatar AI as a place for medical, financial or otherwise regulated information. No service can promise perfect security. If we discover a breach affecting your personal data, we will notify you and the relevant regulator as the law requires.

You must be 18 or older to use Avatar AI. The service is built for adults, it is not directed to children, and we do not want anyone under 18 using it. Companion roleplay can be intimate and mature, which is precisely why the line is drawn here.

We do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we delete the account and its data rather than asking for parental consent, because this is not a service we offer to minors under any circumstances.

If you believe someone under 18 is using Avatar AI, email liuwilliam12@gmail.com with whatever detail you can give us and we will act on it quickly.

The site at https://avatar-ai-umber.vercel.app is a static export: pre-built pages and images with no login, no accounts and no database behind them. It sets no cookies of its own, and at the time of writing it carries no analytics, advertising or tracking scripts. Nothing you do on it is tied to an identity.

Like any website, it is served by a host that keeps standard server logs, which typically record an IP address, a user agent, the page requested and the time, and exist for delivery and security. If we add analytics later, we will name the provider on this page and update the date at the top before switching it on.

One other public page is worth mentioning: a referral link of the form /r/ followed by an invite code shows a small invite page and bounces you into the app. It stores nothing at all.

We update this policy when the product changes, and the effective date at the top always tells you which version you are reading. Adding a provider, changing which AI company receives your messages, or changing what we retain are all reasons we would update it.

For material changes we will give notice in the app, and by email where we have your address, before they take effect. Continuing to use Avatar AI after a change takes effect means you accept the updated policy. If you do not accept it, you can delete your account from Settings.

Ask us for an earlier version at any time and we will send it to you.