Privacy Policy

• Account data — email, display name, password hash, timezone, optional profile fields (bio, interests, photo, social handles you opt in)
• Conversation data — messages, voice notes you send or receive, game activity, and relationship-scoped AI memory extracted from your chats
• Media — photos you upload and media generated for you
• Usage and billing — feature usage, credit ledger, subscription status, device/push tokens, coarse activity timestamps
• Verification — age-verification status and reference IDs (our vendor performs verification; we store the result, not your ID images)
• Safety data — automated safety classifications of messages and review-queue records
• Postal address — collected only if you opt in to physical mail from your companion; shared with our print-and-mail vendor solely to send your mail; deletable at any time in your settings
• Phone number — if you link your number (to call) or purchase a companion phone line; call audio is transcribed by our voice vendor to run the call; numbers can be unlinked or released in your settings

To operate companions and their memory, deliver and bill features, keep the platform safe (safety classification, abuse prevention), measure and improve the service, and meet legal obligations. Conversation content is processed by AI providers to generate replies — that is the core function of the service.

We use as little tracking technology as the product allows — no advertising or analytics trackers, no third-party pixels.

• fa_age — remembers you confirmed you are 18+ so the age gate doesn't re-prompt (365 days)
• fa_session — keeps you signed in (httpOnly, 30 days)
• local storage — interface preferences only: which companion windows you left open and where, and whether you've dismissed onboarding; never used to track you elsewhere

Clearing site data signs you out and resets those interface preferences; your account data is unaffected.

Companions remember things you share inside each relationship (facts, preferences, moments) so conversations feel continuous. Memory is scoped to that relationship, visible and deletable in your privacy controls, and can be disabled entirely. Memory is never shared with other members.

We use third-party processors to run the service: LLM inference (via an OpenAI-compatible gateway), media generation (Modal), speech-to-text and text-to-speech (Deepgram), realtime voice (LiveKit), telephony and phone-number provisioning (Telnyx via Zernio), age verification (Didit), physical print-and-mail fulfillment (thanks.io — receives the mailing address and the card artwork only, for opted-in members), and payment processing. Each processes data only as needed to provide its function and under its own privacy terms.

We do not sell your personal data. We do not read your conversations for advertising. We do not use your private relationship content to train third-party models. Creators see aggregate earnings, not your chats. Affiliates see masked referral identifiers only.

From the app's consent/privacy center you can:

• Export your data (account, memories, conversation history)
• Delete individual memories or clear all memory for a relationship
• Opt out of proactive messages and adjust quiet hours
• Delete your account — which removes personal data subject to legal retention (billing records, safety audit logs, fraud prevention)

Depending on your jurisdiction (including under PIPEDA for Canadian users and GDPR/UK GDPR where applicable), you may have rights to access, correct, delete, or port your data, and to complain to a supervisory authority. Contact us to exercise any of these.

We keep conversation and memory data while your account is active. Deleted data is removed from primary systems promptly and from backups within a reasonable window. Safety audit records and billing/ledger records are retained longer where required for compliance, taxation, and fraud prevention.

We use encryption in transit, scoped credentials, hashed passwords, and restricted production access. No system is perfectly secure; we will notify you and regulators of breaches as required by law.

FlirtAlly is strictly 18+. We do not knowingly collect data from minors. If you believe a minor is using the service, contact us and we will remove the account and its data.

Data may be processed in Canada and other jurisdictions where our providers operate, under contractual and legal safeguards appropriate to those transfers.

We will post updates here and announce material changes in-app. Privacy questions or requests: contact us.