Privacy Policy

1. Scope and controller

This policy explains how Amori - AI girlfriend (“the app”, “we”, “us”) handles personal data. The service is provided under the Clippo Media name. Privacy questions can be sent to support@clippo.media.

2. Data we collect

We collect only data used to provide, secure, support, and improve the service.

• Account data: an anonymous account identifier and, if you use Sign in with Apple, the identifiers and contact details Apple makes available.
• Companion and conversation data: companion settings, text messages, roleplay scenarios and scene messages, voice notes, photos, generated replies, memories, diary entries, and moments.
• Device and usage data: language, timezone, app events, error and performance information, device/platform details, and push tokens when notifications are enabled.
• Purchase data: product, entitlement, transaction status, and expiry information supplied by Apple and RevenueCat. We do not receive your full payment-card number.
• Support data: your email address and the information you choose to send through support or feedback.

3. Purposes and legal grounds

• Provide chat, roleplay, voice, image, memory, diary, notification, authentication, and subscription features. Roleplay scenes are fictional and stored separately from everyday chat; they are not used to create your everyday memories or diary.
• Maintain safety controls, prevent abuse, enforce limits, diagnose failures, and secure the service.
• Respond to support, privacy, and account requests.
• Optional usage analytics in versions with Privacy & Data controls uses your consent and is off by default. It excludes conversation content, media, companion names, memories and diary content. Session recording is disabled. Essential billing, abuse prevention and internal AI cost records do not depend on optional analytics.
• EEA/UK legal grounds: account administration, requested core services and subscriptions use performance of a contract (Article 6(1)(b)); legally required records use legal obligation (Article 6(1)(c)); proportionate security and abuse prevention use legitimate interests (Article 6(1)(f)). You can object to legitimate-interest processing. In versions with Privacy & Data controls, AI companion processing and optional analytics use your separate choices under consent (Article 6(1)(a)).
• Sensitive information: do not provide another person’s private information. You may choose to share health, beliefs, sex life or sexual orientation in conversation. Versions with Privacy & Data ask for separate AI-processing permission before AI features, including explicit consent under Article 9(2)(a) for sensitive information you provide for those features. Consent is not inferred from accepting terms. You can withdraw it there; new AI processing and proactive features pause, while export, deletion, support and subscription management remain available.

4. AI processing and service providers

AI features require relevant text, audio, or images to be sent to xAI Grok or Google Gemini to generate a response. Pruna generates companion portraits and chat photos. Google Gemini also checks relevant request text, generated replies, and uploaded or generated images for safety before delivery. When you tap Generate preview to create a custom appearance, your selected appearance, hairstyle, hair color and eye color are converted into a fictional-adult portrait description and sent to Google for a safety check and Pruna for image generation. These choices describe the fictional character, not your own ethnicity or physical characteristics. A selected portrait may be sent to Pruna as a reference for later companion photos. The app does not intentionally attach your email address to model requests.

We also use Supabase for authentication, database, storage, and server functions; PostHog for product analytics; RevenueCat and Apple for subscriptions; and Expo for push-notification delivery. Providers receive the data needed for their role. Apple also handles purchases and Apple-account data under its own terms. We do not intentionally send conversation content to RevenueCat or PostHog. Provider-held data is also subject to their applicable retention and contractual terms.

5. Storage and security

Data is transmitted over encrypted HTTPS connections. Conversation media is stored in private object storage and delivered through time-limited account-scoped links. Database access is restricted with account authorization and row-level security. AI processing means conversations are not end-to-end encrypted.

No service can guarantee absolute security. Do not share passwords, payment-card details, government identifiers, or information you would not want processed by the service and its providers.

6. Retention and deletion

Account data and conversation content are generally retained while your account is active. Custom appearance previews are stored privately, including unused previews. Changing appearance preserves your conversation and memories. You can delete individual messages in chat. Ending a roleplay scene keeps its history available to read. You can delete the entire account in Settings → Account → Delete Account; this removes the account, conversations, roleplay scenes and messages, memories, generated diary and moment data, stored conversation media, and custom appearance previews from active systems.

Purchase and transaction records may remain with Apple, RevenueCat, or us where required for accounting, fraud prevention, dispute handling, or law. Security logs and backups may persist until their provider-controlled rotation or deletion cycle. Billing records are retained for the relevant legal obligation or dispute period. A minimal processor-erasure follow-up record may remain until the request is fulfilled. Contact our privacy address for retention information applicable to your account and requests covering provider-held data.

7. Your choices and rights

You can disable notifications, revoke microphone or photo permissions, delete messages and delete your account in-app. If your installed version offers Settings → Privacy & Data, you can also change AI/analytics permission and export account data as JSON with private media download links that expire after one hour. If those controls are unavailable, use the privacy choices page for assistance.

EEA/UK users can request access, rectification, erasure, restriction, objection and applicable data portability. Withdrawing consent does not affect processing already lawfully carried out. Requests are normally free and answered within one month. Complex requests may take up to two additional months where allowed, with notice within the first month. We verify ownership proportionately before disclosing private data.

You can complain to the supervisory authority where you live, work or believe an infringement occurred; see the EDPB authority directory. Fictional replies, memories and diary content are automated personalization and are not intended to make decisions with legal or similarly significant effects about you. You can edit memories and ask support to correct errors.

8. Children

Amori - AI girlfriend is intended for adults aged 18 and older. We do not knowingly offer the service to children. Contact us if you believe a minor has provided personal data.

9. International processing

Service providers may process data in countries other than your own. Our current infrastructure is not an EU-only service. Transfers outside the EEA require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses with necessary supplementary measures. Contact our privacy address for the safeguards applicable to your account and to request a copy, subject to necessary redactions.

10. Changes and contact

We may update this policy as the service changes. The current version and revision date will remain available here. Privacy questions can be sent to support@clippo.media.