AI Girlfriend

Privacy Policy

Effective May 3, 2026

This Privacy Policy describes how [Your LLC Name] collects, uses, and shares information about you when you use the AI Girlfriend service. We take your privacy seriously, especially given the personal nature of this Service.

1. Information We Collect

Information you provide

  • Account information: email address.
  • Age verification: we use a third-party verifier (e.g. Yoti) where required by law. We receive a confirmation that you are 18+ but generally do not store the underlying ID document.
  • Payment information: processed by our payment provider (e.g. CCBill). We receive transaction metadata (subscription status, last 4 digits of card) but do NOT store full card numbers.
  • Conversation content: messages you send to and receive from Companions.
  • Generated media: images and voice messages generated for you.

Information collected automatically

  • Device and browser information, IP address, language, time zone;
  • Usage information: pages visited, features used, time spent;
  • Cookies and similar technologies (see Section 5).

2. How We Use Your Information

  • To provide, maintain, and improve the Service;
  • To personalize Companion responses based on your conversation history;
  • To process subscriptions and prevent fraud;
  • To enforce age-verification and content-policy obligations;
  • To detect, prevent, and respond to abuse, including content depicting minors;
  • To comply with legal obligations and respond to lawful requests.

3. Sharing

We do not sell your personal information. We share information only with:

  • Service providers who run essential infrastructure: hosting (Vercel/Hetzner), database (Neon), AI inference (OpenRouter, Replicate, ElevenLabs), email (Resend), payment processing (CCBill), age verification (Yoti).
  • Law enforcement when required by valid legal process. We will notify you of such requests where legally permitted.
  • Child-safety organizations such as NCMEC if we identify content involving minors.
  • Acquirers in the event of a merger or sale, subject to equivalent privacy commitments.

4. AI Training

We do not use your conversations to train any AI model without your explicit, separate consent. Conversations may be processed by third-party model providers solely to generate responses for you in real time. We require those providers to delete request data after a short retention period (typically 30 days) for abuse-monitoring purposes.

5. Cookies

We use cookies for: keeping you signed in, remembering your age-gate confirmation, basic analytics, and abuse prevention. You can disable cookies in your browser, but parts of the Service may not work.

6. Data Retention

  • Account data: retained while your account is active and for up to 90 days after deletion (then erased except where retention is required for tax, fraud, or legal reasons).
  • Conversation content: retained while your account is active. You can request deletion at any time.
  • Billing records: retained for 7 years for tax and accounting purposes.
  • Abuse/safety logs: retained as required by applicable law and child-safety reporting obligations.

7. Security

We use industry-standard safeguards including TLS in transit, encryption at rest, scoped access controls, and regular security review. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your information;
  • Port your data to another service;
  • Object to or restrict certain processing;
  • Withdraw consent (where processing is based on consent);
  • Lodge a complaint with a supervisory authority.

To exercise these rights, email privacy@aigirlfriend.com. We verify identity before fulfilling requests.

9. International Transfers

We are based in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US and other countries where our service providers operate. We use standard contractual clauses or equivalent safeguards for cross-border transfers from the EEA, UK, and Switzerland.

10. California Residents (CCPA/CPRA)

California residents have additional rights, including the right to know what categories of personal information we collect and the sources, the right to delete, and the right to opt out of "sales" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising.

11. EEA / UK Residents (GDPR / UK GDPR)

We process your information based on: (i) performance of our contract with you; (ii) our legitimate interests in operating and securing the Service; and (iii) compliance with legal obligations. The data controller is [Your LLC Name].

12. Children

The Service is for adults only. We do not knowingly collect information from anyone under 18. If we learn that a minor has used the Service, we will delete the account and any associated data, and may report the matter to relevant authorities.

13. Changes

We may update this Policy. Material changes will be posted with an updated effective date and, where appropriate, communicated by email.

14. Contact

Privacy questions: privacy@aigirlfriend.com.

Template notice: have a privacy attorney review before launch, especially if you intend to operate in the EU/UK or California.