Privacy Policy

1. Data we collect

• Account: email address, name, gender and age range from onboarding, “About me” text, social links.
• Content: chat messages and character replies, chat archive, memories, chat settings, comments, likes and favorites, creator follows, blocks, reports and support requests with attachments.
• Balance: gem credits and charges, purchases, invite code.
• Technical data: IP address and browser details in server logs, session identifier.

We don't collect your date of birth, ID documents or precise location. Card details are handled only by the payment provider.

2. Why

• To provide the service: sign-in, chats, reply generation, balance, purchases — under our contract (Terms of Service).
• Safety and rule enforcement: age checks, moderation of reports, fraud and abuse prevention — legitimate interest and legal obligations.
• Support: answering your requests.
• Improving the service: aggregated usage statistics.

We don't sell personal data and don't use your chats for advertising.

3. Who we share data with

• xAI (Grok models) — to generate character replies and “inspirations”: we send the character description, recent chat messages, your memories and chat settings, and your profile name. Your email is not sent.
• Stripe — to process payments (once payments are enabled).
• Google Firebase / Google Cloud — file storage (images, support attachments).
• Hosting provider [name] — servers and database.
• Authorities — only when legally required.

Some providers are located outside your country (for example, in the USA). Transfers use the safeguards required by applicable law.

4. Cookies and browser storage

Sign-in uses one essential cookie with a session identifier (httpOnly, not accessible to page scripts); the service can't work without it. We don't use third-party advertising or analytics cookies.

Browser storage (localStorage) keeps only display preferences: language, chat appearance, recent chats and search queries, the “Unrestricted” mode choice.

5. Retention

Account data and content are kept while the account exists. After deletion they are removed from the live database immediately and from backups within 30 days. Payment records may be kept longer where accounting or tax law requires. Server logs are kept up to 90 days.

6. Your rights

• Get a copy of your data and information about its processing.
• Correct your data — in your profile or via support.
• Delete your account and data — from the profile menu (“Delete account”).
• Restrict or object to processing, withdraw consent.
• Complain to your local data protection authority.

For requests, write to swoonie@riseforward.biz. We reply within the period required by law, usually within 30 days.

7. Age

The service is for people aged 18 or older only. If we learn an account belongs to a minor, we will delete it and the related data.

8. Security

Connections are encrypted (HTTPS), session tokens are stored only as hashes, and staff access to data is restricted. No system is perfectly secure — please tell us if you find a vulnerability.

9. Changes and contact

We will give advance notice of material changes. Data controller: [Company name], [address]. Privacy contact: swoonie@riseforward.biz.