Privacy Policy

1. Private by default

Your journal entries, media vault, and personal logs are visible only to you unless you explicitly choose to share them with a partner, a space, or a public surface. We do not sell your personal data, and we do not use advertising trackers. We use Google Analytics only on our public marketing pages — never on any page that shows your private content, and it never receives your journal, media, or activity data (see Sharing, below).

2. What we collect

Account data: your email, a hashed password (never stored in the clear), your declared date of birth and age-affirmation, your region and locale, and the policy version you accepted.

Content you create: activities, fantasies, notes, media, AI outputs, partner and space records, chat messages, and the settings and consent choices attached to them.

Operational data: security and audit events, moderation and safety-scan results (referenced by opaque identifiers, not the underlying media), and the minimum device/connection signals needed to keep the service secure and apply the correct regional rules.

3. How we use it

To provide the service, keep it and you secure, enforce the safety rules, meet legal obligations, and apply region-specific availability. AI features run through a provider key that you supply; your prompts and content are sent to that provider only when you use those features (see the AI Usage Policy).

4. Sharing

We share your data only with the infrastructure providers that run the service (hosting, database, media storage, email, and — for realtime and background jobs — messaging/queue providers), and with authorities where legally required (see the Law Enforcement Request Policy). Sharing with other users happens only when you choose to.

On our public marketing pages only, we use Google Analytics (provided by Google LLC) to measure aggregate traffic and improve the site. It receives standard web-analytics data for those public pages — such as the pages viewed, approximate location, and device type — and never any of your private journal, media, or activity content. In the UK and EU/EEA, Google Analytics runs only after you opt in via our cookie banner.

Inside the app, we use only first-party, anonymous usage analytics — a random device identifier (never linked to your account) that measures aggregate feature usage and retention. It records no journal, media, or activity content, and it is never shared with Google or any other third party.

5. Security

Media in your private vault is stored in a private bucket and is never exposed by a public URL — access is always through short-lived signed links after a server-side authorization check. Provider API keys and verified-creator ID images are encrypted at rest (AES-256-GCM). Sensitive admin access is role-limited and audit-logged.

6. Retention and your choices

We keep your data while your account is active and delete it on the schedule in the Data Retention Policy, subject to any legal hold. You can export your data or delete your account from Settings. Cookie and consent choices are described in the Cookie Policy.