1. What We Collect
- Account data: username, email, password (stored as a salted hash — we cannot see the original), and the date of birth provided at registration (used solely for adult verification);
- Chat content: your text conversations with the AI companion;
- WeChat binding identifier: if you bind WeChat, the user identifier WeChat assigns (used for message routing; it does not include your WeChat password or contacts);
- Recognition results of voice and images: voice messages are transcribed to text and images are converted to text descriptions before entering the conversation record. The original audio and image files are not retained — audio exists only in memory and a temp directory during transcoding and is deleted immediately; images are recognised in memory and discarded;
- Derived data: memory entries, emotional state and relationship progress the AI distils from conversations (generated to make "she remembers you" work);
- Server access and runtime logs: IP address and access time, used for security protection and troubleshooting, rotated and purged on a schedule.
We do not collect contacts, geolocation, device fingerprints, browsing history, or anything else unrelated to the Service.
2. How We Use It
The data above serves exactly three purposes: generating replies (sending conversation context to LLMs), the memory system (so she remembers what you've told her), and troubleshooting (the operator touches data only when strictly necessary, e.g. diagnosing faults).
We promise: we never sell your data, never use it to train models of our own, and show no ads.
3. Third-Party Processing
To generate replies, conversation content is sent to third-party LLM providers, subject to their respective terms. Providers currently in use, by function (the lineup may change as the Service evolves):
- Chat generation: DeepSeek;
- Memory vectorisation: Google Gemini (memory-entry text is sent when building the retrieval index);
- Image generation: 302.AI (an API relay service);
- Speech transcription and image recognition: Alibaba Cloud Qwen;
- Speech synthesis: MiniMax;
- Web search (when your question involves current events): Tavily — only distilled search keywords are sent;
- Email (verification codes, notices): Resend — only your email address and the message content are sent.
We share your data with no third parties beyond these, except where required by law.
4. Storage and Retention
- Data is stored on the operator's server; all transport is HTTPS-encrypted. The database is not currently encrypted at rest (i.e. the operator can technically access raw data at the server level) — we state this plainly;
- Raw chat logs are auto-purged after 60 days; per companion, only the most recent ~100 conversation turns are kept — older content is condensed into memory summaries and the originals deleted;
- Memory summaries (e.g. "he has a cat") are kept long-term until you delete them or your account;
- Daily automatic backups, rolling over after 7 days.
5. Sensitive-Information Filtering
A built-in filter processes data before it can enter long-term memory:
- Passwords, API keys, government ID numbers, bank card numbers and other credentials — rejected outright from long-term memory;
- Phone numbers, street addresses, school-and-class combinations — redacted before storage.
The filter applies to long-term memory and derived data; raw chat logs within the 60-day window are not filtered (they expire automatically). Please avoid sending credentials in chat.
6. Your Rights
- View: the Memory Management page shows everything she remembers; persona and core memories can be exported as JSON in one click;
- Delete memories: remove single entries or everything from the Memory Management page, effective immediately;
- Delete a companion: remove an AI companion and all its associated data from the management page;
- Delete your account: there is currently no self-service account deletion. To fully delete your account and data, email xiyuai@proton.me; we will process it manually and confirm within 15 business days.
Note: the deletions above take effect immediately in the primary database; deleted data may persist in daily backups for up to 7 days before being permanently cleared as backups roll over.
7. Minors
The Service is for adults 18+ only and we do not knowingly collect minors' data. When signals suggest a user may be underage the system automatically enters safe mode (see Terms of Service §2). Guardians who discover a minor using the Service may contact us to delete the related data.
8. Changes
When this policy changes we update the effective date above; material changes are additionally notified by email to your registered address. Continued use constitutes acceptance.
9. Contact
Privacy questions and data-deletion requests: xiyuai@proton.me