◐ NuraMate

Privacy Policy

Draft — have this reviewed by counsel before launch (GDPR / UK GDPR, CCPA/CPRA, PIPEDA and Québec Law 25, Australia Privacy Act, and any other markets you target).

What we collect

  • Account data: email, display name, date of birth (to confirm you're 18+), country, time zone and language.
  • Conversation data: your messages, your companion's replies, and memories extracted from them.
  • Billing data is handled by Stripe. We store only a Stripe customer/subscription reference, never card numbers.
  • Usage counts (messages and tokens per day) for plan limits and cost control.

How it's protected

  • Messages, memories and relationship summaries are encrypted at rest (AES-256) in our database.
  • Every account's data is isolated; companions and memories are only ever loaded for their owner.
  • Safety events (e.g. a crisis-support banner was shown) are logged without message content.
  • If you report a message, an encrypted copy of it (and your note) is kept so our team can review it, even if you later delete the conversation. It is removed when you delete your account.

How it's used, and where

  • To generate replies, your recent messages and relevant memories are sent to our AI provider (OpenAI, United States) through their API. API data is not used to train their models by default.
  • Voice: recordings you send are transcribed by OpenAI and then discarded — only the text is kept. Spoken replies are generated by OpenAI text-to-speech, stored encrypted with the message, and deleted together with it. Companion voices are AI-generated, not recordings of real people.
  • Photos: pictures you send are resized and re-encoded on our server, which removes hidden metadata such as GPS location, then checked by automated moderation and stored encrypted. Your companion "sees" them through OpenAI's vision model; later they only remember a one-line description. Photos from your companion are AI-generated (not real people or places), labelled as such, and stored encrypted. All of it is deleted with the conversation.
  • Our servers may be located outside your country. Where required (e.g. transfers from the EU/UK), we rely on appropriate safeguards such as Standard Contractual Clauses.
  • We never sell or "share" your personal information for advertising, never use conversations for ads, and never show them to other users.

Your rights and controls

  • Access, correct or delete your data at any time: delete individual memories, reset or remove a companion, or delete your whole account from Account settings — deletion is immediate and permanent.
  • Depending on where you live you may have additional rights (e.g. portability, objection, complaint to your data-protection authority). Contact us to exercise them.

Contact

[email protected]