Privacy Policy

Your privacy matters, especially on an app like this. This policy explains what we collect, why, and the control you have over it.

What we collect

• Account details: your email address, display name and, if you choose, a short description of yourself.
• Content: your chats, the memories your companions keep, characters you create, and photos and voice notes generated for you.
• Guest chats: if you chat with a character before making an account, we generate her replies but don't store the conversation. Your browser keeps it in its local storage, and it's saved to your account only if you sign up or log in from it. We count guest messages per IP address to limit the free preview.
• Billing records: what you bought and when, and for card payments the card's brand and last four digits. Full card numbers and wallet details are handled by our payment partners, never by us.
• Technical data: IP address, device and browser type and basic usage logs, used for security and to keep the Service running.
• Usage analytics: which pages are visited, key actions such as signing up or buying Premium, errors the website runs into, and your approximate location (country, state or region, and city), which our hosting provider estimates from your IP address. When you're signed in, this is linked to your account ID and email address. Outside the EU and EEA, the UK and Switzerland, it also includes session recordings of how pages are used (clicks, scrolling and page changes). Recordings show pages as you see them, including your chats, photos, memories and account details, and what you type, except passwords.
• Where you came from: if you arrive through one of our ads or a link we tagged, which one (for example the ad network, campaign and the network's click ID), saved with your account when you sign up. If you arrive through a member's affiliate link, which affiliate it was, saved the same way so they get the credit.
• If you join our affiliate program: your affiliate code, the payout details you give us (a crypto wallet address or bank account details), and your link's visits, sign-ups, commissions and payouts. We count visits once per IP address a day, keeping only a scrambled form of the address, for about a day.

How we use it

• To run the Service: generating replies, photos and voice notes, and remembering your conversations.
• To process payments, prevent fraud and enforce our Terms, including moderating prohibited content.
• To improve the Service, using aggregated statistics, usage analytics and the ratings you give to messages.
• To email you about your account. We don't send marketing emails without your consent.

Who we share it with

We never sell your data or show your chats to other users. We share the minimum necessary with service providers who help us operate: cloud hosting and database providers, AI model providers that generate replies and media, payment processors, and PostHog for website analytics. They may only use it to provide their services to us. We require the AI providers that write chat replies not to retain your messages or train on them.

If you sign up or pay after clicking one of our ads, we tell that ad network, so it can measure the ad: we send the network's own click ID, what happened (a sign-up or a payment) and, for payments, the amount and our order reference. Never your email, name, chats or anything else that identifies you.

If you sign up through a member's affiliate link, that affiliate sees that someone signed up, with only the first letter of your display name, when you joined, your plan, what you spent and the commission it earned them. Never your name, email, chats or anything else that identifies you.

Your bank statement

Card charges appear on your statement as "NAUGHTYCHATS.AI", with nothing about what you bought.

Your choices

• View, edit or delete any memory from the chat sidebar, and delete any chat or photo.
• Download a copy of your data from your account settings.
• Delete your account at any time. This permanently removes your chats, memories, photos and characters, and removes your email address from our analytics. We keep your email address, with the dates your account was created and deleted, as a record of the account. If you were an affiliate, we keep the record of your commissions and the payouts we sent you, for accounting, and erase your saved payout details.

Security and retention

Data is encrypted in transit and stored with access controls. We keep your data while your account is active and delete it when you delete your account, except billing records we must keep for legal and accounting reasons, and the record of your email address described above.

Cookies

We use essential cookies to keep you signed in and remember that you confirmed your age. We don't use third-party advertising cookies. Outside the EU and EEA, the UK and Switzerland, when you arrive through one of our ads or a link we tagged, a cookie of our own remembers which one for up to 30 days, so the right ad gets the credit if you sign up. A member's affiliate link is remembered the same way for up to 90 days, so the right affiliate gets the credit. Each is deleted once it's saved with your new account.

How our analytics work depends on where you are. In the EU and EEA, the UK and Switzerland, they are cookieless and store nothing on your device: visitors who aren't signed in are counted with a daily anonymous hash, and signed-in members are recognized by their account. Elsewhere, analytics keeps an anonymous ID in your browser's local storage (not a cookie) and records how pages are used, so we can find and fix problems. Those recordings show what's on your screen, including your chats and photos, and what you type, except passwords.

Outside the EU and EEA, the UK and Switzerland, pages can show visitors who aren't signed in Google's “Sign up with Google” prompt. It loads Google's sign-in script, so Google can see that your browser opened our site, and if you're signed in to Google it offers your Google account. We receive nothing from Google unless you choose to continue, and then only what “Continue with Google” gives us: your name, email address and Google account ID.

To turn analytics off in a browser, open any page with ?analytics=off added to the address (for example naughtychats.ai/?analytics=off). That saves a small opt-out flag on that device, and ?analytics=on removes it. Sign-ups and payments are still counted, because our servers record those.

Contact

Privacy questions or requests: support@naughtychats.ai.