Privacy Policy

2. What Data We Collect

We collect the minimum data required to provide, personalize, and improve the Aichiki experience.

Information you provide

Display Name (required, but can be any text you choose)
Email Address (required for account creation)

User-generated content

AI chat messages
Custom characters and prompts
Profile images and character avatars (optional)

App usage data

App interactions (e.g. message counts, screen opens)
Crash logs and diagnostics
Session and device-level behavior (for analytics and debugging only)
Usage data via Google Analytics for Firebase — only if you opt in, and never linked to your identity (see the Analytics section)

Device and security information

A persistent device identifier, generated on your device, which we collect solely to detect and prevent fraud, abuse, and evasion of account restrictions or bans. This identifier is not used for advertising or tracking, and is not shared with third parties.

3. How We Use Your Data

We use your data only for the following purposes:

To operate and improve the app
To save your chats and characters across devices
To provide support and debug errors
To detect and prevent fraud, abuse, and evasion of account bans or restrictions (including through the use of a device identifier)
To understand which features users engage with (e.g. to improve UI or chat models)
To log and analyze feedback about the app when shared with our support AI character @aichiki, which helps us improve the platform. Only app-related feedback is automatically extracted by AI systems - we don't read your original messages, and only collect the extracted feedback summaries to guide future development

We do not:

Sell your data
Share it with data brokers or marketing services
Use your content (chats, characters, images) for advertising

If you opt in to analytics, usage data is also used to measure and improve the effectiveness of our own advertising campaigns and to manage who sees our ads — see the Analytics section for details.

4. Where and How Data Is Processed

Infrastructure & Storage

Google Cloud: Hosting and infrastructure (EU data centers: Brussels, Frankfurt)
Firebase & Firestore: Authentication and database storage for your account and content data (EU data centers)
Supabase: Character data storage and caching (EU data centers)
Google Cloud Storage & Gumlet: Image storage and optimization

Data Location: All user data (accounts, chats, characters) is stored exclusively in EU data centers (Brussels and Frankfurt regions) to comply with EU data protection regulations. We do not transfer or store primary user data outside the European Union.

AI Chat Services

We use multiple AI service providers to power character conversations, including but not limited to:

OpenAI - GPT models for chat
Anthropic - Claude models for chat
Google (Gemini) - Gemini models for chat
Mistral AI - Mistral models for chat
xAI - Grok models for chat
OpenRouter.ai - Aggregates access to multiple additional AI providers

AI Image Generation Services

Prodia - AI image generation
Google AI (Imagen) - AI image generation

Other Services

Stripe & RevenueCat: Payment processing for subscriptions
Sentry & Google Cloud Logs: Error tracking and crash reporting
Pinecone: Vector database for AI memory features
Google Analytics for Firebase: Usage analytics and advertising measurement — only with your consent (see the Analytics section)

What Data We Send to AI Providers

For chat conversations:

We send: The character's prompt, conversation history, and your message
We do NOT send: Your email address, user ID, payment information, profile data, or any personally identifiable information

For image generation:

We send: Only the text description/prompt for the image
We do NOT send: Any personal data or conversation content

Model Rotation & Transparency

The specific AI models used may change based on performance, availability, and cost optimization. We continuously evaluate and rotate between different models to provide the best experience while maintaining quality and affordability.

For a current list of models accessed through OpenRouter, visit: OpenRouter Apps - AICHIKI

AI Provider Commitments

All AI providers we work with maintain high standards for data protection:

They do not use customer API data to train their models without explicit consent
They comply with industry-standard security practices and data protection regulations
Major providers (OpenAI, Anthropic, Google, xAI, Mistral) have explicit policies against training on API customer data

Summary: We do not use these services to track or profile you, and we avoid including personal identifiers whenever possible. Our AI service integration does not link your identity to the data sent for processing.

5. Content Moderation and Automated Systems

To keep Aichiki safe and appropriate for all users aged 16 and up:

We use automated moderation tools and custom filters for both text and images
Offensive or unsafe content is blocked or filtered automatically
Potentially inappropriate content is analyzed through a multi-step AI review process and rejected if it violates our standards (see our Terms and Content Guidelines for details)
All AI content is generated based on prompts and filtered using industry-standard safety tools

Automated Flagging and Human Review

Our automated moderation systems periodically review conversations for potential policy violations. When a violation is detected — particularly content involving the safety of minors, non-consensual scenarios, or other serious concerns — the flagged content is automatically queued for human review by our moderation team.

This review occurs without prior notice or user consent. We consider this necessary to fulfill our legal obligations to protect minors and maintain platform safety. The legal basis for this processing is legitimate interest (Article 6(1)(f) GDPR) and compliance with legal obligations (Article 6(1)(c) GDPR).

When reviewing flagged content, human moderators may access the user's full conversation history and account activity as needed to determine whether a violation was isolated or part of a pattern of behavior. This broader review is necessary to make fair and informed moderation decisions. The vast majority of conversations are never seen by a human — review only occurs when automated systems have identified a potential serious violation.

Automated Account Assessment

We perform automated behavioral analysis on account activity to maintain platform integrity. This analysis may influence the services, features, and content types available to your account. These assessments are conducted entirely by automated systems and do not involve human review of your conversations unless a serious concern is flagged as described above.

We acknowledge that under Article 22 of the GDPR, you have rights related to automated decision-making. However, we consider these measures necessary for the performance of our contract with you (providing a safe platform) and for our legitimate interest in preventing abuse and protecting minors. If you believe an automated decision has unfairly affected your account, you may contact us at [email protected] to request a review.

What We Don't Care About

We want to be clear about what our moderation systems are — and are not — looking for:

We do not monitor or care about the nature of your conversations, your preferences, your kinks, your fantasies, or the themes you explore with AI characters — as long as they involve fictional adult characters and do not violate our prohibited content policies
We collect minimal personal data. We require only a display name (which can be anything) and an email address. We do not ask for your real name, age, location, phone number, or any other identifying information
Payment data is handled by third parties. If you subscribe, payment processing is handled entirely by Stripe, Apple, or Google. While these processors may collect billing information (such as your name from a credit card), this data is held by them under their own privacy policies — we do not access, store, or use your payment identity for any purpose other than processing your subscription
AI providers receive no identifying data. When your messages are sent to AI models for response generation, we strip all user identifiers. The AI provider has no way to know who you are

In short: we built Aichiki so that we know as little about you as possible while still being able to keep the platform safe for everyone — especially minors.

7. Analytics (Optional, With Your Consent)

We use Google Analytics for Firebase to understand how the app is used and to improve it — but only if you agree. When you first open the app, we ask for your consent. No analytics data is collected unless you accept, and you can change your choice at any time in the app's Settings.

What is collected (if you opt in)

Screens visited and features used
Device type, operating system, and app version
General usage patterns (e.g. session length, app opens)
Device-level identifiers used by Google Analytics (a random app-instance ID, and on Android the advertising ID)

The data we receive is pseudonymous — it is tied to device-level identifiers, never to your name, email address, or the content of your conversations, and we do not send any of those to Google Analytics. Google processes this data on our behalf as a data processor.

Why we collect it

To understand which features are used and improve the app
To find and fix usability problems
To measure and improve the effectiveness of our own advertising campaigns (e.g. understanding which campaigns bring users who actually enjoy the app), so we can spend our advertising budget responsibly
To manage the audiences of our own advertising — for example, so that people who already use Aichiki stop seeing our install ads, and so that Google Ads can look for new users similar to those who genuinely enjoy the app. We never use this data to advertise anyone else's products, and we never share it with data brokers

Google signals

If you have opted in to analytics and are signed in to a Google Account with Ads Personalization turned on, Google may associate the analytics data from Aichiki with your Google Account. This happens on Google's side, under Google's own privacy policy, and gives us only aggregated, anonymous demographic and interest reports (for example, what share of our users enjoy books or comics). We never see individual Google Account data. You can turn this association off for all apps at any time in your Google Ads Settings, and review or delete it via My Activity — independently of the analytics switch in Aichiki.

Your control

Analytics is off by default — nothing is collected until you accept
You can turn it on or off at any time in Settings → Share anonymous usage data
Declining or turning it off has no effect on any app functionality

The legal basis for this processing is your consent (Article 6(1)(a) GDPR). For more about how Google processes this data, see Firebase Privacy and Security.

9. Account Deletion & Your Rights

You have complete control over your data:

Data Export: You can export all your data at any time through your account settings
Account Deletion: You can permanently delete your account and all associated data through your account settings
Additional Support: If you need assistance with data export or deletion, please contact us at [email protected]

Upon account deletion, all your data will be permanently removed from our systems within 7 days. Backup copies may take up to 30 days to be fully removed.

Important exception: For accounts suspended or terminated due to violations of our Terms of Service, data export is not automatic and is handled at AICHIKI's discretion — which may result in a full export, a partial export, or no export at all. This is permitted under Article 15(4) and Article 23 of the GDPR, which allow restrictions on the right of access to protect the rights and freedoms of others and other important objectives of general public interest, as well as under applicable EU and Romanian law. Account data may also be preserved and disclosed to competent authorities where required or permitted by law.

TL;DR (Summary)

1. Overview