Privacy Policy

This explains what MyPerson collects, why, and the rights you have. It is written to reflect the GDPR and UK GDPR, India's DPDP Act, and comparable laws.

What we collect

Account data: your email address and authentication identifiers.
Consent records: age confirmation, terms acceptance and timestamp.
Companion settings: the companion name and, when added, avatar and voice choices.
Safety records: when a message triggers a safety check (e.g. crisis language or blocked content), we log the event type and time.
Billing data: handled by Stripe; we store your subscription status, not your card details.

Conversation audio is processed in your browser using your device's built-in speech features; audio is not stored by us. Message text is sent to our AI provider to generate a reply.

Why we process it

To provide the service (contract).
To keep people safe and comply with law (legal obligation and legitimate interests).
To send optional updates only if you opt in (consent).

Your rights

You can access and export your data, correct it, withdraw consent, and delete your account and data. Use Export my data and Delete account in your account, or contact us.

Sub-processors

We use Supabase (hosting, database, authentication), Vercel (hosting), Stripe (payments) and DeepSeek (AI responses). Each is bound by contract to protect your data.

Contact

Data controller and privacy contact: [privacy contact]. You also have the right to complain to your local data protection authority.