Privacy Policy

1. Overview

At Aichiki, we believe in privacy-first design. Our goal is to provide engaging, AI-powered character interactions and creative tools while minimizing the personal data we collect. This Privacy Policy explains what data we collect, how we use it, and how you can control it.

2. What Data We Collect

We collect the minimum data required to provide, personalize, and improve the Aichiki experience.

Information you provide

• Display Name (required, but can be any text you choose)
• Email Address (required for account creation)

User-generated content

• AI chat messages
• Custom characters and prompts
• Profile images and character avatars (optional)

App usage data

• App interactions (e.g. message counts, screen opens)
• Crash logs and diagnostics
• Session and device-level behavior (for analytics and debugging only)

3. How We Use Your Data

We use your data only for the following purposes:

• To operate and improve the app
• To save your chats and characters across devices
• To provide support and debug errors
• To understand which features users engage with (e.g. to improve UI or chat models)
• To log and analyze feedback about the app when shared with our support AI character @aichiki, which helps us improve the platform. Only app-related feedback is automatically extracted by AI systems - we don't read your original messages, and only collect the extracted feedback summaries to guide future development

We do not:

• Sell your data
• Use it for advertising
• Share it with marketing services

4. Where and How Data Is Processed

Infrastructure & Storage

• Google Cloud: Hosting and infrastructure (EU data centers: Brussels, Frankfurt)
• Firebase & Firestore: Authentication and database storage for your account and content data (EU data centers)
• Supabase: Character data storage and caching (EU data centers)
• Google Cloud Storage & Gumlet: Image storage and optimization

Data Location: All user data (accounts, chats, characters) is stored exclusively in EU data centers (Brussels and Frankfurt regions) to comply with EU data protection regulations. We do not transfer or store primary user data outside the European Union.

AI Chat Services

We use multiple AI service providers to power character conversations, including but not limited to:

• OpenAI - GPT models for chat
• Anthropic - Claude models for chat
• Google (Gemini) - Gemini models for chat
• Mistral AI - Mistral models for chat
• xAI - Grok models for chat
• OpenRouter.ai - Aggregates access to multiple additional AI providers

AI Image Generation Services

• Prodia - AI image generation
• Google AI (Imagen) - AI image generation

Other Services

• Stripe & RevenueCat: Payment processing for subscriptions
• Sentry & Google Cloud Logs: Error tracking and crash reporting
• Pinecone: Vector database for AI memory features

What Data We Send to AI Providers

For chat conversations:

• We send: The character's prompt, conversation history, and your message
• We do NOT send: Your email address, user ID, payment information, profile data, or any personally identifiable information

For image generation:

• We send: Only the text description/prompt for the image
• We do NOT send: Any personal data or conversation content

Model Rotation & Transparency

The specific AI models used may change based on performance, availability, and cost optimization. We continuously evaluate and rotate between different models to provide the best experience while maintaining quality and affordability.

For a current list of models accessed through OpenRouter, visit: OpenRouter Apps - AICHIKI

AI Provider Commitments

All AI providers we work with maintain high standards for data protection:

• They do not use customer API data to train their models without explicit consent
• They comply with industry-standard security practices and data protection regulations
• Major providers (OpenAI, Anthropic, Google, xAI, Mistral) have explicit policies against training on API customer data

Summary: We do not use these services to track or profile you, and we avoid including personal identifiers whenever possible. Our AI service integration does not link your identity to the data sent for processing.

5. Content Moderation and Automated Systems

To keep Aichiki safe and appropriate for all users aged 16 and up:

• We use automated moderation tools and custom filters for both text and images
• Offensive or unsafe content is blocked or filtered automatically
• Potentially inappropriate content is analyzed through a multi-step AI review process and rejected if it violates our standards (see our Terms and Content Guidelines for details)
• All AI content is generated based on prompts and filtered using industry-standard safety tools

Automated Flagging and Human Review

Our automated moderation systems periodically review conversations for potential policy violations. When a violation is detected — particularly content involving the safety of minors, non-consensual scenarios, or other serious concerns — the flagged content is automatically queued for human review by our moderation team.

This review occurs without prior notice or user consent. We consider this necessary to fulfill our legal obligations to protect minors and maintain platform safety. The legal basis for this processing is legitimate interest (Article 6(1)(f) GDPR) and compliance with legal obligations (Article 6(1)(c) GDPR).

When reviewing flagged content, human moderators may access the user's full conversation history and account activity as needed to determine whether a violation was isolated or part of a pattern of behavior. This broader review is necessary to make fair and informed moderation decisions. The vast majority of conversations are never seen by a human — review only occurs when automated systems have identified a potential serious violation.

Automated Account Assessment

We perform automated behavioral analysis on account activity to maintain platform integrity. This analysis may influence the services, features, and content types available to your account. These assessments are conducted entirely by automated systems and do not involve human review of your conversations unless a serious concern is flagged as described above.

We acknowledge that under Article 22 of the GDPR, you have rights related to automated decision-making. However, we consider these measures necessary for the performance of our contract with you (providing a safe platform) and for our legitimate interest in preventing abuse and protecting minors. If you believe an automated decision has unfairly affected your account, you may contact us at [email protected] to request a review.

What We Don't Care About

We want to be clear about what our moderation systems are — and are not — looking for:

• We do not monitor or care about the nature of your conversations, your preferences, your kinks, your fantasies, or the themes you explore with AI characters — as long as they involve fictional adult characters and do not violate our prohibited content policies
• We collect minimal personal data. We require only a display name (which can be anything) and an email address. We do not ask for your real name, age, location, phone number, or any other identifying information
• Payment data is handled by third parties. If you subscribe, payment processing is handled entirely by Stripe, Apple, or Google. While these processors may collect billing information (such as your name from a credit card), this data is held by them under their own privacy policies — we do not access, store, or use your payment identity for any purpose other than processing your subscription
• AI providers receive no identifying data. When your messages are sent to AI models for response generation, we strip all user identifiers. The AI provider has no way to know who you are

In short: we built Aichiki so that we know as little about you as possible while still being able to keep the platform safe for everyone — especially minors.

6. Data Retention

• Chat logs and character data are retained as long as your account is active
• Diagnostic and usage data is retained only as long as needed to improve the app or resolve technical issues

7. Cookies and Authentication

AICHIKI uses cookies only for essential authentication purposes:

• We use cookies solely for Firebase authentication to enable you to log in and maintain your session
• Firebase Authentication may set cookies from Google domains (such as accounts.google.com) to facilitate the login process
• These cookies are strictly necessary for the platform to function properly
• We do not use any analytics cookies, tracking cookies, or advertising cookies
• Without these essential authentication cookies, you would not be able to log in to your account

As we only use essential cookies for authentication and no optional cookies, there are no cookie preferences to manage.

8. Account Deletion & Your Rights

You have complete control over your data:

• Data Export: You can export all your data at any time through your account settings
• Account Deletion: You can permanently delete your account and all associated data through your account settings
• Additional Support: If you need assistance with data export or deletion, please contact us at [email protected]

Upon account deletion, all your data will be permanently removed from our systems within 7 days. Backup copies may take up to 30 days to be fully removed.

Important exception: For accounts suspended or terminated due to violations of our Terms of Service, data export is not automatic and is handled at AICHIKI's discretion — which may result in a full export, a partial export, or no export at all. This is permitted under Article 15(4) and Article 23 of the GDPR, which allow restrictions on the right of access to protect the rights and freedoms of others and other important objectives of general public interest, as well as under applicable EU and Romanian law. Account data may also be preserved and disclosed to competent authorities where required or permitted by law.

9. Age Restriction

Aichiki is intended for users aged 16 and above. If you are under 16, please do not use the app or provide any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users via in-app message or update notice if significant changes are made.