Privacy should feel obvious, not optional.

iPhone app: on-device and account-free. Your companions, chats, messages, memories, generated images, and preferences are designed to stay in your device storage, and your conversation content is not sent to our servers to generate replies.

Web app: uses a friendAI account. In Local mode, the AI model runs in your browser and your conversation data is kept in your browser's storage. In Cloud mode (or when you enable sync), your messages and the context needed to answer them are sent to our servers and to third-party AI providers, and the content you sync is stored in your account.

The iPhone app is on-device first. We do not require an account for it, and we do not upload your chats to friendAI servers to generate replies.

Profile information, companion profiles, chat threads, messages, memory notes, generated images, avatars, and app preferences are intended to stay in your device storage and app sandbox.

• Memory Vault entries are stored locally and may be used as context for on-device model responses.
• App preferences such as model or local security settings may be stored in iOS system storage such as UserDefaults.
• If copies of your content are created through device backups, screenshots, system sharing, or other tools outside the app, those copies are controlled by the tools and services you choose rather than by friendAI.

To create and operate your friendAI account on the web app, we collect your email address and authentication information, which is handled by our authentication and database provider.

We also store account-related information so the product works across your sessions and devices.

• Your email address and sign-in credentials or tokens.
• Profile and persona details, and your app settings and preferences.
• Your Spark balance and the transaction history (ledger) for Sparks.
• Subscription and purchase status.
• Basic technical and connection data, such as IP address and browser information, used for security, fraud prevention, and reliability.

When a conversation uses Local mode, the AI model runs inside your browser and your messages are processed on your device. Conversation content created in Local mode is kept in your browser's storage (for example, IndexedDB) and is not sent to our servers to generate replies.

Because this data lives in your browser, clearing your browser data, using private browsing, or signing out on a device may remove locally-stored content on that device.

When you use Cloud mode or enable sync, the content you create is stored on our infrastructure so it is available across your sessions and devices.

This can include your companions and characters, chats and messages, memory entries, personas, and related settings.

To generate Cloud replies, voice, or images, we send the content needed to produce the response — your message plus the context the model needs, such as the companion's personality, relevant memory, and recent messages in the thread — to third-party AI providers that run the models on our behalf. These currently include OpenRouter (and the model providers it routes requests to) and Google. For spoken replies, text may be sent to a text-to-speech provider.

These providers process the data we send them under their own terms and privacy policies. We send only what is needed to produce the response, and we do not sell this content. We aim to use providers and request settings intended for generating responses rather than for training their models, but we do not control third-party providers' practices, so please review their policies.

Paid features, such as subscriptions and Spark purchases, are processed by our payment processor, Stripe. Your card and payment details are handled by Stripe; we do not receive or store your full payment card number.

We keep records such as your subscription status, purchase history, and your Spark balance and transaction ledger. If you purchase through Apple, Apple processes that payment under its own terms.

The web app may let you make a companion public, share a chat, follow other people, or comment on and react to content.

Anything you choose to publish or share can be seen by other users and is no longer private. Other users may report content. Please do not publish or share content you want to keep private, or content you do not have the right to share.

We use an email provider (Resend) to send account, support, and product emails. friendAI may also send you notifications about activity; you can control notifications in your settings and in your device or browser.

On the web, we use privacy-conscious, aggregate analytics (such as Vercel Analytics) to understand performance and general usage. We do not use advertising SDKs to track your conversations, we do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Running models on your device — on the iPhone app, or in Local mode in your browser — may download model files from a third-party host such as Hugging Face, which may receive standard connection metadata such as your IP address, request headers, and timestamps.

On iPhone, friendAI may request permissions such as Photos, Camera, or Microphone only for the related features, and you can deny or revoke them in iOS Settings. If you enable app lock, iOS handles the Face ID or device-authentication check and friendAI does not receive or store your biometric data. Apple-provided features such as Image Playground are processed under Apple's terms rather than by friendAI servers.

We use a small set of service providers to run friendAI. Each processes data only as needed to provide its service and under its own terms.

• Supabase — accounts, database, and storage for the web app.
• OpenRouter and the AI model providers it routes to, and Google — cloud AI inference.
• A text-to-speech provider — cloud voice replies.
• Stripe — payment processing.
• Resend — transactional and support email.
• Hugging Face — hosting of on-device model files.
• Vercel — hosting and privacy-conscious analytics.
• Apple — the App Store and on-device features on iPhone.

Depending on where you live and subject to applicable law, you may have the right to request access to, correction of, deletion of, or a copy of personal information we hold about you, or to object to or restrict certain processing.

If you have a web account, you can delete your account, which removes associated cloud content from our active systems, subject to the retention described below. California residents may have rights under California privacy law, and users in the EEA or UK may have rights under applicable data protection law, including the right to contact their local supervisory authority.

To exercise applicable rights, email support@friendai.pro or use the contact method listed on the app's store page.

For data stored only on your device or in your browser (the iPhone app and web Local mode), you can usually delete it in the app, by clearing local or browser storage, or by uninstalling the app, subject to any backups you created.

For cloud account data, we retain it while your account is active. When you delete content or your account, we remove it from our active systems within a reasonable period, except where we need to keep limited records for security, fraud prevention, financial or tax recordkeeping (for example, payment records), or other legal compliance. Backups may persist for a limited time before being overwritten.

We use reasonable technical and organizational measures to protect personal information, but no method of transmission or storage is completely secure.

Our service providers may process data in countries other than yours, including the United States. By using the cloud features, you understand that your information may be transferred internationally, with safeguards applied where required by law.

friendAI is not intended for children under 13, and we do not knowingly collect personal information from children through the apps or through direct support channels.

If we update this Privacy Policy, we will post the revised version on this page and change the effective date above.

If you have privacy questions, email support@friendai.pro or use the contact method listed on the app's store page.