Privacy Policy

1. Scope and controller

This policy explains how Sapphielle - AI companion (“the app”, “we”, “us”) handles personal data. Questions can be sent to support@clippo.media.

2. Data we collect

We collect only data used to provide, secure, support, and improve the service.

• Account data: an anonymous account identifier and, if you use Sign in with Apple, the identifiers and contact details Apple makes available.
• Companion and conversation data: companion settings, optional pronoun and conversation preferences, private connection notes, text messages, roleplay scenarios and scene messages, voice notes, photos, generated replies, memories, diary entries, and moments.
• Device and usage data: language, timezone, app events, error and performance information, device/platform details, and push tokens when notifications are enabled.
• Purchase data: product, entitlement, transaction status, and expiry information supplied by Apple and RevenueCat. We do not receive your full payment-card number.
• Support data: your email address and the information you choose to send through support or feedback.

3. How we use data

• Provide chat, roleplay, voice, image, memory, diary, notification, authentication, and subscription features. Roleplay scenes are fictional and stored separately from everyday chat; they are not used to create your everyday memories or diary.
• Private connection notes are stored separately from chat. They are not sent to AI providers unless you choose to put their contents into a chat draft and send it.
• Maintain safety controls, prevent abuse, enforce limits, diagnose failures, and secure the service.
• Respond to support, privacy, and account requests.
• Understand feature usage and improve reliability using analytics that are designed not to include conversation content, media, companion names, or memories.

4. AI processing and service providers

AI features require relevant text, audio, or images to be sent to xAI Grok or Google Gemini to generate a response. Pruna generates companion portraits and chat photos. Google Gemini also checks relevant request text, generated replies, and uploaded or generated images for safety before delivery. When you tap Generate preview to create a custom appearance, your selected appearance, hairstyle, hair color and eye color are converted into a fictional-adult portrait description and sent to Google for a safety check and Pruna for image generation. These choices describe the fictional character, not your own ethnicity or physical characteristics. A selected portrait may be sent to Pruna as a reference for later companion photos. The app does not intentionally attach your email address to model requests.

We also use Supabase for authentication, database, storage, and server functions; PostHog for product analytics; RevenueCat and Apple for subscriptions; and Expo for push-notification delivery. Each provider processes data under its own terms and privacy commitments.

5. Storage and security

Data is transmitted over encrypted HTTPS connections. Conversation media is stored in private object storage and delivered through time-limited account-scoped links. Database access is restricted with account authorization and row-level security. AI processing means conversations are not end-to-end encrypted.

No service can guarantee absolute security. Do not share passwords, payment-card details, government identifiers, or information you would not want processed by the service and its providers.

6. Retention and deletion

Account data and conversation content are generally retained while your account is active. Custom appearance previews are stored privately, including unused previews. Changing appearance preserves your conversation and memories. You can delete individual messages in chat. Ending a roleplay scene keeps its history available to read. You can delete the entire account in Settings → Account → Delete Account; this removes the account, conversations, roleplay scenes and messages, memories, private connection notes, generated diary and moment data, stored conversation media, and custom appearance previews from active systems.

Purchase and transaction records may remain with Apple, RevenueCat, or us where required for accounting, fraud prevention, dispute handling, or law. Security logs and backups may persist for a limited period before rotation.

7. Your choices and rights

You can disable notifications in the app and device settings, revoke microphone or photo permissions in device settings, delete messages, and delete your account in-app. Depending on your location, you may also request access, correction, export, restriction, objection, or deletion through the privacy choices page.

8. Children

Sapphielle - AI companion is intended for adults aged 18 and older. We do not knowingly offer the service to children. Contact us if you believe a minor has provided personal data.

9. International processing

Service providers may process data in countries other than your own. Where required, transfers are handled using legally recognized safeguards provided by the relevant service provider.

10. Changes and contact

We may update this policy as the service changes. The current version and revision date will remain available here. Privacy questions can be sent to support@clippo.media.