Aimour AI App
Legal

Privacy Policy

This is what we collect, why, where it lives, and the controls you have at any time.

Home/Privacy Policy

Last updated: 01 May 2026

This Privacy Policy explains how Aimour AI App ("we", "our", "us") collects, uses, shares and protects your information when you use our website and services. By using Aimour AI App you agree to the practices described below.

  1. Scope. This policy applies to all visitors, registered users and subscribers of Aimour AI App across web and mobile.
  2. Information you provide. Account details (name, email, password hash), payment information (processed by our payment partners, not stored on our servers), profile preferences and any content you send to a companion.
  3. Information collected automatically. Device type, operating system, browser, IP address, language, time zone, app version, crash reports, and basic interaction analytics needed to keep the product running.
  4. Cookies and similar technologies. We use strictly necessary cookies for sign-in, security and CSRF protection, plus optional analytics cookies you can disable at any time in your settings.
  5. Conversation content. Messages exchanged with companions are stored to provide memory and continuity. They are encrypted at rest and never sold, traded or shared with third parties for advertising.
  6. Voice content. If you record voice messages, audio is processed to generate responses and may be temporarily cached for quality. Audio is deleted from short-term storage within 30 days unless saved to your account by you.
  7. Children. Aimour AI App is strictly an 18+ service. We do not knowingly collect data from minors. If we learn that a minor created an account, we delete it immediately.
  8. Lawful bases (EEA/UK). We process data on the basis of contract performance, legitimate interest, consent (where required) and legal obligation. You can request a copy of the lawful basis applied to each purpose.
  9. Purposes of processing. Providing and improving the service, account security, billing, fraud prevention, complying with the law, and product analytics in aggregated form.
  10. No sale of personal data. We do not sell or rent your personal data. We do not share your conversations with brokers, advertisers, or generative model providers outside the scope of your own companion.
  11. Third-party processors. We use vetted service providers for hosting, payments, email and analytics. They are bound by data processing agreements and may only handle data on our instructions.
  12. International transfers. Data may be processed in the EU, the UK, and the US. Where required, we rely on Standard Contractual Clauses and equivalent safeguards.
  13. Data retention. Conversation history is kept while your account is active. On deletion, content is removed from production systems within 30 days and from backups within 90 days.
  14. Security measures. Encryption in transit (TLS 1.2+) and at rest (AES-256), strict role-based access controls, principle of least privilege, regular penetration tests and an annual third-party audit.
  15. Right of access. You can request a full export of your personal data and conversations at any time from your account settings.
  16. Right of rectification. You may correct inaccurate data directly in your profile or by contacting our care team.
  17. Right of erasure. You can delete individual conversations, a companion relationship, or your entire account with a single action. This is irreversible.
  18. Right of portability. Exports are provided in a machine-readable JSON format.
  19. Right to object. You may object to processing based on legitimate interest, including analytics and personalisation.
  20. Right to restrict processing. You may ask us to pause certain processing while a request is investigated.
  21. Withdrawing consent. Where processing is based on consent, you can withdraw it at any time without affecting prior processing.
  22. California rights (CCPA/CPRA). California residents have rights to know, delete, correct and opt out of "sharing" personal information. We honor verified requests within statutory timeframes.
  23. Brazilian rights (LGPD). Brazilian users have rights equivalent to confirmation, access, correction, anonymisation, portability and elimination of personal data.
  24. Automated decision making. Companion behavior is generated by AI models, but no legally significant decisions about you (such as eligibility) are made by automated systems.
  25. Profiling. We do not build advertising profiles. We do apply lightweight on-device personalisation to surface companions you may enjoy.
  26. Communication preferences. You can opt out of product emails at any time. Transactional emails (billing receipts, security alerts) cannot be disabled.
  27. Payment data. Card information is processed and stored by certified PCI DSS Level 1 partners. We only see tokens.
  28. Logs. Server logs may include IP addresses and timestamps for security and abuse prevention. Logs are rotated and deleted within 90 days.
  29. Backups. Encrypted backups are retained for 90 days. After that, deleted content is unrecoverable.
  30. Data breach response. In the unlikely event of a breach affecting your data, we will notify you and applicable authorities within 72 hours of confirmed discovery.
  31. Surveys and feedback. Participation is voluntary. Responses are aggregated and anonymised before being used internally.
  32. Links to other sites. Our site may link to external pages. We are not responsible for the privacy practices of those websites.
  33. Children of users. If you allow another person access to your account, you remain responsible for ensuring they meet our 18+ requirement.
  34. Changes to this policy. Material changes will be announced by email and in-app at least 14 days before they take effect.
  35. How to exercise your rights. Write to us at . We respond within 30 days, typically much faster.
  36. Supervisory authority. If you believe we have mishandled your data, you have the right to lodge a complaint with your local data protection authority.
  37. Do Not Track. We honor "Do Not Track" browser signals where technically feasible and respect Global Privacy Control headers in supported regions.
  38. Contact. Questions, requests or concerns can be sent to at any time.