Privacy Policy

1. Information we collect

We collect only what we need to run the Service:

• Account details: email address, username, and display name.
• Age & consent records: a timestamp confirming you are 18+, and records of consent to our Terms and this Policy (including the IP address and browser/device (user agent) at the time), kept as a legal compliance record.
• Conversations: the messages you send and the AI responses, the personas you chat with, and "memory" facts derived from your chats to personalise future conversations.
• Payments: when you buy a plan or credits, our payment provider (Razorpay) processes your payment. We receive transaction records (amount, status, identifiers) but do NOT store your full card or bank details.
• Support & feedback: anything you send us via contact or feedback forms.

• Usage & cost data: which features you use, message and token counts, model used, latency, and our provider cost per request (for billing and analytics).
• Technical data: device, browser, approximate region, and log data needed for security and reliability.

2. How we use your information

• To provide the Service: create your account, run chats, remember context, and apply your plan and credits;
• To process payments and prevent fraud;
• To enforce age and tier restrictions and keep the platform safe;
• To understand usage, debug, and improve the Service and personas;
• To communicate with you about your account, security, and important changes;
• To comply with legal obligations and respond to lawful requests.

3. Our basis for processing (DPDP)

We process your personal data based on the consent you provide when you sign up and use the Service, and where applicable for the performance of our contract with you (providing the Service), to comply with law, and for legitimate uses permitted under the DPDP Act. You may withdraw consent at any time (see "Your rights").

4. AI processing & third parties

To generate responses, the content of your conversations is sent to third-party AI model providers (for example, our LLM provider via OpenRouter) which process it on our behalf to return a reply. We share only what is needed to operate the feature.

We rely on a small set of trusted sub-processors:

• Hosting & database: Supabase (stores your account, conversations, and related data).
• AI model inference: OpenRouter and the underlying model providers (process conversation content to generate replies).
• Payments: Razorpay (processes transactions; subject to its own privacy policy).

These providers are bound to use your data only to provide their service to us. Some may process data outside India; where they do, we take steps required by law to protect it.

5. When we share information

We do not sell your personal data. We share it only: with the sub-processors above to run the Service; to comply with law, legal process, or lawful government requests; to protect the rights, safety, and property of our users or us; or in connection with a merger, acquisition, or asset sale (with notice where required).

Anonymised display to other members: images you generate with a persona may be shown in community galleries within the Service, visible to other signed-in members, as examples of user creations. These are displayed without your name, username, email, or any account identifier, and without your messages or conversation. You can ask us to remove any such image by emailing epoch.feedback@gmail.com.

6. Data retention

We keep your data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (e.g. transaction and consent logs) to meet legal, tax, or safety obligations.

7. Security

We use technical and organisational measures (including access controls, encryption in transit, and row-level database security) to protect your data. Sensitive operations are enforced server-side. No system is perfectly secure, however, and we cannot guarantee absolute security.

8. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and request a summary of it;
• Correct or update inaccurate or incomplete data;
• Request erasure of your data and delete your account;
• Withdraw consent for processing (this may limit your ability to use the Service);
• Nominate another individual to exercise your rights in case of death or incapacity, as provided under the DPDP Act;
• Raise a grievance with our Grievance Officer and, if unsatisfied, with the Data Protection Board of India.

To exercise any right, email epoch.feedback@gmail.com. You can also clear individual chat histories and review what a persona "remembers" within the app.

9. No use by minors

The Service is for adults aged 18+ only. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete the account and associated data. If you believe a minor is using the Service, contact epoch.feedback@gmail.com.

10. Cookies & local storage

We use cookies and similar storage that are necessary to keep you signed in, remember preferences, and operate the Service securely. You can control cookies through your browser, but disabling essential cookies may break core features.

11. Changes to this Policy

We may update this Policy from time to time. We will post the new version with an updated date and, for material changes, notify you through the Service or by email.

12. Contact & Grievance Officer

Privacy questions: epoch.feedback@gmail.com.

Grievance Officer: Soul Patcher Support, Soul Patcher. Email: epoch.feedback@gmail.com.