Privacy Policy — Emora

1. Who We Are

Emora ("we", "us", "our") is an AI companion platform. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and other applicable privacy laws.

2. Data We Collect

Account data: email address, name, username, language preference
Telegram data: Telegram user ID, first/last name, username (if you connect via Telegram)
Chat messages: conversations between you and your AI avatar
Avatar profile: your avatar customization choices
Generated media: AI-generated images created during your use of the service
Usage data: engagement metrics (streaks, XP, message counts)
Payment data: transaction records (payment details are processed by third-party providers and are not stored by us)

3. How We Use Your Data

To provide and personalize the AI companion experience
To process your payments and manage subscriptions
To improve our AI models and service quality
To send you service notifications (not marketing without consent)
To comply with legal obligations

4. Legal Basis for Processing (GDPR Art. 6)

Consent: you provide explicit consent when creating your account
Contract: processing is necessary to provide the service you subscribed to
Legal obligation: compliance with applicable laws
Legitimate interest: improving our service and preventing fraud

5. Third-Party Services

We use the following third-party services that may process your data:

Stripe: payment processing (PCI DSS compliant)
Telegram: bot messaging platform (if you use Telegram integration)
AI providers: for generating avatar responses and images (data is processed per conversation, not stored by providers)

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Payment records may be retained longer where required by law.

7. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

Access: request a copy of your personal data
Rectification: correct inaccurate data
Erasure: delete your account and all associated data (Settings → Delete Account)
Restriction: restrict processing of your data
Portability: receive your data in a portable format
Objection: object to processing based on legitimate interest

To exercise any of these rights, contact us at [email protected] or use the account deletion feature in Settings.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), secure password hashing (bcrypt), and access controls.

9. Age Restriction

Emora is intended for users aged 18 and over. We do not knowingly collect data from persons under 18. If we learn that we have collected data from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

11. Contact

For privacy inquiries: [email protected]