1. Who we are
AI Bestie ("we", "us") is an AI companion service accessible at https://aibestie.com. You can reach us at hi@aibestie.com.
2. Data we collect
- Account: email, chosen display name, password hash (via our auth provider), 18+ attestation timestamp.
- Conversations: the messages you send and the AI's replies, per persona.
- Extracted memories: short factual notes about you the AI derives from conversations (e.g. "lives in Berlin"). You can view and delete these.
- Uploads: optional custom photos and voice samples for family personas; optional chat attachments (images/PDFs).
- Custom personas: the name, description, greeting, voice settings, and generated avatars you create.
- Technical: IP address at request time, browser type, error logs. We do not use third-party ad trackers.
3. Where your data lives
Data lives in a managed Postgres database with row-level security scoped to your account. Uploaded photos, voice samples, and chat attachments live in private storage buckets — only signed URLs generated for your session can access them. Custom-persona avatars are stored the same way.
4. Subprocessors
- Lovable Cloud — application hosting, database, storage, and authentication.
- Lovable AI Gateway — routes conversation and avatar-generation requests to underlying AI models (currently Google Gemini family). Prompts and replies are processed to generate responses and are not used to train models.
- ElevenLabs — text-to-speech, speech-to-text, and optional voice cloning for family personas.
5. How we use your data
We use your data to run the AI Bestie service: authenticate you, deliver replies, remember what you've shared, generate voice audio, and generate custom avatars. We do not sell your personal data. We do not use your private conversations to train third-party AI models.
6. Retention
Account data is retained while your account is active. You can delete individual memories, chat history, custom personas, or your entire account at any time via hi@aibestie.com. On account deletion, personal data is removed within 30 days from live systems and within 90 days from backups.
7. Your rights (GDPR, CCPA, India DPDP-aware)
You can request access, correction, export, or deletion of your data by writing to hi@aibestie.com. We aim to respond within 30 days. You can also object to processing or withdraw consent at any time.
8. Cookies & local storage
We use functional browser localStorage to keep you signed in and to remember UI preferences. We do not run advertising cookies.
9. Age & consent
AI Bestie is intended for users aged 18+. Signup requires you to confirm your age. If you learn that a minor has created an account, contact us and we will remove it.
10. International transfers
Our subprocessors may process data outside your country of residence. We rely on standard contractual clauses and provider-level safeguards.
11. Changes
We'll post material changes here with an updated "Last updated" date.