1. Who we are
AI Bestie ("we", "us") is an AI companion service accessible at https://aibestie.com. You can reach us at hi@aibestie.com.
2. Data we collect
- Account: email, chosen display name, date of birth / age confirmation (18+ attestation timestamp), password hash (via our auth provider).
- Conversations: the messages you send and the AI's replies, per persona.
- Extracted memories: short factual notes about you the AI derives from conversations (e.g. "lives in Berlin"). You can view and delete these.
- Uploads: optional custom photos and voice samples for family personas; optional chat attachments (images/PDFs).
- Voice recordings: if you use Real Family Voice, the live consent recording and the resulting voice model (see 5a). Voice notes you record in chat are transcribed and stored with that conversation.
- Custom personas: the name, description, greeting, voice settings, and generated avatars you create.
- Billing: plan, status, renewal dates, and the payment provider's transaction/subscription IDs. We never see or store your card, UPI, or bank details — those are handled entirely by Razorpay and PayPal.
- Technical: IP address at request time, browser type, time zone, error logs. Your IP address is used at request time to detect your approximate country so we can show the right currency and regionally familiar persona sets; we do not build an advertising profile from it.
3. Where your data lives
Data lives in a managed Postgres database with row-level security scoped to your account. Uploaded photos, voice samples, and chat attachments live in private storage buckets — only signed URLs generated for your session can access them. Custom-persona avatars are stored the same way.
4. Subprocessors
- Lovable Cloud — application hosting, database, storage, and authentication.
- Lovable AI Gateway — routes conversation and avatar-generation requests to underlying AI models (currently Google Gemini family). Prompts and replies are processed to generate responses and are not used to train models.
- ElevenLabs — text-to-speech, speech-to-text, and optional voice cloning for family personas.
- Razorpay and PayPal — payment processing for Bestie+ subscriptions. They receive your payment details directly; we receive only the transaction status and identifiers.
- Resend — sending transactional email (sign-up confirmation, password reset, receipts, support replies).
- Google Analytics 4 and Microsoft Clarity — anonymous usage statistics and aggregate product analytics (see section 8).
5. How we use your data
We use your data to run the AI Bestie service: authenticate you, deliver replies, remember what you've shared, generate voice audio, and generate custom avatars. We do not sell your personal data. We do not use your private conversations to train third-party AI models.
5a. Real Family Voice (Beta)
If you use the optional "Real Family Voice" feature to give a family bestie the voice of your real family member, we record a short live consent statement (45–120 seconds) spoken by that person, including a randomly-issued verification word we generate at that moment. That consent recording is stored in a private bucket only you can access, and is kept as legal evidence of consent. From the same recording we create a voice model via our text-to-speech provider (ElevenLabs Instant Voice Cloning). The cloned voice is used only inside your private conversations in this app, is never shared or reused for other users, and can be deleted at any time — deletion removes the ElevenLabs voice, the consent audio, and the database record. There is no file-upload path; all real-voice samples are captured live in-app.
6. Retention
Account data is retained while your account is active. You can delete individual memories, chat history, custom personas, or your entire account at any time via hi@aibestie.com. On account deletion, personal data is removed within 30 days from live systems and within 90 days from backups.
7. Your rights (GDPR, CCPA, India DPDP-aware)
You can request access, correction, export, or deletion of your data by writing to hi@aibestie.com. We aim to respond within 30 days. You can also object to processing or withdraw consent at any time.
8. Cookies, local storage & analytics
We use functional browser localStorage to keep you signed in and to remember UI preferences. We do not run advertising cookies and we do not sell data to ad networks.
We use Google Analytics 4 and Microsoft Clarity to understand anonymous, aggregate usage — which pages people visit, where they get stuck, and whether features work. IP anonymisation is enabled in Google Analytics. We do not send your name, email, chat content, or memories to these tools.
We also keep our own first-party, anonymous visit statistics — the page visited, your country, your device type (mobile/tablet/desktop), the website that referred you, and a hashed identifier — purely to improve the product. Your IP address is used only to compute that hash and is never stored, we never record query strings or message content, and we do no cross-site tracking.
9. Age & consent
AI Bestie is intended for users aged 18+. Signup requires you to confirm your age, and romance personas are gated behind an explicit 18+ confirmation. Every persona discloses that it is AI if you ask. If you learn that a minor has created an account, contact us and we will remove it.
10. International transfers
Our subprocessors may process data outside your country of residence. We rely on standard contractual clauses and provider-level safeguards.
11. Changes
We'll post material changes here with an updated "Last updated" date.