Privacy Policy

Who is responsible for your data

The controller of your personal data is [ENTITY NAME] (trading as AmorLink / AL Media), [REGISTERED ADDRESS]. You can reach us about anything in this policy at [PRIVACY CONTACT EMAIL], or through the contact form.

We are established outside the European Union and the United Kingdom. Our representative in the EU under Article 27 GDPR is [EU REPRESENTATIVE — NAME AND ADDRESS]. Our UK representative is [UK REPRESENTATIVE — NAME AND ADDRESS]. You may contact either of them instead of us on any data-protection matter.

Payments appear on your statement as “AL Media” rather than AmorLink.

What we collect

Account details you provide (your email address, and a display name if you set one), the content of your conversations and the media you generate, your preferences and settings, your spark balance and purchase history, and basic usage and device data needed to run and secure the service.

We derive an approximate country from your IP address at sign-up to set a sensible default language. We do not collect a date of birth: age is confirmed by your own 18+ declaration, and we record that the declaration was made.

When you register, we check that your email domain can receive mail by looking up its DNS records. That is a lookup of the domain only, not of you.

Why we use it, and our legal basis

To provide the service — your companions, your conversation history and memory, the media you generate. Legal basis: performance of our contract with you.

To take payment and keep records of it. Legal basis: performance of a contract, and compliance with a legal obligation for tax and accounting records.

To keep the service safe — enforcing the 18+ rule and our prohibited-content rules, screening prompts for illegal content, and recording safety events. Legal basis: compliance with a legal obligation, and our legitimate interest in preventing abuse of the platform. This screening is automated.

To improve the product through aggregated analytics. Legal basis: your consent, given through the cookie banner, which you can withdraw at any time.

To send you account and security email such as verification and password resets. Legal basis: performance of our contract with you.

We do not sell your personal data, and we do not use your conversations to train AI models.

Automated decision-making

Prompts you submit for image and video generation are screened automatically, and a prompt assessed as depicting a minor is refused. This is an automated decision that blocks a single request; it does not close your account on its own, and you can contact us to have a refusal reviewed by a person.

Who we share it with

We share the minimum necessary data with processors who run parts of the service for us. Each acts on our instructions and may not use your data for their own purposes.

AI model providers, which receive the text of your messages and your generation prompts in order to produce a reply or an image: Groq, OpenRouter and DeepInfra for text; RunPod for images; Atlas Cloud and A2E for video; Chatterbox for voice.

Infrastructure and operations: Neon (database hosting), DigitalOcean Spaces (storage of generated media), Cloudflare (network), Mailgun (transactional email), PostHog (product analytics, only with your consent).

Payments: NOWPayments for cryptocurrency, and Telegram for Stars purchases. Telegram is also an optional sign-in method, as are Google and Apple; when you use one, that provider confirms your identity to us.

We may disclose data where we are legally required to, or where it is necessary to investigate abuse or protect someone from harm.

Where your data goes

Some of these providers are located outside the European Economic Area, including in the United States — our database, several AI providers, our email provider and our analytics provider. Transfers are made under the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism where one applies.

In plain terms: the text of your conversations is processed by AI providers in the United States, and media you generate is stored with a hosting provider in the European Union.

How long we keep it

Your account, conversations and generated media are kept for as long as your account exists. When you delete your account they are deleted with it, immediately and by cascade.

Records of payments are kept for as long as tax and accounting law requires, typically several years, because we are obliged to keep them.

Safety and moderation records — for example a refused prompt — are kept after account deletion, with the account identifier removed so they can no longer be linked to you. They exist to detect repeat abuse, and keeping them is the point of keeping them at all.

Server logs are kept briefly for security and debugging.

Your rights

You can view and change your information in Settings, and delete your account there at any time — deletion is immediate and removes your conversations, companions, generated media and login details.

If you are in the EEA or the UK, you also have the right to access a copy of your data, to correct it, to have it erased, to restrict or object to how we use it, to withdraw consent where we rely on it, and to receive your data in a portable format. To exercise any of these, contact us and we will respond within one month.

If you are in California, you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

If you believe we have handled your data improperly, you may complain to your local data protection authority. In the EU that is the supervisory authority where you live or work; in the UK it is the Information Commissioner's Office. We would rather you told us first, through our contact page, so we can put it right.

Cookies and similar technology

We use a small number of cookies and browser-storage entries, described in full in our Cookie Policy. Analytics runs without cookies unless you accept them, and you can change your choice at any time in Settings.

Security

Passwords are stored hashed, never in readable form. Traffic is encrypted in transit. Access to production data is limited to a named list of administrator accounts. No system is perfectly secure, and we will tell you and the relevant authority if a breach affects your data and the law requires it.

Age

AmorLink is a strictly 18+ service and is not directed to anyone under 18. We do not knowingly collect data from anyone under 18, and we delete such data if we discover it. If you believe a minor has used the service, tell us immediately through the contact form.

Changes

If we change this policy in a way that materially affects you, we will tell you in the app or by email before it takes effect. This version was last updated on [DATE].