Privacy Policy

Effective date: May 10, 2025

1. Overview

DearMate (“we,” “us,” or “our”) respects your privacy. This Privacy Policy describes what personal data we collect, how we use it, and your rights regarding that data. It applies to all users of dearmate.mom and any associated applications.

2. Data We Collect

Account information

When you sign in with Google OAuth, we receive your name, email address, and profile picture URL from Google. We store your email and display name to identify your account.

Conversation data

Messages you send to AI characters are stored to provide conversation history and personalised memory features. Message content is processed by third-party AI providers (see Section 5).

Usage data

We may collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This data is used for security monitoring and service improvement.

Payment data

Payments are processed by Creem. We do not store your credit card number or full payment details. We receive a transaction record and subscription status from Creem.

3. How We Use Your Data

To authenticate you and manage your account.
To deliver the AI companion conversation experience.
To maintain conversation memory and personalisation.
To process payments and manage subscriptions.
To detect and prevent abuse, fraud, or policy violations.
To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your conversation data for advertising.

4. Legal Basis (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your data on the following legal bases:

Contract — processing necessary to provide the Service you have subscribed to.
Legitimate interests — security monitoring, fraud prevention, and service improvement.
Legal obligation — compliance with applicable laws.

5. Third-Party AI Providers

To generate AI responses, voice, and images, your messages are sent to the following third-party providers. Each provider has its own privacy policy:

DeepSeek — text generation (Privacy Policy)
MiniMax — voice synthesis and AI chat (Privacy Policy)
Jina AI / Seedream — image generation

We share only the minimum data necessary (your message text) with these providers. We do not share your name, email, or account identifiers with AI providers.

6. Data Retention

We retain your account data and conversation history for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Anonymised usage statistics may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure— request deletion of your personal data (“right to be forgotten”).
Portability — receive your data in a machine-readable format.
Objection — object to processing based on legitimate interests.
CCPA (California residents) — you have the right to know, delete, and opt out of the sale of your personal information. We do not sell personal information.

To exercise any of these rights, contact us at support@dearmate.mom. We will respond within 30 days.

8. Cookies

We use session cookies strictly necessary for authentication (to keep you logged in). We do not use tracking cookies or third-party advertising cookies. No cookie consent banner is required for strictly necessary cookies under the ePrivacy Directive.

9. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), hashed session tokens, and access controls on our database. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

10. International Transfers

Your data may be processed in countries outside your own, including the United States and China (where some AI providers operate). Where required, we rely on Standard Contractual Clauses or equivalent mechanisms to ensure adequate protection.

11. Children

The Service is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before taking effect. The updated policy will be available at dearmate.mom/privacy.

13. Contact

For privacy-related questions or to exercise your rights, contact our privacy team at support@dearmate.mom.