Privacy PolicyPrivacy Policy

We collect information you provide directly to us when using our Digital Twin service, including:

- Account information (email, phone number, profile data)

- Conversation history and messages

- User facts and interests extracted from conversations

- Voice recordings (if you use voice features)

- Location data (coarse and fine location, used for peer matching)

- Usage data and analytics

All data is stored in Supabase PostgreSQL with pgvector for AI-powered search and memory features.

We use your information to:

- Provide, maintain, and improve our Digital Twin service

- Generate AI-powered responses and insights

- Create and maintain your digital twin profile

- Personalize your experience

- Process credit transactions and billing

- Communicate with you about your account

- Analyze usage patterns to improve our service

- Match you with nearby peers based on your location

We implement industry-standard security measures to protect your personal information:

- Encryption of data in transit (TLS 1.3)

- Encryption of data at rest (PostgreSQL TDE)

- Regular security audits and penetration testing

- Role-based access control (RBAC)

- Row Level Security (RLS) on all database tables

Your data is stored in Supabase's secure infrastructure with backups enabled.

Our service uses Generative AI (OpenAI GPT models and Google Gemini) and Retrieval-Augmented Generation (RAG):

- Your conversations are used to generate personalized responses

- Conversation summaries are embedded with pgvector for semantic search

- User facts and interests are stored with embeddings for personalized recall

- Hybrid search combines semantic and keyword matching

You can delete your data at any time through your account settings.

You have the right to:

- Access your personal data

- Correct inaccurate data

- Delete your account and all associated data

- Manage interest and fact retention preferences

Contact us at contact@funstuff.studio to exercise these rights.

We retain your personal data for as long as your account is active. You can delete your account at any time from Profile → Account in the mobile app. Deletion is scheduled for seven days later, and you can cancel it at any point during those seven days by opening the app and choosing to keep your account. Once the seven days pass, deletion runs and cannot be undone.

When the deletion runs, the following are permanently erased:

- Your profile, photos, bio, hobbies and interests

- Your facts, chapters and AI memory

- Your conversations with your twin, and their summaries and embeddings

- Your matches, chemistry reports and swipe history

- Your devices, push tokens and group memberships

The following are retained, as permitted under GDPR Article 17(3):

- Billing and subscription records, needed for tax and accounting obligations

- Messages you sent to other users, shown to them as "[deleted]" so their own conversation history stays intact

- If you chose to tell us why you were leaving, that reason and any note you wrote, kept as anonymous product feedback

- A one-way cryptographic fingerprint of your email address, explained below

When the deletion runs, your name, email, location and preferences are erased or overwritten, so nothing in the retained set identifies you. During the seven-day window your account is hidden from other people — you cannot be matched, messaged or found — but nothing is erased yet, which is what makes cancelling possible. Backup copies are cleared within 30 days.

About that fingerprint: your email address itself is erased. What we keep is a one-way cryptographic fingerprint of it — a keyed hash, computed with a secret only we hold. It cannot be turned back into your email address, it is never used to contact you, and it is not linked to your profile, your messages or anything else about you, all of which are erased as described above.

It exists for one purpose: so that deleting an account and signing up again does not repeatedly re-claim the free starting credits. We rely on our legitimate interest in preventing that abuse as the lawful basis for keeping it (GDPR Article 6(1)(f)). Unlike everything else here it is kept indefinitely, because deleting it would reopen exactly the loop it prevents. If you sign up again with the same address you are welcome back and nothing else about you is remembered — you simply do not receive the free starting credits a second time.

Our service relies on the following third-party providers:

- Supabase: Database hosting and authentication

- OpenAI: GPT and embedding models

- Google Gemini: Generative AI models

- Apple App Store: In-app purchases and subscriptions on iOS

- Google Play Billing: In-app purchases and subscriptions on Android

- Sentry: Crash and error reporting

We do not share your personal data with these providers beyond what is necessary for service operation.

We collect location data (coarse and fine) to enable peer matching features:

- Location is collected only when you use the "Find" feature

- Your location is used to match you with nearby users based on distance preferences

- Location data is stored securely and never shared with other users beyond approximate distance

- You can revoke location permissions at any time through your device settings

- The app functions without location access, but peer matching will be unavailable

We may update this privacy policy from time to time. We will notify you of any changes by:

- Posting the new policy on this page

- Updating the "Last Updated" date below

- Notifying you via email or in-app notification

Your continued use of the service after changes constitutes acceptance of the new policy.

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

- THE SERVICE IS PROVIDED "AS-IS" WITHOUT WARRANTIES OF ANY KIND

- WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES

- OUR TOTAL LIABILITY FOR ANY AND ALL CLAIMS SHALL NOT EXCEED THE AMOUNT YOU PAID FOR THE SERVICE IN THE TWELVE MONTHS PRECEDING THE CLAIM

- NO LIABILITY FOR DATA BREACHES BEYOND REASONABLE SECURITY MEASURES

- NO LIABILITY FOR THIRD-PARTY SERVICE INTERRUPTIONS (SUPABASE, OPENAI, GOOGLE, APPLE)

This includes but is not limited to: lost profits, lost data, business interruption, or any other intangible damages.

ALL AI-GENERATED CONTENT IS FOR INFORMATIONAL PURPOSES ONLY:

- We make no warranties about accuracy, completeness, or suitability of AI responses

- AI outputs may contain errors, outdated information, or invented content, and may state it confidently

- The service is not a source of medical, legal, financial, or psychological advice

- You are solely responsible for verifying any information obtained through the AI

- We are not liable for any decisions made based on AI-generated content

The Digital Twin is a companion tool, not a professional advisor. If you are in crisis or need medical help, contact a qualified professional or your local emergency service.

This privacy policy is governed by the laws of the jurisdiction in which our service is operated. Any disputes arising from this policy shall be resolved in the appropriate courts of that jurisdiction.

For support, privacy questions, or to exercise any of the rights in Section 5, email us at contact@funstuff.studio.

- Support and general questions: contact@funstuff.studio

- Privacy and data requests: contact@funstuff.studio

- Account deletion, if you cannot sign in: contact@funstuff.studio

We aim to respond to privacy and deletion requests within 7 days, and always within the one month required by GDPR Article 12(3). If you are unable to access the app, email us from the address on your account and we will process the request for you.