Privacy Policy

We collect only what is needed to run the product:

• Account data: email address, display name, password hash, and session identifiers.
• Profile and preference data you choose to provide, including persona details, language, and memory settings.
• Conversation data: chat messages, session metadata, favorites, unlocked photos, and generated media tied to your account.
• Billing data: order references, payment status, plan entitlements, and webhook records processed through our payment provider.
• Safety and abuse signals: moderation flags, rate-limit counters, and security logs needed to protect the platform.

We use personal data to:

• Authenticate you and keep sessions secure.
• Deliver chat, memory, image unlocks, billing, and account features you request.
• Detect abuse, fraud, policy violations, and unsafe content.
• Improve reliability, support requests, and legal compliance.

We do not sell your personal data. Hosting and database operators process stored account data. Chat content and generation prompts may be sent to the configured AI and image-generation providers. Order references and checkout details are sent to our payment provider, and push subscriptions are sent to browser push services when you enable notifications.

We may disclose information when required by law, to protect users, or to respond to valid legal requests.

Account, chat, and billing records are kept while your account remains active and for a limited period afterward when needed for fraud prevention, accounting, or legal obligations.

When you delete your account, personal profile data, chats, favorites, memory, sessions, and owner-scoped generated media are removed from active systems. Backup copies are not edited in place and may remain until the applicable backup retention period expires. Some billing and security records may be retained in anonymized or minimized form where the law requires it.

Depending on where you live, you may have the right to:

• Access a copy of your account data.
• Correct inaccurate profile information in Settings.
• Delete your account and associated personal data from Settings.
• Withdraw optional consent features such as sensitive memory.
• Contact us about privacy requests at support@peachme.ai.

We use hashed passwords, hashed session tokens, account-based access controls, and infrastructure safeguards designed to protect account and chat data. Private generated media is delivered through authenticated, owner-scoped routes.

Chats and generated media are not end-to-end encrypted: the application and configured service providers must be able to process them to provide the service. HTTPS protects data in transit when you use the production site, while storage-at-rest protection depends on the configured database, filesystem, object-storage, and backup infrastructure. No online service can guarantee absolute security.

Privacy questions or data requests: support@peachme.ai.

If we make material changes to this policy, we will update the date above and publish the revised version on this page.