Privacy Policy

Information we collect

Account information. Your email address and a securely hashed password, or — if you choose to sign in with Google or Apple — the identifier and email those providers share with us. We never receive your Google or Apple password.

Your conversations. The messages you send, the responses generated for you, and the memories and relationship context derived from them so the experience can remember you across sessions.

Payment information. If you subscribe, we store your subscription status and the transaction identifiers needed to manage it. Payments are processed by Stripe (on the web) or Apple (in-app purchases on iOS); we do not receive or store your full card number.

Usage and device data. Product-analytics events (for example, that a screen was viewed or a feature used), approximate device and browser information, and — if you enable notifications — a push notification token.

Security signals. Anti-abuse and bot-detection data used to protect the Service (for example, a Cloudflare Turnstile verification during sign-up).

How we use your information

We use this information to provide and personalize the Service, remember the context of your conversations, process and manage your subscription, keep the Service secure and free of abuse, understand how the product is used so we can improve it, and communicate with you about your account.

AI processing

To generate responses, the content of your conversations is sent to third-party AI model providers (currently Anthropic and OpenAI), who process it on our behalf to return a reply. We instruct our providers not to use your content to train their models. AI-generated content is fictional and produced by software.

Who we share it with

We do not sell your personal information. We share it only with service providers who process it on our behalf under contract: Supabase (authentication and database), Stripe and Apple (payments), Anthropic and OpenAI (AI responses), PostHog (product analytics), Cloudflare (bot protection), and Google Firebase (push notifications). We may also disclose information where required by law or to protect the safety and rights of our users.

Data retention

We keep your information for as long as your account is active. When you delete your account, we delete your account data — including your conversations and derived memories — except where we are required to retain certain records (for example, transaction records for tax and accounting).

Your choices and rights

You can delete your account and its data at any time from Settings → Delete Account inside the app. You can turn off notifications at any time. Depending on where you live, you may have rights to access, correct, export, or delete your personal information; to exercise them, contact us at support@dominahouse.com.

Age requirement

The Service is intended solely for adults 18 years or older. It is not directed to children, and we do not knowingly collect information from anyone under 18. If we learn that a user is under 18, we will terminate the account and delete the associated data.

Security

We protect your information with encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address issues if they arise.

International transfers

Our providers may process your information in countries other than the one you live in. Where required, we rely on appropriate safeguards for such transfers.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “last updated” date above and, where appropriate, notify you within the Service.

Contact

Questions about this policy or your information? Contact us at support@dominahouse.com.