Privacy Policy

1. Information we collect

• Account information, including your email address, name, profile image, login provider, authentication identifiers, preferences, and account settings.
• Profile and activity information, including character interests, likes, matches, chat activity, subscription status, gem balance, and settings associated with your account.
• Conversations and content, including messages, prompts, character choices, generated responses, feedback, and images or other material you choose to upload.
• Purchase information, including plan and product details, transaction and subscription identifiers, renewal information, and payment status. Payment platforms process complete payment-card details; we do not receive or store complete card numbers.
• Usage and device information, including pages and features used, interactions, referral information, app version, IP address, approximate location, browser and device information, timestamps, diagnostic data, cookies, and similar identifiers.
• Communications, including support requests, feedback, emails you send us, and records of service or account emails we send.

2. How we use information

We use personal information to:

• Create, authenticate, maintain, and secure accounts.
• Provide AI conversations, character discovery, matches, chat history, subscriptions, purchases, gems, and related features.
• Personalize characters, recommendations, and the user experience.
• Process transactions and maintain subscription entitlements.
• Measure performance, troubleshoot errors, and improve the Service.
• Detect abuse, moderate content, prevent fraud, and enforce our Terms.
• Send sign-in, security, purchase, support, product, and legal messages.
• Comply with law and protect users, Only, and others.

3. AI and content processing

Messages, prompts, conversation context, and optional uploads are transmitted to AI and infrastructure providers so the Service can generate responses and related content. Automated systems and, where necessary, authorized personnel may process content for support, quality, security, abuse prevention, and enforcement.

Avoid sharing passwords, complete payment-card numbers, government identifiers, medical records, or other highly sensitive information in conversations or uploads.

4. How we disclose information

We disclose information as reasonably necessary with:

• Authentication providers such as Google when you choose their sign-in method.
• Database, storage, hosting, and security providers, including Supabase and our deployment infrastructure.
• AI providers, including OpenRouter and the model providers used to fulfill requests.
• Analytics and product-improvement providers, including PostHog.
• Email-delivery providers, including Brevo.
• Payment and subscription providers, including Whop, Apple, Google Play, and RevenueCat.
• Professional advisers, authorities, or other parties when required by law or needed to protect rights and safety.
• A buyer, investor, or successor in connection with a merger, financing, reorganization, or sale of all or part of our business.

We do not sell personal information for money or disclose it for cross-context behavioral advertising.

5. Cookies and analytics

We and our providers use cookies, local storage, SDKs, and similar technologies to keep you signed in, remember settings, understand how the Service is used, measure performance, attribute activity, and prevent abuse. Browser or device settings may let you limit these technologies, but parts of Only may then work differently.

6. Retention and deletion

We retain information for as long as reasonably necessary to provide the Service, maintain your account, comply with legal and financial obligations, resolve disputes, prevent abuse, enforce agreements, and protect the Service. Retention periods vary by data type and purpose.

You may request account deletion through the Service where available or by contacting us. We may retain limited information after deletion where required by law, needed for security or fraud prevention, stored in routine backups, or otherwise permitted by law.

7. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encrypted network connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your information, or withdraw consent where processing is based on consent. You may also manage marketing preferences using an unsubscribe link in an email.

To exercise a privacy right, email team@onlyforme.ai. We may need to verify your identity before completing a request. You may appeal a denied request by replying to our decision.

9. Children

Only is for adults age 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information, contact us so we can investigate and take appropriate action.

10. International data transfers

We and our providers may process information in the United States and other countries where privacy laws may differ from those in your country. Where required, we use appropriate legal safeguards for international transfers.

11. Changes and contact

We may update this Policy as our practices or the Service change. We will post the revised Policy and update the date above. If changes are material, we will provide additional notice when required by law.

For privacy questions or requests, email team@onlyforme.ai.