Privacy Policy
GiddyChat ("GiddyChat", "we", "us") is operated by Aphelion Meridian LLC, a Wyoming limited liability company located at 30 N Gould St Ste R, Sheridan, WY 82801, USA. This policy explains what we collect when you use the GiddyChat mobile app and website (the "Service"), why, who we share it with, and the choices you have.
GiddyChat is for adults. You must be at least 18 years old to use the Service, and we do not knowingly collect information from anyone under 18.
1. Information we collect
Information you give us
- Account details: your email address, a display name you choose, and your sign-in method (email code, Sign in with Apple, or Google). If you use Sign in with Apple's "Hide My Email", we only receive the relay address.
- Profile preferences: the name and pronouns you want characters to use for you, and content preferences you set.
- Conversations: the messages you send to characters, the replies generated for you, and the memories a character keeps about your story (for example, that you said you work in a flower shop).
- Reports and support messages: anything you send us when you report content or contact support.
Information collected automatically
- Device and usage data: device model, operating system version, app version, language, time zone, approximate country derived from IP address, crash logs, and events such as which stories you open and how long you chat. We use this to run the app and fix problems.
- Purchase data: when you subscribe, Apple or Google tells us that a purchase happened, its product ID, and a transaction identifier. We never receive your card number.
- Push token: if you turn on notifications, a device token so we can deliver them.
We do not collect precise location, contacts, photos, or microphone audio.
2. How we use information
- To provide the Service: generating character replies, keeping your conversation history and character memories, syncing across your devices.
- To process subscriptions and free-message allowances.
- To keep the Service safe: filtering content that violates our rules, reviewing reports, detecting abuse and fraud, and enforcing age requirements.
- To improve the Service: understanding which stories and features people use, fixing crashes, and testing changes. Where we use conversations to improve character writing, we work from aggregated or de-identified samples and never use them to train a public model.
- To communicate with you: transactional emails about your account, replies to support requests, and, if you opt in, news about launches. You can opt out of marketing emails at any time.
- To comply with law and protect our rights.
3. How AI replies are generated
When you send a message, we transmit your recent conversation, the character's description, and your profile preferences to third-party large-language-model providers to generate the character's reply. These providers process the data on our behalf under contracts that prohibit them from using it to train their models or for any purpose other than returning a reply to us. We may route requests to more than one provider for quality and availability. Every reply you see is machine-generated; no person reads your chats in real time.
4. Who we share information with
| Recipient | What and why |
|---|---|
| AI model providers | Conversation context, to generate replies (see section 3). |
| Cloud hosting and storage | All Service data, stored on servers in the United States. |
| Apple App Store / Google Play | Purchase and subscription processing. Their privacy policies apply to payments. |
| Analytics and crash reporting | Device and usage events, pseudonymous identifiers. We do not share conversation content with analytics vendors. |
| Email delivery | Your email address, to send sign-in codes and account emails. |
| Content moderation | Messages flagged by our filters may be reviewed by our team or a moderation vendor to decide whether rules were broken. |
| Legal and safety | If required by law, legal process, or to protect the safety of users or the public. |
| Business transfers | If we are acquired or merge, your data may transfer to the new owner under this policy. |
We do not sell your personal information, and we do not share it with third parties for their own advertising. We do not run third-party ad networks in the app.
5. How long we keep information
- Account and conversations: until you delete your account. Deleting a single conversation removes it from your view immediately and from our servers within 30 days.
- Account deletion: when you delete your account, we delete your profile, conversations, and character memories within 30 days, except for records we must keep (for example, purchase records for tax and fraud purposes, or content reports) which we keep for up to 7 years in a form that is no longer tied to your active account.
- Usage logs and crash reports: up to 13 months.
- Backups: encrypted backups roll off within 35 days of deletion.
6. Your choices and rights
- Access and export: you can view your conversations in the app at any time and request a copy of your data by emailing us.
- Correction: change your display name, email, and preferences in Settings.
- Deletion: Profile → Settings → Delete account, or email support@giddy.chat from your account address.
- Notifications and marketing: turn off push notifications in your device settings; unsubscribe from marketing emails via the link in each email.
- Memories: you can clear what a character remembers about you from the character's page.
Depending on where you live, you may have additional legal rights:
- California (CCPA/CPRA) and other US states: the rights to know, delete, correct, and to opt out of sale or sharing of personal information. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information to infer characteristics about you. We will not discriminate against you for exercising your rights.
- European Economic Area, United Kingdom, Switzerland: the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. Our legal bases are performance of our contract with you (providing the Service), our legitimate interests (safety, improvement, communications), your consent (marketing, optional features), and legal obligations. Data is processed in the United States under standard contractual clauses.
To exercise any right, email legal@giddy.chat. We may ask you to verify your identity from your account email. We respond within 30 days (45 days where the law allows).
7. Security
Data is encrypted in transit (TLS) and at rest. Access to production data is limited to staff who need it and is logged. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.
8. Children
The Service is not directed to anyone under 18. We ask for your age when you sign up and we remove accounts we learn belong to minors. If you believe a minor has an account, email legal@giddy.chat.
9. International users
We are based in the United States and process data there. By using the Service from elsewhere you understand your information will be transferred to and stored in the United States, where privacy laws may differ from your country's.
10. Changes
We'll post any changes here and update the date at the top. For material changes we'll also notify you in the app or by email before they take effect.
11. Contact
Aphelion Meridian LLC
30 N Gould St Ste R, Sheridan, WY 82801, USA
legal@giddy.chat · support@giddy.chat