Privacy Policy

Privacy Policy Effective date: August 19, 2026. Section 3a (News emails), added on October 8, 2026, takes effect on October 22, 2026. The X advertising pixel on our website (Section 5) was added on October 8, 2026. Age confirmations and age checks (Sections 1a, 5, 8 and 9) were updated on October 10, 2026. The camera in Amavie Games (Section 1i) was added on October 11, 2026. This Privacy Policy explains how ANIMA AI 007 SERVICES - FZCO, a free zone company registered in Dubai, United Arab Emirates (IFZA, Dubai Silicon Oasis) (the "Company", "we", "us") — the operator and data controller of the Amavie service at amavie.ai and our mobile applications (the "Service") — collects, uses, and shares information about you. This Policy covers the Amavie website at amavie.ai and all of our applications — Amavie AI Characters, Sport AI, Joker AI, and Trendme. They share a single Amavie account and a single balance of in-app credits, so your account, purchase, and support records are common to all of them, while the activity data described below is collected only by the product you actually use. Sport AI additionally publishes an app-specific privacy notice and AI disclosure at sport.amavie.ai/legal, Joker AI publishes its own privacy policy, terms and community rules at joker.amavie.ai/legal, and Trendme publishes its own terms of use and privacy policy at trendme.amavie.ai/legal; this Policy governs the account and applies across the family. Amavie Games — the games at games.amavie.ai and in the Amavie Games apps — also follows this Policy; it has no accounts yet and keeps your game progress on your device. If you do not agree with this Policy, please do not use the Service. 1. Information we collect a) Account information. Email address, display name, the age confirmations you give ("I'm 18 or older", which opens romance and sexual content with adult characters, and — where the law of your country sets an age for talking to AI characters — "I'm 14 or older" or the age it sets), the outcome of an age check if you take one (whether it showed you are 18 or older, the provider, the date and the country — never the selfie or document used), and authentication identifiers (e.g., your Google or Apple sign-in ID). If you register with a password, it is stored only as a salted cryptographic hash — we never see or store it in plain text. b) Content you create. Characters and their settings, chats and roleplay conversations, stories, posts, comments, and media you upload or generate. Photos and videos you upload are stored without the location and device details that cameras write into the file (such as GPS coordinates or the device serial number). Private conversations are stored so the Service works (e.g., characters keep context and memory) and are not visible to other users; limited access by our staff is possible only for the purposes in Section 3 (e.g., safety review, abuse investigation, legal compliance). c) Usage and device data. Pages and features used, device and browser type, operating system, IP address, approximate location (country level), language, timestamps, and diagnostic/error data. Used for security, abuse prevention, and product analytics. d) Payment data. Payments are processed by payment providers (e.g., Stripe, Apple, Google). We receive transaction status and limited billing metadata; we do not store your full card number. e) Cookies and similar technologies. Required cookies (session, security, preferences) are always active. Analytics and ad-measurement cookies on the website (Google Analytics, Microsoft Clarity and the X pixel described in Section 5) are used in the EEA, the UK and Switzerland only with your consent; elsewhere they are on by default. Anywhere, you can give or withdraw your choice at any time with the "Cookie settings" link at the bottom of the website, and the X pixel stays off when your browser sends a Global Privacy Control signal. The session cookie is set for the amavie.ai domain and is read by Amavie products on its subdomains (for example, sport.amavie.ai) — this is what signs you in automatically across the family on the same device. f) Communications. If you contact support, we keep the correspondence to resolve your issue. g) Fitness and game activity. If you use Sport AI: your training goals and schedule, the workouts you record (exercises, sets, weight, repetitions, duration, distance, and perceived effort), personal records and streaks, and the sharing preferences you choose when you train with a partner; conversations with the AI coaches are Amavie conversations processed as described in Section 2, and meal photos you choose to submit for recognition are processed by our AI providers and not retained. If you use Joker AI: game sessions, results, and scores, your messages in game chats and direct messages, your friends list, and your inventory of virtual items. We do not connect to Apple Health, Google Fit, or any similar health platform, and we do not ask you for medical information; anything you enter about your training is what you type yourself. Training cautions you can switch on in Sport AI (for example, a sensitive lower back) are stored only on your device and are never sent to our servers. h) Selfies and the works made from them. If you use Trendme: the selfie you add so that an AI model can put you into a trend, and the videos and photos made from it. The selfie is stored without the location and camera details of the file, in private storage that has no public web address; it is sent to our AI providers only to make the works you ask for, through a link that stops working within hours. We do not create a face template or any other biometric identifier from it, we do not use it to recognise you, and we do not use it to train AI models. The Trendme Privacy Policy describes this in full. i) Your face on the camera, in Amavie Games. Staring Contest in Rasputin: Unkillable! can be played with your front camera if you turn it on; before the first time, the game shows what the camera watches, and you can play with a finger instead and change your choice at any time. The camera picture is read on your device, frame by frame, by a face-tracking model that runs inside the app or the browser. From each frame the game takes only how much your eyes, brows, cheeks and mouth move — to notice a blink, a smile and the five faces of the game — and four points of your face (your eyes, nose and chin) to draw the game's spirals and beard over your reflection. The frames and these readings stay on your device: they are not stored, not sent to us or to anyone else, not used to recognise you, and not used to train AI models; we do not create a face template or any other biometric identifier. The last frame stays on your screen while the game shows its result and is gone when you leave the game; a picture with your face leaves your device only if you share the result yourself. We do not knowingly collect data from children (see Section 9), and we do not intentionally collect special categories of data. Note that free-form conversations may contain information you choose to reveal — share thoughtfully. 1a. Messages you send us on public and support channels What we collect. When you message us on our official channels (website feedback/support, Discord, X, Telegram) or are @-mentioned interacting with us, we process: the content of your message, your public username/handle and channel author ID, the channel and a link to the message, the time it was received, and our internal handling record (how the message was categorized, its priority, and whether it was answered automatically or routed to a human). Why we process it. To understand and respond to your message; to operate and improve our support and community engagement; to keep our channels safe (detecting abuse, spam, and safety/crisis situations); and to maintain an audit trail for quality, accountability, and legal-defense purposes. Legal basis (GDPR, for EU/EEA users). Our legitimate interests in operating and securing our support and community channels and in responding to you (Art. 6(1)(f)); and/or performance of, or steps toward, a contract where your message relates to your use of the service (Art. 6(1)(b)). Where you voluntarily include sensitive information, we process it only as necessary to respond and, where applicable, on the basis of your decision to share it or your consent. Automated processing and human oversight. Your message is first classified by an automated system. Routine questions may receive an automated reply; sensitive, consequential, or unclear matters are routed to a human. We do not subject you to decisions producing legal or similarly significant effects based solely on automated processing; you may request human intervention (GDPR Art. 22). Retention. We retain inbound messages and their handling records for a limited period: handled messages are deleted after 30 days, and the store is capped at 2,000 messages (oldest handled messages are removed first). We do not retain this data longer than necessary for the purposes above. No model training. We do not use your channel/support messages to train AI models. Your rights and contact. Depending on where you live, you have rights to access, correct, delete, object to, or restrict processing of your personal data, and to data portability. To exercise these rights, or to ask us not to process your public messages, email [email protected]. See Section 7 for the full description of your rights and how to lodge a complaint with a supervisory authority. 2. AI processing of your content Amavie generates content using artificial-intelligence models operated by third-party providers: Google Cloud (Vertex AI / Gemini), DeepInfra and OpenRouter (open-weight models such as DeepSeek, which write chat and roleplay replies) and Anthropic (Claude) for text; OpenAI, DeepInfra, fal.ai and Google Cloud for images; fal.ai, Google Cloud and Hedra for video and video messages; Cartesia, Inworld and OpenAI for voice synthesis, voice design and speech recognition. To generate a response, relevant parts of your prompts, conversations, and character context are transmitted to these providers, which process them as our processors, under contracts and API terms that limit their use of the data to providing the service. Under those terms Google Cloud, Anthropic, OpenAI and DeepInfra do not use this content to train their models, DeepInfra does not keep it after the response, and OpenRouter sends our requests only to providers that do not store or train on them. Hedra, which animates characters' video messages from the character's image and voice, may use de-identified data to improve its models. We do not sell your conversations, and we do not use the content of your private chats for advertising. We may use aggregated or de-identified data (which cannot reasonably identify you) to improve the Service, and we use automated safety classifiers on content — including private content — to detect prohibited material (e.g., content involving minors; see our Child Safety Standards). 3. How we use information - Provide and operate the Service, including AI generation (Section 2), personalization, and content recommendations. - Keep the Service safe: detect and prevent fraud, abuse, spam, and violations of our policies; automated content moderation with human review of flagged material. - Communicate with you about your account, transactions, and material updates. - Send you occasional news about Amavie (Section 3a). - Analyze usage to improve the product (analytics with consent where required). - Comply with legal obligations and enforce our Terms. 3a. News emails We may email you occasional news about Amavie — new features, worlds and stories — at most twice a month. Where the law allows us to write to our users without asking first (for example, in the United States), we do so based on our legitimate interest in telling you about the Service; everywhere else, including the EU/EEA, the UK, Switzerland, Russia, Canada, Australia, Japan and South Korea, we send news emails only if you agree to them. Every news email has a one-click unsubscribe link, and you can turn news emails off at any time in Settings. Unsubscribing does not affect the emails we send about your account, payments and security. 4. Legal bases (EEA/UK users) Where GDPR/UK GDPR applies, we process personal data on these bases: contract (operating the Service you signed up for, including AI processing of your content); legitimate interests (security, abuse prevention, product improvement); consent (analytics and ad-measurement cookies, including the X pixel, and news emails; withdrawable at any time); legal obligation. Users in other jurisdictions (including under the UAE Personal Data Protection Law) have equivalent protections as described in this Policy. 5. How we share information We do not sell personal data. The only data we share for advertising is the X pixel on our website, described below; some US state laws call this "sharing" for cross-context behavioral advertising, and you can opt out of it at any time as described there. We share information only with: - Processors that help us run the Service, bound by data-processing agreements: Google Cloud Platform (hosting and AI — Vertex AI/Gemini), DeepInfra (AI text and images), OpenRouter (backup routing of AI text), Anthropic (AI text), OpenAI (AI images and speech recognition), fal.ai (AI images, video and music), Hedra (character video messages), Cartesia (voice synthesis and speech recognition), Inworld (voice design), Cloudflare (networking, security, delivery), Didit (age checks — only where the law of your country requires one and you choose to take it; it processes the selfie or identity document to make the decision and returns only the outcome to us), Stripe (payments), Twilio SendGrid (transactional email), Sentry (error monitoring), Google Analytics (analytics) and Microsoft Clarity (session recordings and heatmaps of the website) — in the EEA, the UK and Switzerland both run only after you accept cookies. - X (Twitter), to measure our ads. On the website, the X pixel tells X when a visitor who came from one of our ads on X opens the site or creates an account, so that we can see which ads work; X may also use it to show our ads on X to people who visited amavie.ai. X receives technical data — such as your IP address, browser and device type, the page address, and X's own cookie and click identifiers — and never your email, messages, characters or other content. X processes it as an independent controller under its own privacy policy (x.com/en/privacy). In the EEA, the UK and Switzerland the pixel runs only after you accept cookies. Everywhere, it stays off if you choose "Reject" in the "Cookie settings" link at the bottom of the website, or if your browser sends a Global Privacy Control signal, which we honor automatically as an opt-out of this sharing. It runs only on the website, never inside our mobile apps. - Authorities, where required by law, or to protect the rights, safety, or property of users, the public, or the Company (including mandatory child-safety reporting). - Inside the Amavie family, nothing is "shared" with a third party: every Amavie product is operated by the same company under this Policy. What the products use in common is your account identity (the account identifier, handle or display name, avatar, and email) together with the account, purchase, and support records; the activity data of each product stays with that product as described in Section 1. - A successor entity, in a merger, acquisition, or asset sale — with notice to you. 6. Retention We keep your data while your account is active. When you delete your account, the content listed in Section 6a is erased at once, and the account itself stays closed in every Amavie app for a 30-day window in which you can keep it: sign in at amavie.ai/liquidation and choose "Keep My Account". Signing in alone does not keep it. When that window ends, we erase the rest of your personal data described in Section 1 automatically — you do not need to send us anything. You can also ask us to delete your data sooner, or to delete only part of it: send a deletion request to [email protected] and we act on it within 30 days. Other exceptions: backups, which expire on the schedule in Section 6b; records we must keep by law (e.g., transaction records), and safety/moderation records (e.g., CSAE reports and enforcement evidence), which we retain as required or permitted by law. Content you shared publicly may persist in other users' contexts (e.g., replies quoting your post) after your account is deleted. 6a. How to delete your data These steps cover every Amavie app published by ANIMA AI 007 SERVICES - FZCO — Amavie AI Characters, Sport AI, Joker AI, and Trendme — and the website at amavie.ai. They share one account, so the only choice is how much you want removed. Delete your account and everything in it. If you want to keep a copy, download your data first (Section 7). In the app, open your profile settings and choose "Delete Account"; on the web, open https://amavie.ai/liquidation. Sign in, then confirm by typing DELETE. Deletion starts at once and is not fully reversible: your chats and messages together with the photos, voice and video inside them, the recommendation data derived from your activity, your Sport AI workouts, routines and schedules on our servers, your Joker AI ratings, achievements, friends, gifts and direct messages (games you played with other people stay, without your name), and your Trendme selfies and works with their files are erased immediately and cannot be restored, even if you keep the account. The account itself — your profile and handle — then stays closed in every Amavie app, and within 30 days you can keep it: sign in at https://amavie.ai/liquidation again and choose "Keep My Account". When those 30 days pass, the account can no longer be restored and we erase the remaining data described in Section 1 — your profile and sign-in identifiers, your roleplay episodes, stories, posts, comments and uploaded media, and your purchase and balance records — automatically, without any further step from you, subject to the exceptions below. If you want it done sooner, email [email protected] from the address linked to your account and we erase it without waiting for the 30 days — at the latest within 30 days of your request. Delete part of your data and keep your account. In Amavie you can delete individual characters, chats, episodes, stories, posts, comments and media from each item's own menu at any time. In Sport AI, open Profile, then "Your data", then "Delete all data": that erases your workouts, sets, routines, break schedules, reminder history and settings from the device and, when you are signed in, the synced copy on our servers as well. The same screen exports everything to a single file first if you want to keep a copy, and your Amavie account is not touched. In Trendme, "Remove my face" deletes your selfie at once and each work can be deleted on its own; Account, then "Leave Trendme" erases all of your Trendme data — selfies, works and their files — and keeps your Amavie account. Ask us to do it for you. Email [email protected] from the address linked to your account and tell us what you want deleted. We respond within 30 days. What we keep afterwards. Transaction records we are required to retain by applicable tax and accounting law (without your content); safety and moderation records, including child-safety reports and enforcement evidence, for as long as the law requires or permits; and backups, until they expire on the schedule in Section 6b. Content you shared publicly may remain visible in other users' contexts (for example, a reply that quotes your post). Characters you created stay in the Service under the Company's ownership after your account is gone — other people are already talking to them — and their link to you is removed. The files themselves — photos, videos and voice you uploaded or generated in your own space — are deleted from our storage together with your account, not only the records that pointed to them. Aggregated or de-identified statistics that cannot reasonably identify you are not affected. 6b. Backups We keep backups so that the Service can be restored after a failure, a mistake, or the loss of a data center. They are encrypted, stored in Google Cloud in Singapore with a disaster-recovery copy in Japan, accessible only to the people and systems that run our infrastructure, and used for nothing else. Every backup expires on a fixed schedule: - daily backups of our databases are kept for 30 days; - weekly, monthly, and quarterly archive copies of our databases are kept for up to 12 months; - earlier versions of files — photos, videos, and voice — are kept for up to 40 days after a file is deleted or replaced. What you delete leaves the Service at once, as described in Section 6a; its copies in backups disappear by the end of these periods. Trendme selfies are the exception: they are kept in storage that has no earlier versions and is not copied into backups, so a selfie you remove is gone at once. 7. Your rights Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent at any time (without affecting prior processing). You will not be discriminated against for exercising these rights. Download your data. You can download a copy of your data yourself, at any time and free of charge, at https://amavie.ai/account/data — on amavie.ai and in the Amavie AI Characters app it is also in Settings, under Security, as "Download My Data", and Sport AI, Joker AI and Trendme link to it from their settings. You receive a ZIP archive in a machine-readable format (JSON) with what your Amavie account keeps about you in every Amavie app: your profile and settings, your chats, your purchases, subscriptions and credit history, your characters, worlds, posts and moments, your Sport AI workouts, your Joker AI games, friends and messages, your Trendme selfie and works, and your consents and sign-in history. Photos, videos and voice messages are listed with their addresses. Security secrets (such as access tokens) and reports other people made about you are not included. The download stays available while your account is scheduled for deletion or suspended. A new archive can be prepared once every 10 minutes. To exercise your other rights, email [email protected] from the address linked to your account — we respond within 30 days. You may also lodge a complaint with your local data-protection authority. 8. Automated decision-making We use automated classifiers for content moderation and abuse prevention. While writing a character's reply, our systems also read the turn to apply the age rules (whether it turns to romance or explicit content you have not opened) and to notice when someone mentions suicide or self-harm, so that we can show where to find help; this reading is not stored as a separate record and is not used for advertising. Decisions that significantly affect you (such as account termination) are subject to human review — contact [email protected] to contest an enforcement decision. 9. Children An Amavie account requires you to be at least 13 years old (or the higher minimum age of digital consent in your country). Talking to AI characters in Amavie AI Characters is available from that age unless the law of your country sets a higher one; romance, flirting and sexual content with adult characters open only after an 18+ confirmation and, where the law requires it, an age check (see our Age Policy). Sport AI, Joker AI and Trendme are available from the account minimum age and are not directed at children. We do not knowingly collect data from children under 13 (or the applicable minimum age). If you believe a child is using the Service in violation of these rules, or that someone under 18 gave a false age to open content for adults, contact us at [email protected] (or [email protected] for safety concerns) and we will act on the account and delete the data where required. 10. International transfers We operate globally. Our servers are in Singapore, and the disaster-recovery copies of our backups are in Japan; your data may also be processed in other countries where we and our processors operate (including the UAE, EU, and US). Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards. 11. Security We use industry-standard measures: encryption in transit (TLS) and at rest, access controls, network isolation, and audit logging. No system is 100% secure; we cannot guarantee absolute security, but we notify affected users and regulators of breaches where the law requires. 12. Changes to this Policy We may update this Policy. Material changes are announced by email or in-app notice before they take effect; the effective date above always reflects the current version. 13. Contact Data controller: ANIMA AI 007 SERVICES - FZCO (operator of Amavie) DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates Privacy contact: [email protected]