AllAmigo

Privacy Policy

Last updated: April 22, 2026
Effective date: April 22, 2026

This Privacy Policy explains how the AllAmigo team ("AllAmigo," "we," "us," or "our") collects, uses, stores, shares, and protects your personal data when you use the AllAmigo website, apps, and related services (the "Service").

We take your privacy seriously. AllAmigo is an AI companion service — which means the content of your conversations can be deeply personal. This policy explains what we do with that information, what we don't do, and the choices you have.

If you do not agree with this policy, please do not use the Service.

1. Who We Are and How to Reach Us

AllAmigo is an AI companion service operated by the AllAmigo team, based in India.

Privacy questions, requests, or concerns: [email protected]

All privacy-related queries, grievances, and data rights requests should be directed to this email. We aim to acknowledge requests within 24–72 hours.

2. A Plain-English Summary

Before the legal details, here's the short version:

  • We collect information you give us (account info, messages to the AI, payment details) and information we collect automatically (device, usage, diagnostics).
  • Your chats with the AI are stored so the AI can remember context across conversations.
  • We use your data to run the Service, keep it safe, and — with safeguards — improve it.
  • We do not sell your personal data.
  • We do not read your private chats for fun. Human access is limited and only happens for specific reasons like abuse investigations, safety, or legal requirements.
  • You can delete your data. You can export it. You can ask us questions.
  • We aim to collect the minimum we need.

The rest of this document covers the details.

3. Who Can Use AllAmigo

AllAmigo is strictly for users 18 years of age and older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it and terminate the account. If you believe a minor has created an account, please contact [email protected].

4. Information We Collect

4.1 Information you give us directly

  • Account information: name or chosen username, email address, password (stored as a hash), date of birth or age confirmation, gender (if provided), country.
  • Profile and preferences: the name and gender you pick for your AI companion, any preferences you set for tone or style.
  • Conversation content: the messages you send to the AI and the AI's responses. This may include personal information you voluntarily share in chat — names, feelings, experiences, opinions. Please avoid sharing highly sensitive information (government IDs, financial account numbers, passwords, detailed medical records) in chat; the AI does not need it.
  • Payment information: if you purchase a subscription, our payment processor collects your card or UPI details. We do not store full card numbers; we receive a token and limited metadata (last 4 digits, card type, billing status).
  • Support and correspondence: information you provide when you email us, submit a report, or fill out a form.
  • Optional surveys and feedback: any responses you provide.

4.2 Information collected automatically

  • Device and technical info: device type, operating system, browser, app version, IP address, approximate location derived from IP (city/region level), language settings.
  • Usage data: pages or screens viewed, features used, buttons tapped, session timestamps and durations, message counts, referral source.
  • Diagnostics: crash logs, performance metrics, error reports.
  • Cookies and similar technologies: see Section 10.

4.3 Information from third parties

  • Authentication providers: if you sign in via Google, Apple, or similar, we receive basic profile information (name, email, profile photo) per your consent on that provider.
  • Payment and fraud checks: our payment processor and fraud-prevention partners may share transaction status and risk signals.
  • Analytics and attribution: if applicable, aggregated data about how users find and use the Service.

4.4 What we do NOT collect

  • We do not collect biometric data.
  • We do not collect precise GPS location.
  • We do not collect data from your device's microphone, camera, contacts, photos, or files unless you explicitly grant permission for a specific feature.
  • We do not collect special categories of sensitive personal data (e.g., religion, caste, political views, health, sexuality) except to the extent you choose to share them in conversation. We treat such information with extra care and do not use it for profiling or advertising.

5. How We Use Your Information

We use the information above for the following purposes, each tied to a lawful basis under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and, where applicable, other laws:

Purpose Examples Lawful basis
Providing the Service Letting you sign in, serving AI responses, maintaining conversation history, remembering the name and gender you set Performance of contract / your consent
Account management Security, authentication, password resets, account recovery Performance of contract
Payments Processing subscriptions, sending receipts, handling refunds Performance of contract / legal obligation
Safety and abuse prevention Detecting and acting on abuse, fraud, spam, policy violations, threats, self-harm indicators Legitimate interests / legal obligation
Service improvement Debugging, performance analysis, measuring feature usage Legitimate interests
Model improvement (with safeguards — see Section 6) Improving the AI's quality, reducing errors, training safer responses Your consent where required
Communications Support replies, service announcements, important updates Performance of contract / legitimate interests
Marketing (only if you opt in) Newsletters, product updates Your consent (opt-in)
Legal compliance Responding to lawful requests, enforcing Terms, defending claims Legal obligation

We will not use your data for purposes materially different from these without telling you and, where required, getting your consent.

6. Your Conversations and AI Training

This is the part most users care about, so we're going to be direct.

Storage. Your conversations are stored on our systems so the AI can reference recent history and provide continuity. We retain conversation history for as long as your account is active, subject to the retention rules in Section 11.

Who can read them.

  • The AI model reads your recent messages (up to a rolling window) at the moment it generates a reply. This is automated.
  • Human access is strictly limited. Members of our team may review specific conversations only when necessary for: investigating abuse or safety concerns, responding to your support request, complying with a valid legal request, or conducting narrowly scoped, access-logged quality reviews.
  • We do not allow general browsing of user chats by staff. Access is role-based, logged, and auditable.

Model training.

  • We may use de-identified and aggregated conversation data to improve our AI models, safety classifiers, and product features.
  • Where we use your identifiable conversation data specifically to train or fine-tune models, we will seek your consent, and you will be able to opt out without losing access to the core Service.
  • We do not sell conversation content to third parties.
  • We do not use conversation content to serve you targeted advertising.

You can clear your data. You can delete individual conversations, clear all chat history, or delete your entire account at any time (see Section 9).

7. How We Share Your Information

We share information only in the following circumstances:

  • Service providers ("Data Processors"). We work with vetted vendors who help us run the Service — cloud hosting, AI model providers, payment processors, analytics, email, customer support tools. They can only use your data to perform services for us and are contractually required to protect it.
  • AI model providers. To generate responses, your messages are sent to our AI model infrastructure, which may be operated by us or by third-party model providers under data-protection contracts. These providers do not use your data to train their models on your behalf unless we have told you and obtained your consent where required.
  • Legal and safety. We may disclose information when we reasonably believe it's necessary to: comply with law, legal process, or a lawful government request; enforce our Terms; protect the rights, property, or safety of AllAmigo, our users, or the public; detect or prevent fraud or security issues.
  • Business transfers. If AllAmigo is involved in a merger, acquisition, financing, or sale of assets, your data may be transferred as part of that transaction. We will notify you and require the recipient to honour this Privacy Policy or give you meaningful choices.
  • With your consent. Any other sharing happens only with your explicit consent.

We do not sell your personal data. We do not rent it. We do not share it with data brokers.

8. International Data Transfers

Our servers and service providers may be located in India or in other countries. If your data is transferred outside India, we ensure that the transfer complies with applicable law — including, where required, any restrictions notified by the Central Government under the DPDP Act, 2023 — and that appropriate safeguards are in place (contractual protections, reputable providers, security controls).

9. Your Rights and Choices

Under the DPDP Act, 2023 (for Indian users) and similar laws where applicable, you have rights over your data. Subject to verification of your identity and legal limitations, you can:

  • Access the personal data we hold about you and get a summary of how we use it.
  • Correct, complete, or update your data if it's inaccurate.
  • Erase your data (see Section 11 for retention limits).
  • Withdraw consent for processing we do on the basis of your consent. Withdrawal does not affect the lawfulness of processing done before.
  • Raise a grievance — contact us at [email protected] with your concern.
  • Nominate an individual to exercise your rights on your behalf in the event of death or incapacity.
  • Opt out of marketing communications at any time via the unsubscribe link or by contacting us.
  • Export your data in a portable format.

How to exercise your rights. Email [email protected] from the address linked to your account, or use in-app controls where available. We aim to respond within the timelines required by law (typically within 30 days, extendable in complex cases).

If you are not satisfied, you may file a complaint with the Data Protection Board of India or, for users outside India, your local data-protection authority.

10. Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Keep you logged in.
  • Remember your preferences.
  • Understand how the Service is used (analytics).
  • Detect abuse and fraud.

You can control cookies through your browser settings. Blocking some cookies may affect how the Service works. Where required, we present a cookie banner to get your consent for non-essential cookies.

11. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes described, or as required by law.

  • Account data: kept while your account is active. Deleted or anonymised within 30–90 days after you close your account, except where we must keep it longer for legal, tax, or safety reasons.
  • Conversation history: retained while your account is active. You can delete individual chats or all chats at any time. On account deletion, chats are deleted or anonymised within 30–90 days, subject to legal retention requirements.
  • Payment records: retained as long as required by tax and accounting laws (typically 7–8 years in India).
  • Abuse / safety logs: retained for as long as needed to investigate, prevent recurrence, or respond to legal process.
  • Backups: deleted data may persist in backup systems for a limited period before being overwritten on schedule.

12. Security

We implement reasonable technical and organisational measures to protect your data, including:

  • Encryption of data in transit (TLS).
  • Encryption of data at rest for sensitive fields.
  • Access controls and least-privilege permissions for staff.
  • Logging and monitoring of administrative access.
  • Regular security reviews of our infrastructure and dependencies.

No method of transmission or storage is 100% secure. If we become aware of a personal data breach that is likely to result in harm, we will notify you and the Data Protection Board of India as required by law.

Your part in security. Use a strong, unique password. Don't share your login. Notify us immediately if you suspect unauthorised access at [email protected].

13. Children's Privacy

AllAmigo is not intended for users under 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us data, please contact [email protected] and we will delete it.

14. Mental Health and Safety Signals

If, during a conversation, the AI or our safety systems detect signals of serious distress — including mentions of self-harm, suicide, or risk to others — our systems may surface safety resources (e.g., iCall, Vandrevala Foundation helplines) in the conversation. In rare cases, and only where consistent with law, we may review the specific conversation to ensure appropriate response.

This is not medical care. We do not monitor conversations in real time for the purpose of intervention, and we cannot guarantee detection or response. If you are in crisis, please contact emergency services (112 in India) or a crisis helpline directly.

15. Automated Decision-Making and Profiling

The AI's responses are generated by automated systems. We do not use your personal data to make automated decisions that have legal or similarly significant effects on you (such as credit, employment, or insurance decisions). Where we use automated systems to detect abuse, flagged cases are reviewed by humans before significant enforcement actions are taken.

16. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. Their privacy practices are their own. We encourage you to read their policies before interacting with them.

17. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you through the Service or by email and update the "Last updated" date. Your continued use of the Service after the effective date means you accept the updated policy.

18. How to Contact Us

For any privacy question, request, or concern, reach us at:

We aim to acknowledge requests within 24–72 hours and respond fully within the timelines required by applicable law.

Thank you for trusting AllAmigo with your time and attention. We take that trust seriously.