Tipsie — Privacy Policy
This Privacy Policy explains how Sweet Studio ("we", "us", "our") collects, uses, shares and protects personal data when you use Tipsie: AI Character Chat for iOS ("Tipsie", "the App"). We are the data controller for this processing.
Developer: Sweet Studio Address: Warsaw, Poland Privacy contact: choizzyio@gmail.com
Tipsie is a safe-for-work interactive fiction app for users aged 13 and over. You chat and roleplay with fictional characters that are powered by artificial intelligence. You are never talking to a real person.
1. SUMMARY
- We collect the messages, voice notes and photos you send in the App, the characters you create, the profile details you choose to give us, purchase records, and app usage and device data. - We send your messages and media to the AI providers listed in Section 5 so they can generate replies, images and voice. - We do not sell your personal data. We do not use your chats for advertising. - We do not use your chats to train our own AI models, and our AI providers process them under API terms that do not allow them to train their models on your data. - Chats are encrypted in transit. They are not end-to-end encrypted: our systems and our AI providers can process their content in order to provide the service and keep it safe. - You can delete a single story in the App (Start over) and ask us to delete your whole account and all its data at choizzyio@gmail.com.
2. DATA WE COLLECT
2.1 Data you give us - Chat content: the messages you write, the replies the App generates, and the story state (scene, relationship level, streaks). - Voice notes: audio you record while holding the microphone button. Audio is converted to text and stored as part of the chat. - Photos you attach: images you pick from your photo library to send in a chat or to use in the image generator. The App uses Apple's photo picker, so it only sees the photos you choose. - Characters you create: names, descriptions and generated character art. - Profile ("About me"): the name you want characters to use, how they should address you, your gender if you choose to give it, and any free text you add. - Generator prompts: text you write to create images or videos. - Reports and feedback: the reason you choose when you report a message or a character, and any feature request text you send. - Support messages: your email address and message if you write to us.
2.2 Data the App creates while you use it - Story memory: to keep characters consistent, the App automatically writes short notes and summaries from your chats, for example your name, preferences, events in the story, and facts you mention about yourself. If you mention your health, relationships, sexuality, beliefs or other sensitive topics, these notes may include that information. See Section 4. - Generated content: AI replies, images, videos and voice notes created for you.
2.3 Data collected automatically - Identifiers: a random account ID created on your device and stored in your iPhone's Keychain (it stays after you reinstall the App), your Apple ID user identifier if you use Sign in with Apple, a push notification token, and, only if you allow tracking, your device advertising identifier (IDFA). - Device and app data: device model, iOS version, language, app version, crash reports, IP address (received by our analytics and advertising measurement providers), and in-app events such as screens viewed, features used, session length, search terms typed in Explore, and purchases. - Purchase data: product, price, currency, transaction and subscription status, received from Apple through RevenueCat. We never receive your card details.
If you use Sign in with Apple, Apple may share your name and email with the App. We keep them only on your device to show which account you are signed in with. We do not send them to our servers.
We do not access your camera, contacts, location or health data. We do not use photos you send to identify you or anyone else.
3. HOW AND WHY WE USE YOUR DATA (LEGAL BASES)
| Purpose | Data | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Run the chat, generate replies, images, video and voice, keep story memory | Chat content, voice, photos, profile, story memory, characters | Contract (Art. 6(1)(b)); explicit consent for sensitive data you choose to share (Art. 9(2)(a)) |
| Send your content to third-party AI providers | Chat content, voice, photos, prompts | Contract (Art. 6(1)(b)) |
| Safety and moderation: detect illegal content, content involving minors, self-harm risk and abuse; handle reports | Chat content, photos, prompts, reports | Legitimate interests in keeping users and the public safe (Art. 6(1)(f)); legal obligations (Art. 6(1)(c)) |
| Purchases, credits (gems) and subscriptions | Purchase data, account ID | Contract; legal obligations (tax and accounting) |
| Push notifications and reminders | Push token, character name | Consent (iOS notification permission) |
| Product analytics, crash reporting, fixing bugs | Device and app data, account ID | Legitimate interests in running and improving the App |
| Measuring our own advertising campaigns | Device and app events, IDFA if allowed | Consent (App Tracking Transparency prompt); legitimate interests for non-identifying aggregate measurement |
| Customer support | Email, messages | Contract; legitimate interests |
| Comply with law and defend legal claims | Any relevant data | Legal obligations; legitimate interests |
We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. Automated moderation can block a message or an image; you can contact us if you think a block was a mistake.
4. SENSITIVE INFORMATION
Romance stories can touch on personal topics. You do not need to share real information about your health, sex life, sexual orientation, religion, political views or similar topics to use Tipsie, and we recommend that you do not. If you choose to share it, we process it only to continue your story, on the basis of your explicit consent, which you can withdraw at any time by deleting the story (Start over) or your account. We never use sensitive information for advertising, profiling for marketing, or analytics.
5. WHO RECEIVES YOUR DATA
We share personal data only with service providers that process it on our behalf under contracts that require them to protect it, and only as needed for the purposes in Section 3.
AI providers (receive chat content, voice, photos and prompts you send): - OpenAI (USA): AI chat replies, story memory and summaries, voice-to-text, image understanding (including an automatic check that uploaded photos do not show minors), content moderation, and prompt preparation for images. - OpenRouter (USA): routing of chat requests to AI models, when used. - fal.ai (Features & Labels, Inc., USA): image generation, including from reference photos you provide. - Pixverse (Singapore): video generation. - ElevenLabs (USA): character voices and voice notes.
Infrastructure: - Heroku / Salesforce (USA): application servers. - MongoDB Atlas (EU/USA): database for accounts, chats, characters and purchases. - Cloudinary (USA): storage and delivery of images, voice notes and audio.
Internal tools: - Telegram (Telegram Messenger Inc.): a private channel our team uses for content moderation and quality review, which receives copies of messages, replies, generated media and reports together with your account ID.
Analytics, crash reporting and app infrastructure: - Google Firebase (USA): Analytics, Crashlytics, Cloud Messaging (push) and Remote Config. - Amplitude (USA): product analytics.
Advertising measurement: - Meta Platforms (Facebook SDK) (USA/Ireland): app install, session and purchase events to measure our ad campaigns. Your IDFA is shared only if you allow tracking in the iOS prompt.
Purchases: - Apple: processes all payments and refunds. - RevenueCat (USA): manages subscriptions and credit purchases.
We may also disclose data if required by law, to respond to valid legal requests, to protect the rights and safety of users or others, or as part of a merger or sale of the business (in which case this Policy continues to apply).
AI providers process your content under their API terms. Under those terms they do not use it to train their models, and they may keep it for a limited period, typically up to 30 days, for abuse monitoring, after which it is deleted.
6. INTERNATIONAL TRANSFERS
Some providers are located outside the European Economic Area and the UK, mainly in the USA. Where this happens we rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses (and the UK Addendum), together with additional safeguards where needed. You can ask us for a copy of the relevant safeguards.
7. HOW LONG WE KEEP YOUR DATA
| Data | How long |
|---|---|
| Chats, story memory, voice notes, photos you sent, generated media, characters, profile | Until you delete the story or ask us to delete your account. We complete account deletion requests within 30 days. |
| Purchase and transaction records | As long as required by tax and accounting law (up to 6 years in Poland). |
| Reports and moderation records | Up to 12 months, or longer if needed for a legal claim or a report to authorities. |
| Analytics and crash data | Up to 14 months in Firebase and Amplitude, then deleted or aggregated. |
| Support emails | Up to 24 months after the conversation ends. |
8. YOUR CHOICES AND RIGHTS
In the App: - Delete one story: open the chat > menu > Start over. - Delete your account and all associated data: email choizzyio@gmail.com with the account ID shown in Me > Settings. Subscriptions are managed by Apple: cancel them in iOS Settings > [your name] > Subscriptions, because deleting your account does not cancel them. - Turn off tracking: iOS Settings > Privacy & Security > Tracking. - Turn off notifications: iOS Settings > Notifications > Tipsie.
Your rights under the GDPR and UK GDPR: access, correction, deletion, restriction, portability (a copy of your chats in a machine-readable format), objection to processing based on legitimate interests, and withdrawal of consent at any time. You can also complain to a data protection authority; our lead authority is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl. You may also contact the authority where you live.
To exercise any right, email choizzyio@gmail.com from any address and include the account ID shown in Me > Settings, so we can find your data. We reply within one month.
9. U.S. STATE PRIVACY RIGHTS (INCLUDING CALIFORNIA)
In the last 12 months we collected these categories of personal information: identifiers (account ID, device IDs, IP address); commercial information (purchases); internet or other electronic network activity (app usage); audio and visual information (voice notes, photos); inferences (story memory); sensitive personal information you choose to share in chats; and the content of your messages. Sources, purposes and recipients are described in Sections 2, 3 and 5.
- We do not sell personal information. - If you allow tracking in the iOS prompt, device identifiers and app events are shared with Meta and Google for advertising measurement, which some laws call "sharing" for cross-context behavioral advertising. To opt out, deny or turn off tracking in iOS Settings, or email us with "Do Not Share" in the subject. We honor Global Privacy Control signals where they apply. - We use sensitive personal information only to provide the service you request, as permitted by law; we do not use it to infer characteristics about you for any other purpose. - You have the right to know, access, correct and delete your personal information, to opt out of sharing, and not to be discriminated against for using these rights. You can use an authorized agent; we may verify your request with your account ID.
10. CHILDREN
Tipsie is for users aged 13 and over. Users between 13 and 17 may use it only with the consent of a parent or legal guardian, and where local law sets a higher age of digital consent (up to 16 in parts of the European Economic Area), parental consent is needed until that age. The App is safe for work: sexual content is blocked for everyone. We do not knowingly collect data from children under 13; if we learn that we have, we close the account and delete the data. Parents or guardians can contact choizzyio@gmail.com to review or delete a teen's data.
11. SECURITY
We use encryption in transit (HTTPS/TLS), access controls and provider-level security to protect your data. No system is completely secure; if a breach affects your data, we will notify you and the authorities as required by law. Chats are not end-to-end encrypted.
12. AI TRANSPARENCY
All characters in Tipsie are fictional and powered by AI. Replies, images, videos and voices are AI-generated and may be inaccurate or unexpected. AI-generated images and videos may carry technical markers that identify them as AI-generated.
13. CHANGES
If we change this Policy in a way that matters, we will tell you in the App before the change takes effect. The date at the top shows the latest version.
14. CONTACT
Sweet Studio, Warsaw, Poland Email: choizzyio@gmail.com