Privacy Policy

1. Data we collect

• Account data: email address, hashed password (or sign-in via Google), display name, language, and age-confirmation status.
• Usage & content: your conversations, prompts, generated images/voice, characters you create, credits, and activity logs needed to run and secure the Service.
• Billing data: plan, transaction history, and limited payment metadata. We do not store full card numbers — card and crypto payments are handled by PCI-compliant third-party processors.
• Technical data: IP address, device and browser type, approximate region, and cookie identifiers (see our Cookies Policy).

2. How we use your data

• To provide the Service: authentication, chat memory, content generation, credits, and subscriptions.
• To keep the platform safe: fraud prevention, abuse and CSAM detection, age and content moderation, and enforcing our Terms.
• To process payments and prevent chargebacks and fraud.
• To improve features and reliability, and to provide support.
• To send service and, where you consent, marketing messages (you can opt out anytime).
• To comply with legal obligations and respond to lawful requests.

3. Legal bases (GDPR)

Where the GDPR applies, we process data on the bases of: performance of our contract with you; our legitimate interests (security, fraud prevention, product improvement); your consent (e.g., marketing, non-essential cookies); and compliance with legal obligations.

4. How we share data

We do not sell your personal data. We share it only with:

Your private conversations are never published or shared for advertising. We apply strict access controls so that only the account owner can read their own chat history.

• Payment processors to complete transactions and prevent fraud.
• Infrastructure & AI providers (hosting, databases, GPU/model inference) that process data on our behalf under contract.
• Safety & legal: law enforcement or NCMEC where required to report illegal content (e.g., suspected CSAM) or to comply with law.
• Analytics provider: Cloudflare Web Analytics for aggregate, cookieless usage metrics. No IP addresses or personal identifiers are stored.

5. International transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.

6. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for a limited period to meet legal, tax, security, and dispute-resolution obligations. You can delete your conversations and account at any time; some records (e.g., transaction and abuse-prevention logs) may be retained where the law requires.

7. Security

We use encryption in transit, hashed passwords, token-based authentication, access controls, and infrastructure hardening to protect your data. No system is perfectly secure, but we work continuously to safeguard your information and will notify you and authorities of material breaches as required by law.

8. Your rights

Depending on your location (including under the GDPR and CCPA), you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. To exercise these rights, contact privacy [at] amora [dot] live. We will respond within the timeframe required by applicable law. You may also lodge a complaint with your local data-protection authority.

9. Children

Amora is strictly for adults. We do not knowingly collect data from anyone under 18. If we learn that a minor has used the Service, we will terminate the account and delete the data.

10. Cookies

We use essential and, with your consent, functional and analytics cookies. See our Cookies Policy for details and choices.

11. Changes

We may update this Policy. Material changes will be posted here with a new "Last updated" date.

12. Contact

Privacy questions and data requests: privacy [at] amora [dot] live · General support: support [at] amora [dot] live