Privacy Policy

Last updated: July 2026

1. Who we are

Flamify is operated by ALLIE LTD, a company registered in Cyprus (registration number HE 460424).

Email: support@flamify.ai

In this policy, “Flamify”, “we”, “us”, and “our” refer to ALLIE LTD. “You” and “your” refer to the person using the service.

2. What this policy covers

This policy applies to all Flamify products and services, including the web application at flamy.net, mobile applications distributed through the Apple App Store and Google Play Store, and associated APIs and support channels (collectively, the “Service”).

3. Data we collect

3.1 Data you provide

Data	When
Email address	Account registration
Username and profile information	Account setup, profile editing
Age confirmation	Registration (18+ verification)
Payment information	Subscription or diamond purchase (processed by Stripe; we do not store full card numbers)
Chat messages and prompts	Conversations with AI characters
Characters you create	Character creation tool
Images you upload or generate	Media features
Voice messages	Voice chat features
Support requests	When you contact us

3.2 Data collected automatically

Data	Purpose
IP address	Security, fraud prevention, approximate country-level location
Device and browser information	Compatibility, debugging
Usage data (pages visited, features used, session duration)	Analytics, service improvement
Error logs and crash reports	Debugging, stability

3.3 Cookies and tracking

We use essential cookies for authentication and session management, and analytics cookies (Google Analytics) to understand how the Service is used. See our Cookie Policy for details and opt-out instructions.

4. How we use your data

Purpose	Legal basis (GDPR)
Providing and operating the Service (chat, media generation, account management)	Contract performance (Art. 6(1)(b))
Processing payments	Contract performance
Running safety classifiers on chat messages and generated media	Legitimate interest — platform safety (Art. 6(1)(f))
Reviewing flagged content (by dedicated reviewers)	Legitimate interest — platform safety
Analytics and service improvement	Legitimate interest — product improvement
Responding to your support requests	Contract performance
Sending service-related notifications (security, policy changes)	Contract performance
Sending marketing communications	Consent (Art. 6(1)(a)) — you can opt out at any time
Complying with legal obligations (tax records, law enforcement requests)	Legal obligation (Art. 6(1)(c))

5. What we do NOT do

These commitments are also stated on our Trust & Safety site:

We do not sell your personal data. Not to advertisers, data brokers, or anyone else.
We do not sell your chat content.
We do not use your chats to train AI models. Operational processing (running conversations through safety classifiers and the generation model to deliver responses) is not training. Your conversations are not added to training datasets.
We do not show other users your activity. No one can see who chatted with a character or what was said.

We share data only with the following categories of recipients, under appropriate data processing agreements:

Recipient	What they process	Why
AI model router (OpenRouter)	Chat messages (to route to the appropriate AI model and generate responses)	Service delivery. OpenRouter acts as an intermediary that routes requests to AI model providers. We use API terms that prohibit model training on our users’ data.
Payment processor (Stripe)	Payment information	Transaction processing. We do not see or store your full card number.
Authentication provider (Clerk)	Email, login credentials	Secure authentication
Cloud infrastructure (hosting provider)	All data at rest and in transit (encrypted)	Service hosting
Media processing (Cloudinary)	Images you upload or generate	Image delivery and storage
Analytics (Google Analytics)	Anonymised usage data	Service improvement. See Cookie Policy for opt-out.

We do not share data with advertising networks or data brokers.

Law enforcement

We respond to valid legal process (warrants, subpoenas, court orders) as described in Contact. We do not provide bulk browsing of private chats outside valid legal process.

Business transfers

If ALLIE LTD is acquired or merged, your data may be transferred to the successor entity. We will notify you before your data becomes subject to a different privacy policy.

7. International data transfers

ALLIE LTD is based in Cyprus (EU). Some of our service providers (OpenAI, Stripe, Cloudinary) process data in the United States. For these transfers, we rely on:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Data processing agreements with each provider.

8. Data retention

Data	Retention period
Account data (email, profile)	For as long as your account is active
Chat history	For as long as your account is active
Generated media	For as long as your account is active
Payment records	7 years after the transaction (legal obligation under Cyprus tax law)
Safety classifier logs	Up to 12 months
Analytics data	26 months (Google Analytics default)
Support requests	3 years

When you delete your account, we begin the deletion process within 30 days. Data required by law (e.g. payment records) is retained for the legally required period and then deleted.

9. Your rights

Under the GDPR and applicable Cyprus law, you have the right to:

Access your personal data and receive a copy.
Rectification — correct inaccurate or incomplete data.
Erasure — request deletion of your data (“right to be forgotten”).
Restriction — ask us to limit how we process your data.
Object — object to processing based on legitimate interest.
Data portability — receive your data in a structured, machine-readable format.
Withdraw consent — where processing is based on consent (e.g. marketing), you can withdraw at any time.

To exercise any right, email privacy@flamify.ai. We will respond within 30 days. We may ask you to verify your identity before processing your request. If you believe your rights have been violated, you have the right to lodge a complaint with the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy) or your local supervisory authority.

10. Account deletion

You can delete your account by contacting support@flamify.ai. Upon deletion:

Your profile, chat history, created characters, and generated media are deleted within 30 days.
Payment records are retained for 7 years as required by law.
Content that was flagged by safety classifiers and is part of an active investigation may be retained until the investigation concludes.

11. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

12. Billing discretion

Charges from Flamify appear on your bank or credit card statement under a discreet descriptor that does not reference adult content.

13. Children

Flamify is strictly for adults aged 18 and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us immediately at support@flamify.ai and we will delete the data and terminate the account. See Age requirements for how we enforce this.

14. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email and/or by posting a notice on the Service. The “Last updated” date at the top is authoritative. Continued use of the Service after changes constitutes acceptance.

15. Contact

For any privacy-related questions:

General: support@flamify.ai

ALLIE LTD, Registration HE 460424, Cyprus.

​Privacy Policy

​1. Who we are

​2. What this policy covers

​3. Data we collect

​3.1 Data you provide

​3.2 Data collected automatically

​3.3 Cookies and tracking

​4. How we use your data

​5. What we do NOT do

​6. Who we share data with

​Law enforcement

​Business transfers

​7. International data transfers

​8. Data retention

​9. Your rights

​10. Account deletion

​11. Security

​12. Billing discretion

​13. Children

​14. Changes to this policy

​15. Contact