> ## Documentation Index > Fetch the complete documentation index at: https://safety.flamy.net/llms.txt > Use this file to discover all available pages before exploring further. # Privacy Policy > How Flamify collects, uses, and protects your personal data. # Privacy Policy **Last updated: July 2026** ## 1. Who we are Flamify is operated by **ALLIE LTD**, a company registered in Cyprus (registration number HE 460424). * **Email:** [support@flamify.ai](mailto:support@flamify.ai) In this policy, "Flamify", "we", "us", and "our" refer to ALLIE LTD. "You" and "your" refer to the person using the service. ## 2. What this policy covers This policy applies to all Flamify products and services, including the web application at flamy.net, mobile applications distributed through the Apple App Store and Google Play Store, and associated APIs and support channels (collectively, the "Service"). ## 3. Data we collect ### 3.1 Data you provide | Data | When | | ------------------------------------ | ----------------------------------------------------------------------------------------- | | **Email address** | Account registration | | **Username and profile information** | Account setup, profile editing | | **Age confirmation** | Registration (18+ verification) | | **Payment information** | Subscription or diamond purchase (processed by Stripe; we do not store full card numbers) | | **Chat messages and prompts** | Conversations with AI characters | | **Characters you create** | Character creation tool | | **Images you upload or generate** | Media features | | **Voice messages** | Voice chat features | | **Support requests** | When you contact us | ### 3.2 Data collected automatically | Data | Purpose | | --------------------------------------------------------------- | -------------------------------------------------------------- | | **IP address** | Security, fraud prevention, approximate country-level location | | **Device and browser information** | Compatibility, debugging | | **Usage data** (pages visited, features used, session duration) | Analytics, service improvement | | **Error logs and crash reports** | Debugging, stability | ### 3.3 Cookies and tracking We use essential cookies for authentication and session management, and analytics cookies (Google Analytics) to understand how the Service is used. See our [Cookie Policy](/legal/cookie-policy) for details and opt-out instructions. ## 4. How we use your data | Purpose | Legal basis (GDPR) | | -------------------------------------------------------------------------------- | ---------------------------------------------------- | | Providing and operating the Service (chat, media generation, account management) | Contract performance (Art. 6(1)(b)) | | Processing payments | Contract performance | | Running safety classifiers on chat messages and generated media | Legitimate interest — platform safety (Art. 6(1)(f)) | | Reviewing flagged content (by dedicated reviewers) | Legitimate interest — platform safety | | Analytics and service improvement | Legitimate interest — product improvement | | Responding to your support requests | Contract performance | | Sending service-related notifications (security, policy changes) | Contract performance | | Sending marketing communications | Consent (Art. 6(1)(a)) — you can opt out at any time | | Complying with legal obligations (tax records, law enforcement requests) | Legal obligation (Art. 6(1)(c)) | ## 5. What we do NOT do These commitments are also stated on our [Trust & Safety site](/policies/what-we-wont-do): * **We do not sell your personal data.** Not to advertisers, data brokers, or anyone else. * **We do not sell your chat content.** * **We do not use your chats to train AI models.** Operational processing (running conversations through safety classifiers and the generation model to deliver responses) is not training. Your conversations are not added to training datasets. * **We do not show other users your activity.** No one can see who chatted with a character or what was said. ## 6. Who we share data with We share data only with the following categories of recipients, under appropriate data processing agreements: | Recipient | What they process | Why | | ------------------------------------------- | --------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **AI model router** (OpenRouter) | Chat messages (to route to the appropriate AI model and generate responses) | Service delivery. OpenRouter acts as an intermediary that routes requests to AI model providers. We use API terms that prohibit model training on our users' data. | | **Payment processor** (Stripe) | Payment information | Transaction processing. We do not see or store your full card number. | | **Authentication provider** (Clerk) | Email, login credentials | Secure authentication | | **Cloud infrastructure** (hosting provider) | All data at rest and in transit (encrypted) | Service hosting | | **Media processing** (Cloudinary) | Images you upload or generate | Image delivery and storage | | **Analytics** (Google Analytics) | Anonymised usage data | Service improvement. See [Cookie Policy](/legal/cookie-policy) for opt-out. | We do not share data with advertising networks or data brokers. ### Law enforcement We respond to valid legal process (warrants, subpoenas, court orders) as described in [Contact](/contact). We do not provide bulk browsing of private chats outside valid legal process. ### Business transfers If ALLIE LTD is acquired or merged, your data may be transferred to the successor entity. We will notify you before your data becomes subject to a different privacy policy. ## 7. International data transfers ALLIE LTD is based in Cyprus (EU). Some of our service providers (OpenAI, Stripe, Cloudinary) process data in the United States. For these transfers, we rely on: * **Standard Contractual Clauses** (SCCs) approved by the European Commission. * **Data processing agreements** with each provider. ## 8. Data retention | Data | Retention period | | --------------------------------- | --------------------------------------------------------------------- | | **Account data** (email, profile) | For as long as your account is active | | **Chat history** | For as long as your account is active | | **Generated media** | For as long as your account is active | | **Payment records** | 7 years after the transaction (legal obligation under Cyprus tax law) | | **Safety classifier logs** | Up to 12 months | | **Analytics data** | 26 months (Google Analytics default) | | **Support requests** | 3 years | When you delete your account, we begin the deletion process within 30 days. Data required by law (e.g. payment records) is retained for the legally required period and then deleted. ## 9. Your rights Under the GDPR and applicable Cyprus law, you have the right to: * **Access** your personal data and receive a copy. * **Rectification** — correct inaccurate or incomplete data. * **Erasure** — request deletion of your data ("right to be forgotten"). * **Restriction** — ask us to limit how we process your data. * **Object** — object to processing based on legitimate interest. * **Data portability** — receive your data in a structured, machine-readable format. * **Withdraw consent** — where processing is based on consent (e.g. marketing), you can withdraw at any time. To exercise any right, email [privacy@flamify.ai](mailto:privacy@flamify.ai). We will respond within 30 days. We may ask you to verify your identity before processing your request. If you believe your rights have been violated, you have the right to lodge a complaint with the **Commissioner for Personal Data Protection of Cyprus** (dataprotection.gov.cy) or your local supervisory authority. ## 10. Account deletion You can delete your account by contacting [support@flamify.ai](mailto:support@flamify.ai). Upon deletion: * Your profile, chat history, created characters, and generated media are deleted within 30 days. * Payment records are retained for 7 years as required by law. * Content that was flagged by safety classifiers and is part of an active investigation may be retained until the investigation concludes. ## 11. Security We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. ## 12. Billing discretion Charges from Flamify appear on your bank or credit card statement under a discreet descriptor that does not reference adult content. ## 13. Children Flamify is strictly for adults aged 18 and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us immediately at [support@flamify.ai](mailto:support@flamify.ai) and we will delete the data and terminate the account. See [Age requirements](/policies/age-verification) for how we enforce this. ## 14. Changes to this policy We may update this policy from time to time. We will notify you of material changes by email and/or by posting a notice on the Service. The "Last updated" date at the top is authoritative. Continued use of the Service after changes constitutes acceptance. ## 15. Contact For any privacy-related questions: * **General:** [support@flamify.ai](mailto:support@flamify.ai) ALLIE LTD, Registration HE 460424, Cyprus.