Privacy Policy
This policy explains what PLAI ("PLAI", "we", "us") collects when you use the PLAI mobile app and the website at pl-ai.app (together, the "Service"), why we collect it, who processes it on our behalf, how long we keep it, and the choices you have.
- PLAI does not require an account. You are identified by a random device identifier, not by name.
- Your chats and the characters you create are stored so they can continue across sessions. They are processed by AI providers to generate replies.
- We do not sell your personal data and we do not use it for third-party advertising profiles.
- You can export everything we hold about you, and permanently delete it, from Settings in the app at any time.
1. Who we are
The Service is operated by PLAI. You can contact us about privacy at [email protected].
2. What we collect
2.1 Information created automatically
- Device identifier. When you first open the app we generate a random identifier and store it on your device. It is not derived from your name, Apple ID, phone number or advertising identifier. It links your chats, characters and settings together.
- Technical data. IP address, approximate country derived from it, device type, operating system version, language and request timestamps. These are recorded in standard server logs and by our hosting and network providers.
- Push notification token. If you allow notifications, Apple issues a token that lets us send them. It is stored by us and by Firebase Cloud Messaging.
2.2 Information you provide
- Profile settings. A display name, gender, a short "about you" description, language and content-filter preferences. All are optional.
- Email address (optional). Only if you add one in Settings, to restore your history on a new device. We do not send marketing email.
- Characters and stories you create. Names, personalities, scenarios, avatars and any images you upload.
- Messages. Everything you and the AI characters write in chats, adventures, group scenes and theatre, plus summaries we generate so characters can remember earlier conversations.
- Community posts, comments and reports. If you post to the social feed or report content.
- Support messages. Anything you send through the in-app contact form.
2.3 Purchase information
Purchases are made through Apple. We receive a confirmation of the purchase and its status (for example active, expired, refunded) so we can unlock PLAI Pro. We never see your card number or Apple ID password.
2.4 What we do not collect
We do not collect your contacts, photos library, precise location, health data, or the Apple advertising identifier (IDFA). We do not use the App Tracking Transparency framework because we do not track you across other companies' apps or websites.
3. Why we use it
| Purpose | Data used | Legal basis (EEA/UK) |
|---|---|---|
| Running the Service: generating AI replies, remembering conversations, showing your characters and history | Messages, characters, settings, device identifier | Performance of a contract |
| Restoring your history on a new device | Email (optional), device identifier | Performance of a contract |
| Unlocking and verifying PLAI Pro | Purchase status | Performance of a contract |
| Content safety: applying content filters, acting on reports, preventing abuse and enforcing our Terms | Messages, posts, reports, device identifier, IP | Legitimate interests; legal obligation |
| Security, fraud and rate-limit protection | IP, technical data, device identifier | Legitimate interests |
| Showing ads to free users and limiting how often they appear | Message count, Pro status | Legitimate interests |
| Understanding how the website is used | Aggregated analytics (website only) | Consent where required |
| Improving the Service | Aggregated, de-identified usage statistics | Legitimate interests |
4. AI processing
To generate replies, the text of the current conversation (and a summary of earlier parts of it), the character definition and your profile settings are sent to third-party AI inference providers. These providers act as our processors: they are contractually prohibited from using your content to train their models or for any purpose other than returning a reply to us, and they do not retain it beyond what is needed to process the request. Image generation requests are handled the same way.
AI replies are generated automatically and can be inaccurate, inappropriate or fictional. Please do not share sensitive personal information (such as health, financial or identity details) with AI characters.
5. Who we share it with
We share personal data only with service providers that process it on our instructions, and only the minimum they need:
| Provider | Purpose | Data |
|---|---|---|
| Apple | App distribution, in-app purchases, push notifications | Purchase and notification data |
| RevenueCat | Purchase verification and subscription status | Device identifier, purchase status |
| AI inference providers | Generating text, image and voice replies (see Section 4) | Conversation text, character definitions, prompts |
| Hosting, storage and network security providers | Running the Service, storing uploaded and generated images, protecting against attacks | Images, IP address, technical data |
| Google Firebase Cloud Messaging | Push notification delivery | Push token |
| Google Analytics | Website usage statistics (pl-ai.app only, not in-app chats) | Aggregated analytics |
We may also disclose information if required by law, to protect the rights and safety of users or the public, or as part of a merger or acquisition (in which case this policy continues to apply to your data).
We do not sell personal data and we do not share it with data brokers.
6. Community content
Characters and adventures you choose to publish, and posts and comments on the social feed, are visible to other users under your display name. Do not include personal information in public content. Other users can report content that breaks our rules; reports are reviewed by us and may result in content removal or account restrictions.
7. How long we keep it
- Chats, characters and settings: until you delete them or delete your data. Conversations with characters you have not used for an extended period may be summarised and the full transcript removed.
- Memory summaries and caches: regenerated regularly; cleared when the underlying conversation is deleted.
- Server logs: up to 90 days.
- Purchase records: for as long as required for tax and accounting purposes.
- Support messages: up to 24 months.
- Inactive accounts: data belonging to device identifiers with no activity for an extended period is deleted automatically.
8. Your choices and rights
- Export your data. Settings → Privacy → Export shows and downloads everything linked to your device identifier.
- Delete your data. Settings → Privacy → Delete permanently removes your chats, characters, settings, email, memory summaries and cached data. This cannot be undone. Purchase records required by law are retained in anonymised form.
- Delete individual conversations or characters from within the app at any time.
- Content filter. Choose your content level in Settings. A family-friendly mode is available.
- Notifications. Turn off in iOS Settings at any time.
- Email. Remove it from Settings at any time.
If you are in the EEA, UK, Switzerland, Brazil, California or another region with data-protection law, you also have rights to access, correct, delete, restrict or object to processing, to data portability, and to complain to your local supervisory authority. Because we do not hold your name or contact details unless you give them, requests made through the in-app tools are the fastest way to exercise these rights. You can also email us; we may need to verify that you control the device identifier concerned.
We do not "sell" or "share" personal information as those terms are defined under California law, and we do not use it for cross-context behavioural advertising.
9. Children
PLAI is not directed at children. You must be at least 17 years old (or older where local law requires) to use the Service, and mature content settings are only available to adults. We do not knowingly collect data from anyone under 17. If you believe a child has used the Service, contact us and we will delete the associated data.
10. International transfers
Our servers and providers are located in the United States and the European Union. Where data moves out of the EEA or UK we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
11. Security
Data is encrypted in transit (TLS) and access to production systems is restricted to the people who operate the Service. No system is perfectly secure; if we become aware of a breach that affects you we will notify you in the app or by email where we have one, and the relevant authorities where required.
12. Changes
We will post any changes on this page and update the date at the top. Material changes will also be announced in the app.
13. Contact
Email: [email protected]
In-app: Settings → Contact us