Privacy Policy

Last Updated: April 19, 2026

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address (for authentication and account recovery)
• Username or display name (optional)
• Age confirmation (required for age-gated features)
• Profile preferences and settings

1.2 Conversation Data

To provide personalized AI companion services with memory capabilities:

• Messages you send to your AI companion
• Memories and facts extracted from conversations
• Mood indicators and emotional context
• Roleplay scenarios and story continuations
• Preferences and personality settings for your AI companion

1.3 Usage Information

We automatically collect:

• Device information (type, operating system, app version)
• Usage patterns and feature interactions
• Session duration and frequency
• Error logs and performance data
• App usage analytics (screen views, feature interactions) — used for improving app experience

1.4 Payment Information

For premium subscriptions processed via Stripe:

• Stripe customer identifier (linked to your email)
• Subscription tier, status, and billing period
• Transaction identifiers for payment reconciliation
• We never receive, store, or process your full credit card number. All card data is handled exclusively by Stripe (PCI DSS Level 1 certified).

2. How We Use Your Information

2.1 Core Service Functionality

• Provide personalized AI companion interactions
• Maintain conversation context and memories
• Enable mood detection and dynamic responses
• Support immersive roleplay experiences, including after-dark mode (see Section 5)
• Process natural language and generate responses

2.2 Service Improvement

• Enhance AI response quality and relevance
• Improve memory and context understanding
• Fix bugs and optimize performance
• Develop new features based on aggregated usage patterns

2.3 Account Management

• Authenticate your access to the service
• Manage subscription and billing through Stripe
• Send important service updates and notifications
• Provide customer support

3. Stripe Payment Integration

Nyther uses Stripe for subscription management and payment processing. This means:

• Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor
• We never receive or store your full credit card number, CVV, or bank details
• Stripe manages recurring billing, renewals, and refunds
• You can manage your subscription from within the app (Settings → Manage Subscription) or via the Stripe billing portal

4. App Distribution

Nyther is distributed as a direct APK download from nyther.app/download. The app is not currently available on Google Play or any third-party app store. We collect no data during the download itself. The app includes a built-in update checker that contacts our servers to verify your installed version against the latest available release.

5. After-Dark Mode and AI-Generated Content

• After-dark mode requires explicit opt-in and age confirmation (18+)
• All after-dark conversations are generated in real-time by AI language models and are not pre-written or curated by humans
• After-dark conversation data is stored and processed identically to standard conversations — encrypted at rest, subject to the same retention and deletion policies
• You can disable after-dark mode at any time from Settings

6. Data Storage and Security

6.1 How We Protect Your Data

• Data encrypted in transit (TLS 1.2+) and at rest
• Hosted on Supabase (managed PostgreSQL) with Row-Level Security policies
• Access controls and authentication requirements
• Regular security audits and dependency updates
• Compliance with industry-standard security practices

6.2 Data Retention

• Active account data is retained while your account is active
• Deleted conversations are permanently removed within 30 days
• Account deletion requests are processed immediately (see Section 8)
• Some anonymized, aggregated usage data may be retained for analytics

7. AI and Machine Learning

Your conversations with Nyther involve AI processing:

• We use OpenRouter (routing to GPT-4o-mini, Gemini Flash, and DeepSeek) for response generation
• Conversations are processed to extract memories and context
• Mood detection algorithms analyze emotional tone
• Your data is not used to train external AI models. Third-party LLM providers receive only the conversation context necessary to generate a response and do not retain it for training.
• We use a self-hosted embedding model (BGE-small) for semantic memory search — your data never leaves our infrastructure for this purpose

8. Your Privacy Rights (GDPR / Global)

8.1 You Have the Right To:

• Access: Request a copy of your personal data
• Correct: Update or correct inaccurate information
• Delete: Request permanent deletion of your account and all associated data
• Export: Download your conversation history and memories
• Control: Manage privacy settings and data sharing preferences
• Opt-out: Disable specific features or data collection (e.g., after-dark mode, re-engagement messages)

8.2 Account Deletion (GDPR Article 17)

You can permanently delete your account and all associated data at any time:

• Go to Settings → Danger Zone → Delete Account
• A confirmation email is sent to your registered email address
• Click the link in the email to confirm deletion
• Upon confirmation, all of the following are permanently deleted: your profile, conversations, messages, memories, traits, analytics events, subscriptions, and any other data linked to your account
• Active Stripe subscriptions are automatically cancelled before deletion
• This action is irreversible

8.3 Memory Controls

Nyther provides granular control over your AI companion's memory:

• Delete individual memories or facts
• Clear all memories while keeping your account
• Free-tier memories are automatically pruned after 30 days of inactivity; premium memories are retained permanently

9. Data Sharing and Third Parties

9.1 We Do Not Sell Your Data

Nyther never sells, rents, or trades your personal information to third parties for marketing purposes.

9.2 Limited Sharing Scenarios

We may share data only in these specific circumstances:

• Service Providers: With trusted partners who help operate our service (Supabase for hosting, Stripe for payments, OpenRouter for AI)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In case of merger, acquisition, or asset sale
• With Consent: When you explicitly authorize sharing

9.3 Third-Party Services

Nyther integrates with:

• Supabase: For authentication, database hosting, and user management
• Stripe: For payment processing and subscription management (Stripe Privacy Policy)
• OpenRouter: For LLM API routing (GPT-4o-mini, Gemini Flash, DeepSeek)
• Umami Analytics: For privacy-focused, anonymized app analytics (no personal data shared)

10. Children's Privacy

Nyther is not intended for users under 17 years of age. We do not knowingly collect personal information from children. If we discover that a child under 17 has provided us with personal information, we will delete such information from our systems. After-dark mode has an additional 18+ age gate.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence (our database is hosted in Singapore via Supabase; our server infrastructure is in the United States). We ensure appropriate safeguards are in place to protect your information, including encryption in transit and at rest.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Legal basis for processing: contract performance (to provide the service) and legitimate interest (to improve the service)
• Right to data portability
• Right to restriction of processing
• Right to object to processing
• Right to lodge a complaint with your local supervisory authority
• Right to erasure (see Section 8.2 above)

14. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes
• Displaying an in-app notification

15. Contact Us

© 2026 Nyther Technologies. All rights reserved.
Home | Terms of Service | Support