Last updated: 2026-06-11
Privacy Policy
On this page
Who is the controller
DesireOS Ltd (United Kingdom) is the data controller for the personal information processed via this site. For UK GDPR enquiries contact [email protected].
What we collect
We process the following categories of personal data:
- Account data — email, password hash, display name. Required to operate your account.
- Profile + companion data — companions you create, memories, in-app preferences. Stored only against your account.
- Conversation content — messages between you and your companions. Persisted so you can resume.
- Wallet + transaction data — coin balance and transaction ledger. Required for billing and refund disputes.
- Analytics — anonymous device id, session id, page views, key product events (signup, message sent, paywall viewed). Only collected if you accept the cookie banner. See Cookie Policy.
- Technical metadata — IP address (hashed at ingest, never stored raw), browser user agent, country (from CDN/geo header). Used for fraud prevention and aggregate geographic reporting.
Lawful basis (UK GDPR Art. 6)
- Contract (Art. 6(1)(b)) — to provide the service you signed up for: account, chat, wallet.
- Legal obligation (Art. 6(1)(c)) — billing records, age verification, abuse-report retention.
- Legitimate interests (Art. 6(1)(f)) — fraud prevention, network security, debugging. Balanced against your rights; you can object at any time.
- Consent (Art. 6(1)(a)) — analytics cookies and marketing emails. Withdrawable at any time via the cookie banner or your account settings.
How we use it
To run the product, bill you, prevent fraud, support you when you contact us, and improve the product through aggregate analytics. We never sell personal data and never share it with advertisers.
Training
Your conversations are never used to train AI models. Not ours, not any vendor's. The chat pipeline is run on dedicated infrastructure with explicit no-training contracts.
Retention
- Account + content: as long as your account is active. Deletion request triggers a 30-day soft-delete window, then permanent erasure.
- Analytics events: rolling 90 days then auto-purged.
- Transaction records: 6 years (UK statutory record-keeping).
- Support tickets: 2 years from resolution.
- Backups: 30 days rolling.
Your rights (UK GDPR Art. 15-22)
You have the right to:
- Access — request a copy of all personal data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion ("right to be forgotten")
- Portability — receive your data in a portable format
- Restriction — temporarily halt processing while a dispute is resolved
- Objection — object to processing based on legitimate interests
- Withdraw consent — for any processing based on consent (analytics, marketing)
Most rights can be exercised in-app at account settings (export your data, delete your account, manage notification consent). For anything else, email [email protected]. We respond within 30 days.
Complaints
If you believe we've mishandled your data, please contact us first at [email protected] — we'll investigate. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.
The service is operated by DESIREOS LTD, registered in England & Wales (company no. 17193635), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, which is the data controller for the purposes of applicable data protection law.