Privacy Policy

We process the following categories of personal data:

• Account data — email, password hash, display name. Required to operate your account.
• Profile + chat data — display name, in-app preferences, and memories from chats with catalog girls. Stored only against your account.
• Conversation content — messages between you and catalog girls. Persisted so you can resume.
• Voice Note data — the selected creator reply, creator voice identifier, generated audio, provider request identifier, and delivery metadata when you choose paid Voice Notes. ElevenLabs receives only the selected reply for speech synthesis, not your full conversation, email, subscription records, or DesireOS user id.
• Billing + transaction data — Max plan, paid-until date, payment receipts, and refund records. Required for billing and refund disputes.
• Analytics — anonymous device id, session id, page views, key product events (signup, message sent, paywall viewed). First-party and privacy-preserving; processed on a legitimate-interest basis, with no third-party ad trackers and no cross-site tracking. You can opt out at any time — see Cookie Policy.
• Technical metadata — IP address (hashed at ingest, never stored raw), browser user agent, country (from CDN/geo header). Used for fraud prevention and aggregate geographic reporting.

Paid Voice Notes are optional and off by default. When you turn them on, one selected creator reply from each eligible normal reply is sent to ElevenLabs to create the audio. We do not send ElevenLabs your full chat history or direct account identifiers in the speech request.

The current Voice Notes service uses ElevenLabs' standard retention. The selected text and generated audio may appear in its request history, and limited information may also be retained for moderation, security, support, and troubleshooting. Turning Voice Notes off stops new replies being sent for speech generation; replaying an already delivered note does not create a new provider request.

DesireOS does not use your conversations to train its own AI models. Our production chat-inference providers operate under no-training terms.

Voice Notes use ElevenLabs. We have disabled the workspace setting that permits submitted self-serve data to be used to improve its models. This training opt-out is separate from standard request history and moderation or security processing, which still apply.

• Supabase (database + auth) — EU-region hosting
• Railway (application hosting)
• Authorised payment processors — card details are entered in processor-controlled secure embedded or hosted payment fields and never touch our servers; we receive only the payment amount, outcome, limited card-display details such as the last four digits, and a pseudonymous order reference
• Transactional email provider — verification and account emails
• RunPod (AI inference) — no training, no logging beyond ops
• ElevenLabs (optional paid Voice Notes) — receives the selected creator reply and voice identifier to synthesise audio under its standard-retention service
• Anthropic Claude (eval-lab judge only — internal operator use, never user content in production)

ElevenLabs' standard customer data is hosted in the United States, and its international affiliates and sub-processors may also process data for support and moderation. International transfers are covered by the safeguards in our processor agreements, including applicable UK transfer mechanisms.

You have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion ("right to be forgotten")
• Portability — receive your data in a portable format
• Restriction — temporarily halt processing while a dispute is resolved
• Objection — object to processing based on legitimate interests, including opting out of our first-party analytics (on the Cookie Policy)
• Withdraw consent — for any processing based on consent (e.g. marketing emails)

Delete your account in-app at account settings. To opt out of marketing, request a copy of your data, or for anything else, email [email protected]. We respond within 30 days.