Privacy Policy
Effective date: July 2, 2026
This Privacy Policy explains how ANIMA AI 007 SERVICES - FZCO, a free zone company registered in Dubai, United Arab Emirates (IFZA, Dubai Silicon Oasis) (the "Company", "we", "us") — the operator and data controller of the Amavie service at amavie.ai and our mobile applications (the "Service") — collects, uses, and shares information about you.
If you do not agree with this Policy, please do not use the Service.
1. Information we collect
a) Account information. Email address, display name, an 18+ age confirmation, and authentication identifiers (e.g., your Google or Apple sign-in ID). If you register with a password, it is stored only as a salted cryptographic hash — we never see or store it in plain text.
b) Content you create. Characters and their settings, chats and roleplay conversations, stories, posts, comments, and media you upload or generate. Private conversations are stored so the Service works (e.g., characters keep context and memory) and are not visible to other users; limited access by our staff is possible only for the purposes in Section 3 (e.g., safety review, abuse investigation, legal compliance).
c) Usage and device data. Pages and features used, device and browser type, operating system, IP address, approximate location (country level), language, timestamps, and diagnostic/error data. Used for security, abuse prevention, and product analytics.
d) Payment data. Payments are processed by payment providers (e.g., Stripe, Apple, Google). We receive transaction status and limited billing metadata; we do not store your full card number.
e) Cookies and similar technologies. Required cookies (session, security, preferences) are always active. Analytics cookies are used only with your consent, which you can give or withdraw via the consent banner/settings.
f) Communications. If you contact support, we keep the correspondence to resolve your issue.
We do not knowingly collect data from anyone under 18 (see Section 9), and we do not intentionally collect special categories of data. Note that free-form conversations may contain information you choose to reveal — share thoughtfully.
2. AI processing of your content
Amavie generates content using artificial-intelligence models operated by third-party infrastructure providers — including Google Cloud (Vertex AI / Gemini) for text and images and voice-synthesis providers (e.g., Inworld AI, Fish Audio) for audio. To generate a response, relevant parts of your prompts, conversations, and character context are transmitted to these providers, which process them as our processors, under contracts that limit their use of the data to providing the service. Per their API terms, these providers do not use such content to train their foundation models.
We do not sell your conversations, and we do not use the content of your private chats for advertising. We may use aggregated or de-identified data (which cannot reasonably identify you) to improve the Service, and we use automated safety classifiers on content — including private content — to detect prohibited material (e.g., content involving minors; see our Child Safety Standards).
3. How we use information
- Provide and operate the Service, including AI generation (Section 2), personalization, and content recommendations.
- Keep the Service safe: detect and prevent fraud, abuse, spam, and violations of our policies; automated content moderation with human review of flagged material.
- Communicate with you about your account, transactions, and material updates.
- Analyze usage to improve the product (analytics with consent where required).
- Comply with legal obligations and enforce our Terms.
4. Legal bases (EEA/UK users)
Where GDPR/UK GDPR applies, we process personal data on these bases: contract (operating the Service you signed up for, including AI processing of your content); legitimate interests (security, abuse prevention, product improvement); consent (analytics cookies; withdrawable at any time); legal obligation. Users in other jurisdictions (including under the UAE Personal Data Protection Law) have equivalent protections as described in this Policy.
5. How we share information
We do not sell personal data, and we do not share it for cross-context behavioral advertising. We share information only with:
- Processors that help us run the Service, bound by data-processing agreements: Google Cloud Platform (hosting and AI — Vertex AI/Gemini), voice-synthesis providers (Inworld AI, Fish Audio), Cloudflare (networking, security, delivery), Stripe (payments), Twilio SendGrid (transactional email), Sentry (error monitoring), Google Analytics (analytics, only with consent).
- Authorities, where required by law, or to protect the rights, safety, or property of users, the public, or the Company (including mandatory child-safety reporting).
- A successor entity, in a merger, acquisition, or asset sale — with notice to you.
6. Retention
We keep your data while your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except: backups (retained up to 30 days on a rolling basis), records we must keep by law (e.g., transaction records), and safety/moderation records (e.g., CSAE reports and enforcement evidence), which we retain as required or permitted by law. Content you shared publicly may persist in other users' contexts (e.g., replies quoting your post) after your account is deleted.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent at any time (without affecting prior processing). You will not be discriminated against for exercising these rights. To exercise them, email
[email protected] from the address linked to your account — we respond within 30 days. You may also lodge a complaint with your local data-protection authority.
8. Automated decision-making
We use automated classifiers for content moderation and abuse prevention. Decisions that significantly affect you (such as account termination) are subject to human review — contact
[email protected] to contest an enforcement decision.
9. Children
The Service is 18+. We do not knowingly collect data from anyone under 18. If you believe a minor is using the Service, contact us at
[email protected] (or
[email protected] for safety concerns) and we will terminate the account and delete the data.
10. International transfers
We operate globally; your data may be processed in countries other than your own (including the UAE, EU, and US). Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.
11. Security
We use industry-standard measures: encryption in transit (TLS) and at rest, access controls, network isolation, and audit logging. No system is 100% secure; we cannot guarantee absolute security, but we notify affected users and regulators of breaches where the law requires.
12. Changes to this Policy
We may update this Policy. Material changes are announced by email or in-app notice before they take effect; the effective date above always reflects the current version.
13. Contact
Data controller: ANIMA AI 007 SERVICES - FZCO (operator of Amavie)
DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates
Privacy contact:
[email protected]Messages You Send Us on Public & Support Channels
What we collect. When you message us on our official channels (website feedback/support, Discord, X, Telegram) or are @-mentioned interacting with us, we process: the content of your message, your public username/handle and channel author ID, the channel and a link to the message, the time it was received, and our internal handling record (how the message was categorized, its priority, and whether it was answered automatically or routed to a human).
Why we process it. To understand and respond to your message; to operate and improve our support and community engagement; to keep our channels safe (detecting abuse, spam, and safety/crisis situations); and to maintain an audit trail for quality, accountability, and legal-defense purposes.
Legal basis (GDPR, for EU/EEA users). Our legitimate interests in operating and securing our support and community channels and in responding to you (Art. 6(1)(f)); and/or performance of, or steps toward, a contract where your message relates to your use of the service (Art. 6(1)(b)). Where you voluntarily include sensitive information, we process it only as necessary to respond and, where applicable, on the basis of your decision to share it or your consent.
Automated processing & human oversight. Your message is first classified by an automated system. Routine questions may receive an automated reply; sensitive, consequential, or unclear matters are routed to a human. We do not subject you to decisions producing legal or similarly significant effects based solely on automated processing; you may request human intervention (GDPR Art. 22).
Retention. We retain inbound messages and their handling records for a limited period: handled messages are deleted after 30 days, and the store is capped at 2,000 messages (oldest handled messages are removed first). We do not retain this data longer than necessary for the purposes above.
No model training. We do not use your channel/support messages to train AI models.
Your rights & contact. Depending on where you live, you have rights to access, correct, delete, object to, or restrict processing of your personal data, and to data portability. To exercise these rights, or to ask us not to process your public messages, contact [email protected]. See the rest of this Privacy Policy for the full description of your rights and how to lodge a complaint with a supervisory authority.
