Your private room deserves plain answers.

1. Scope and operator

This Privacy Policy explains how Ambrel App ("Ambrel," "we," "us," or "our"), a California-based service operated as a sole proprietorship, handles personal information through helloambrel.com, app.helloambrel.com, and related Ambrel services.

It applies to visitors, account holders, and subscribers. It does not govern third-party websites or services with their own privacy policies, including Stripe's hosted checkout and billing portal.

2. Information we collect

Information you provide

• Account information: email address, display name, password hash, verification status, selected companion, and account preferences.
• Conversations and memory: messages, details you ask or allow a companion to remember, known facts, preferences, relationship context, inside jokes, reminders, and feedback.
• Media: images you upload, requests for generated images, voice-note requests, captions, and related files and metadata.
• Consent and support: accepted policy versions, age and AI acknowledgments, account requests, and messages you send to support.
• Billing relationship: subscription status and identifiers received from Stripe. Ambrel does not receive or store your complete card number.

Information collected automatically

• IP address, browser and device details, timestamps, requested pages, referral or campaign information, session and authentication records, and security signals;
• feature usage, quota consumption, delivery status, errors, latency, model or provider metadata, and operational logs; and
• web-push subscription endpoints and browser encryption keys if you choose to enable notifications.

Conversation content can be personal or sensitive depending on what you choose to share. Please avoid providing information you do not want processed to deliver the service.

3. How we use information

We use personal information to:

• create and secure accounts, verify email addresses, and authenticate sessions;
• generate companion replies, images, and voice notes and maintain conversation continuity;
• deliver reminders and notifications you request;
• enforce plan allowances, process subscriptions, reconcile billing events, and provide account support;
• detect fraud, abuse, unsafe activity, security incidents, and technical failures;
• operate, debug, evaluate, and improve Ambrel's reliability, safety, and user experience;
• create aggregated or de-identified operational and financial analytics; and
• comply with law, enforce our Terms of Service, and protect users, Ambrel, and others.

4. How we disclose information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We disclose information only as reasonably necessary to the following categories of recipients:

• Infrastructure and security providers, including hosting, networking, content delivery, storage, monitoring, and protection services such as Cloudflare;
• AI and media processors that generate or help generate text, images, or voice notes;
• Payment services, including Stripe, for checkout, subscriptions, billing management, fraud prevention, and transaction records;
• Transactional email and notification services, including Resend, to deliver verification, recovery, and account messages;
• Professional advisers and authorities when reasonably necessary for legal, accounting, security, or compliance purposes; and
• A successor organization if Ambrel undergoes a financing, reorganization, asset transfer, or change in business form, subject to applicable privacy obligations.

Providers process information under their own terms and our arrangements with them. We seek to send each provider only the information reasonably needed for its role, but no internet service can guarantee that a provider will never experience an incident.

5. AI, memory, images, and voice

When you send a message, upload an image, request media, or use memory features, Ambrel processes that content and relevant conversation context to produce the requested experience. Processing may occur on Ambrel-controlled systems or through specialized service providers.

Ambrel stores conversation and memory information so the companion can continue later rather than resetting each session. Stored memory may include preferences, people or plans you mention, emotional context, and recent conversation turns. AI systems can misunderstand or infer information incorrectly; you may correct information through conversation or contact us, and you may permanently remove account data through account deletion.

Uploaded and generated media is treated as private account content and is not presented as public user content. Do not upload images or other media unless you have permission to do so.

6. Retention and deletion

We retain active account information, conversations, memories, and private media while needed to provide the service, honor your settings, maintain security, resolve disputes, and meet legal obligations. Operational logs and job records may be kept for shorter or longer periods depending on their security, reliability, accounting, and legal purpose.

You may permanently delete your account from the plan-and-usage controls. Successful deletion immediately revokes active sessions and account capabilities and removes your profile details, password hash, verification state, push subscriptions, conversation text, companion memory, reminders, private image and voice files, active entitlements, and provider references held on the account.

After deletion, Ambrel retains only a minimal non-login tombstone with an internal numeric identifier and deletion timestamp. Versioned consent records may remain for legal and audit purposes after request metadata and evidence references are removed. De-identified aggregate usage may remain for operational or financial accounting. Ambrel's Stripe webhook ledger retains event identifiers and payload digests rather than raw payment payloads. Stripe may independently retain transaction records as required by law and its policies.

If Ambrel cannot obtain a definitive cancellation response for a linked Stripe subscription or cannot remove a private stored file, account deletion stops instead of falsely reporting success. You can retry or contact us for assistance.

7. Your choices and privacy rights

You can:

• review and update basic account information through the service;
• disable browser notifications through Ambrel or your browser settings;
• manage or cancel a subscription through Stripe's customer portal;
• permanently delete your Ambrel account; and
• contact us to request access, correction, or deletion of personal information or to ask a privacy question.

Depending on where you live, you may have additional rights to know, access, correct, delete, or obtain a copy of personal information and to appeal a denied request. Ambrel will honor applicable rights and will not discriminate against you for exercising them. We may need to verify your identity before acting on a request.

Because Ambrel does not sell personal information or share it for cross-context behavioral advertising, it does not currently offer a "Do Not Sell or Share" link. If these practices change, we will update this policy and provide required choices before the change takes effect.

8. Tracking disclosures

Ambrel uses essential session, security, attribution, and operational technologies. We do not currently use third-party advertising pixels to follow users across unrelated services for targeted advertising.

Some browsers send "Do Not Track" signals, but there is no universally accepted response standard. Ambrel does not currently change essential service behavior in response to Do Not Track. Where legally required, we honor recognized opt-out preference signals such as Global Privacy Control for activities to which those signals apply. Third-party services linked from Ambrel may follow their own tracking practices.

9. Security and international processing

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, password hashing, scoped administrative permissions, encrypted network transport, session revocation, and deletion controls. No security measure or transmission method is completely secure, so we cannot guarantee absolute security.

Ambrel is operated from the United States. Service providers may process information in the United States or other countries where they operate. Those locations may have different data-protection laws than your home jurisdiction.

10. Adults only, changes, and contact

Ambrel is intended only for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to Ambrel, contact us so we can investigate and delete it.

We may update this Privacy Policy as the service or law changes. For material changes, we will provide notice through the service, by email, or through another reasonable method when required. The effective date and version at the top identify the policy presented for acceptance.

To exercise a privacy right or ask a question, email [email protected]. Please do not send passwords, payment-card numbers, or highly sensitive conversation content by email.