Privacy Policy

Overview

This Privacy Policy explains what Swoony (operated by Vlippers) collects, how we use it, and the choices you have. Swoony is an adult (18+) service. It is written around US law, including the California Consumer Privacy Act (CCPA/CPRA) for California residents, and includes a section for users in Brazil under the Lei Geral de Proteção de Dados (LGPD).

Information we collect

Account information: your email address and display name. If you sign in with Google or Apple, we receive basic profile information from them. Profile avatars are shown as initials - we do not collect uploaded profile photos.

Conversations: the messages you send and the AI responses, along with relationship state such as progression, the scenes and character POVs you unlock, and which characters you chat with.

Characters: the characters you create - your text descriptions and the character art you upload.

Payments: when you buy Hearts, our payment processor (Stripe on the web, Apple or Google in the apps) handles your payment. We receive a record of the purchase but never your full card number.

Usage and analytics: page views and key actions (for example, creating a character, starting a chat, or beginning a purchase), collected via Google Analytics and Amplitude.

Technical data: log, device, and usage information needed to operate and secure the service.

Sensitive information

Romance chats can reveal intimate details about you, such as your sexual life or orientation, especially if you turn on the Uncensored setting. We process that content only to run your chats and keep the service safe. We never use it for advertising, never sell it, and you can delete any chat, or your whole account, at any time. Turning on Uncensored requires your explicit confirmation that you are 18 or older and want this content; you can turn it off in any chat.

How we use your information

To provide and personalize the service; remember your relationships and progression; generate character responses, scenes, and POVs; store the character art you upload; process Hearts purchases; measure and improve the service; keep the service safe through moderation and abuse and fraud prevention; communicate with you (for example, sign-in emails or optional notifications you turn on); and comply with the law.

AI processing

To generate character responses, your messages and the relevant context are sent to our AI model providers, which process them to return a response. Character art is uploaded by you and is not sent to AI model providers. We work to limit what is shared to what is needed.

Content safety

You upload your own character art. Uploaded images are sanitized (re-encoded, metadata stripped) and may be reviewed and removed. Prohibited content - including any sexualization of minors - is not allowed. If child sexual abuse material (CSAM) is ever identified, it is reported as required by law, including to the National Center for Missing & Exploited Children (NCMEC).

Analytics

We use Google Analytics and Amplitude to understand how Swoony is used. These tools use cookies and similar identifiers for measurement. We have configured them for first-party measurement only and have disabled advertising and cross-context behavioral-advertising (“sharing”) features. You can opt out using your browser's Do-Not-Track or Global Privacy Control signal, the Google Analytics opt-out browser add-on, or by contacting us.

Service providers we share with

We share data with vendors that run Swoony on our behalf, under contract: hosting (Vercel), database (Neon), image storage (Vercel Blob), AI models for chat and scenes (OpenRouter and the underlying model providers), payments (Stripe, Apple, Google), email delivery (Resend), push notifications (Apple), and analytics (Google Analytics, Amplitude). We do not sell your personal information.

Legal and safety disclosures

We may disclose information to comply with the law, enforce our Terms or Content Policy, or protect the safety of our users and others - including mandatory CSAM reporting.

Cookies and sessions

We use a session cookie to keep you signed in, a cookie to remember your language, and analytics cookies/identifiers as described in the Analytics section. We do not use third-party advertising cookies.

Data retention and deletion

You can delete any chat from your chats list, and delete your account at any time from your profile, which deletes your account, chats, scenes, and POVs. We may retain limited records where required for legal, security, or financial reasons.

Security

We use industry-standard security measures to protect your data in transit and in storage. No system is perfectly secure, and we cannot guarantee absolute security.

California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it; to request access to, correction of, or deletion of your personal information; and not to be discriminated against for exercising these rights.

We do not sell your personal information. Some analytics may be considered “sharing” under California law; we have disabled cross-context behavioral-advertising features, and you can opt out as described in the Analytics section. To exercise your rights, contact us at harris@vlippers.com.

Users in Brazil (LGPD)

If you are in Brazil, the Lei Geral de Proteção de Dados (Law 13.709/2018) applies to how we handle your personal data. Vlippers is the controller (controlador). Our data protection officer (encarregado) can be reached at harris@vlippers.com.

Legal bases: we process your account, conversation, and payment data to perform our contract with you (art. 7, V); analytics and security data on our legitimate interest in running and protecting the service (art. 7, IX); and sensitive data that may appear in your chats, such as sexual life or orientation, only with your consent (art. 11, I), which you give when you create an account and, for explicit content, when you turn on Uncensored. You can withdraw consent at any time by turning Uncensored off, deleting a chat, or deleting your account.

Your rights (art. 18): confirmation that we process your data; access; correction of incomplete or outdated data; anonymization, blocking, or deletion of unnecessary or excessive data; portability; deletion of data processed with your consent; information about who we share data with; information about the consequences of refusing consent; and revocation of consent. To exercise them, write to harris@vlippers.com. You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

International transfer: your data is stored and processed in the United States and other countries where our service providers operate, under contractual safeguards (art. 33).

Children

Swoony is strictly for adults 18 and over. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete it.

International users

Swoony is operated from the United States. Your information may be processed in the United States and other countries where our service providers operate. Users in Brazil: see the LGPD section above.

Changes to this policy

We may update this policy; the "Last updated" date above reflects the latest version.

Contact

Privacy questions or requests: harris@vlippers.com.